GDPR Data processing modelProcessing of Criminal Convictions and Offence Data for Insurance Purposes

PrivateInsurance

This processing covers the collection and use of offence and conviction data necessary for the conclusion, performance and management of insurance contracts, and for litigation and legal defence purposes.

Purposes (2)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Collect and process data relating to offences, convictions or security measures

Only for the processing of personal data relating to the conclusion, management and performance of insurance, capitalization, reinsurance and assistance contracts.

Contract

Contractual necessity (Art. 6(1)(b) UK GDPR) + DPA 2018 Schedule 1, Part 2 (Insurance). Essential for underwriting and risk assessment.

Allow the insurance company to collect this information for litigation purposes

The collection will enable the company to ensure the establishment, exercise or defense of its legal rights or the defense of the persons concerned.

Legitimate interest

Legitimate Interests (Art. 6(1)(f) UK GDPR) + DPA 2018 Schedule 1, Part 2 (Legal claims). Processing required for legal claim management and defence.

Data categories (2)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Personal data

Data details

Language(s) spokenrequired

Interestsrequired

Situation and family composition of the household and, the identification of children taken into care within the framework of child protectionrequired

Data conservation rules

Active base:

For the duration strictly necessary for contract performance.

Intermediate archiving:

Up to 6 years post-contract or last contact

Aligned with UK statutory limitation periods for contract/tort.

Destruction

Follow-up to infringement report

Data details

Sentence requiredsensitive data

Prosecution required

Seizure or absence of seizurerequired

Data conservation rules

Active base:

For the duration of legal proceedings.

Intermediate archiving:

Retained up to 6 years after closure of proceedings

Destruction

Data subject (5)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Witnesses
Insured persons
Policyholders and claimants
Beneficiaries
Other

Created at:07/08/2023

Updated on:07/25/2025

Nb using:0