Providing products and services
Entering into and managing product agreements with you or your employer
We process your personal data when you choose to enter into a savings, pension or insurance agreement with us. Similarly, we process information about you if your employer wishes to enter into an insurance agreement or pension scheme with us in which you are included.
We do this in order to be able to offer, establish and follow up the obligations we have undertaken in the agreement with you or your employer, such as renewal and management of the products, calculation of prices, settlements, disbursements and the moving of agreements.
When you manage your pension account (e.g. change your pension profile) through our self-service solution, we process the financial information you provide us with and which is necessary to carry out the management.
We obtain the information directly from you or your employer, from our internal systems, and from public registers. We are required to verify your identity in accordance with the anti-money laundering rules and legislation. When considering entering into an agreement, and during the contractual relationship, we also process information about other persons associated with the contractual relationship, such as the payer, the beneficiary and the members of a group agreement. For some of our products we need to consider your state of health before an agreement can be entered into. In these cases, it will be necessary to process health information about you.
DNB Livsforsikring AS is responsible for the processing of your personal data.
The purpose of the processing of personal data is to offer, follow up and deliver the savings, pension or insurance agreement you or your employer have entered into with us.
When the agreement has been entered into with you directly, the legal basis for the processing is to be able to fulfil the agreement we have entered into with you. If we need to process health information that is required to enter into the agreement, we will ask for your consent to this.
If the agreement has been entered into with your employer, we have a legitimate interest in processing your personal data. Our legitimate interest is to provide competitive pension and personnel insurance products that comply with applicable legal requirements and safeguard the rights of the members of the schemes. If we need to process health information that is required for entering into the group agreement in which you are included, the legal basis is substantial public interest. The substantial public interest lies in safeguarding our members' pension rights and fulfilling our obligations under Norwegian pensions legislation. Pensions are an important public good aimed at providing financial and social security.
- Identification data
- Contact details
- Relationship data (e.g. information about family or other beneficiaries under the agreement)
- Financial data
- Health information if this is relevant for the conclusion of the agreement
We store personal data for as long as it is necessary to achieve the purpose of the processing.
Personal data we process in order to enter into and manage a product agreement with you or your employer is stored for as long as the agreement is active. After the agreement has been terminated, we store necessary information for up to 20 years for most agreements. For occupational injuries, the retention period is up to 30 years. The legal basis for the retention period is to safeguard your right to make claims under the agreement within the applicable limitation periods.
If a product agreement we offer is not accepted by you or your employer, we retain the information for up to 5 months.
In accordance with our reporting obligations, we may disclose personal data to public authorities and registers, including the following third parties:
- Register for insurance applicants and policyholders (Register for forsikringssøkere og forsikrede, ROFF).
- Insurance companies’ central register of losses/claims (Forsikringsselskapenes sentrale skaderegister, FOSS).
- The health assessment board under Finance Norway – following your specific consent.
- The Norwegian pensions portal Norsk Pensjon – to be able to give you a total overview of your pension agreements.
- Pensjonskontoregisteret (the pension account register) – to be able to move one or more of your pension capital certificates. The company can also help if you wish to move your own pension account.
- Your employer – in cases where disability benefits are granted.
- We share information with another insurance company in connection with a contract being moved to or from us.
We use DNB Bank ASA as data processor in connection with the calculation of offers for group agreements, and to respond to customer enquiries from you or your employer.
When we collect and process information about you, you have several rights under the data protection rules and legislation. This includes the right of access, the right to data portability, the right to rectification of any errors and the right to erasure, which means that we must, on our own initiative, delete information that is no longer necessary for the purpose of the processing. We will always consider any objections you may have to the processing of your personal data, and we will follow up any request you may make to opt out of direct marketing.
Read about how you can exercise your data protection rights on our privacy pages under ‘Your rights’.
Providing information relating to our products and services
We process personal data to provide you with relevant information about what it means to be included in a group pension agreement or have accrued entitlements from such an agreement. For example, we process your contact information, date of birth and information about the agreements you are covered by to be able to send you information about your ‘pensions journey’ with us.
If you are the contact person for an agreement your employer has with us, we process your contact details to provide relevant information about the agreement.
DNB Livsforsikring AS is responsible for the processing of your personal data.
The purpose of the data processing is to provide relevant information about your pension savings with us.
Under the Norwegian Insurance Contracts Act, we are obliged to provide you with basic information about your pension agreement. In addition, we have a legitimate interest in providing you with other important and relevant information about your pension with us.
If we inform you that you may be entitled to compensation, we will process information from your employer that you are no longer in full employment. We regard this as health information. The basis for this processing is substantial public interest. The substantial public interest lies in safeguarding your pension rights and fulfilling our obligations under Norwegian pensions legislation.
- Identification data
- Contact details
- Relationship data
- Financial data
- Health information
We store personal data for as long as it is necessary to achieve the purpose of the processing.
We store personal data for this purpose for as long as it is necessary to send you relevant information about your pension with us.
If you are a contact person, we process your contact details for as long as you are the contact person for your employer’s agreement with us.
We share the information (with units/people) within the DNB Group in a shared customer register.
When we collect and process information about you, you have several rights under the data protection rules and legislation. This includes the right of access, the right to data portability, the right to rectification of any errors and the right to erasure, which means that we must, on our own initiative, delete information that is no longer necessary for the purpose of the processing. We will always consider any objections you may have to the processing of your personal data, and we will follow up any request you may make to opt out of direct marketing.
Read about how you can exercise your data protection rights on our privacy pages under ‘Your rights’.
Settling insurance claims and making disbursements
We process personal data to settle insurance claims and make disbursements in accordance with an agreement with you or your employer, in which you are included. We do this to ensure that your case is handled correctly and to determine whether the terms of the agreement are met.
In connection with this, we use a model for scoring all insurance settlements and disbursement claims for probability of fraud. The model is a case processing tool that has been trained using past cases, and that helps us assess whether a case should be reviewed more thoroughly. The actual scoring process is automated, but cases that are given a high score can be manually assessed by a case officer.
Depending on the terms of the agreement, we must obtain information from you, your employer, NAV (the Norwegian Labour and Welfare Administration), the tax authorities and doctors/health institutions. The data we typically process is tax information and information about pension accrual from your employer. We process financial information, such as account numbers, to ensure payments are made to the correct recipient. Furthermore, we are responsible for obtaining information to ascertain who is the correct recipient of the payment. If a claim is made in connection with an injury or disability, we must also process health information about you.
If we receive a complaint against the decision concerning payment and compensation, we will consider your complaint and the information provided together with the information that formed the basis for the processing of the case. If you have appealed our decision to the Norwegian Financial Services Complaints Board (FinKN), we will forward the necessary information to the Board. More information about the Complaints Board’s processing of personal data can be found in their privacy notice.
DNB Livsforsikring AS is responsible for the processing of your personal data.
The purpose of the data processing is to assess each individual claim for compensation or disbursement, as well as to process each settlement case correctly.
The legal basis for the processing is to be able to fulfil the agreement we have entered into with you directly. We use your consent in cases where we need to process health information associated with your agreement.
When the agreement has been entered into with your employer, the legal basis for the processing is legitimate interest. Our legitimate interest is to provide competitive pension and personnel insurance products that comply with applicable legal requirements and safeguard the rights of the members of the schemes.
If we need to process health information that is required for entering into the group agreement in which you are included, the legal basis is substantial public interest. The substantial public interest lies in safeguarding our members' pension rights and fulfilling our obligations under Norwegian pensions legislation. Pensions are an important public good aimed at providing financial and social security.
- Identification data
- Contact details
- Relationship data (e.g. information about family or other beneficiaries under the agreement)
- Financial data
- Health information if relevant to the case
We store personal data for as long as it is necessary to achieve the purpose of the processing.
Personal data we process in order to enter into and manage a product agreement with you or your employer is stored for as long as the agreement is active. After an agreement has been terminated, we store necessary information for up to 20 years for most agreements. For occupational injuries, the retention period is up to 30 years. The legal basis for the retention period is to safeguard your right to make claims under the agreement within the applicable limitation periods.
In accordance with our reporting obligations, we may disclose personal data to public authorities and registers, including the following third parties:
- Register for insurance applicants and policyholders (Register for forsikringssøkere og forsikrede, ROFF).
- Insurance companies’ central register of losses/claims (Forsikringsselskapenes sentrale skaderegister, FOSS).
- The Norwegian pensions portal Norsk Pensjon – to be able to give you a total overview of your pension agreements.
- Pensjonskontoregisteret (the pension account register) – to be able to move one or more of your pension capital certificates. The company can also help if you wish to move your own pension account.
- Your employer – in cases where disability benefits are granted.
- Norwegian Financial Services Complaints Board (FinKN) – if you make a complaint about a decision to them.
- We share information with other insurance companies if it is necessary to carry out the insurance settlement or payment.
We use DNB Bank ASA as data processor for development, maintenance, security and service in connection with our IT services and cloud services.
When we collect and process information about you, you have several rights under the data protection rules and legislation. This includes the right of access, the right to data portability, the right to rectification of any errors and the right to erasure, which means that we must, on our own initiative, delete information that is no longer necessary for the purpose of the processing. We will always consider any objections you may have to the processing of your personal data, and we will follow up any request you may make to opt out of direct marketing.
Read about how you can exercise your data protection rights on our privacy pages under ‘Your rights’.
Preventing and investigating insurance fraud
We process personal data in connection with concrete suspicion and investigation of insurance fraud or other financial crime. Preventing and detecting cases of fraud is an important part of our corporate responsibility and is essential for protecting our business operations.
We reuse information we obtained when we entered into an agreement with you, or information you have provided in connection with making a claim. The personal data is compiled with other information we obtain from you or third parties, by searching open sources or through covert observation.
We are required to obtain the information and documents necessary to assess the risk associated with our liability, as well as to pay any compensation.
In order to prevent and detect insurance fraud, we use analytical methods for monitoring all ongoing insurance events. We use a model for scoring all insurance settlement and disbursement claims in terms of probability of fraud. The model is a case processing tool that has been trained using past cases, and that helps us assess whether a case should be reviewed more thoroughly. The actual scoring process is automated, but cases that are given a high score can be manually assessed by a case officer.
In certain cases, when we consider it to be necessary, we use covert methods. Covert observation takes place through the use of film, recordings of conversations and images. These methods are only used in cases of legitimate suspicion of fraud or attempted fraud.
DNB Livsforsikring AS is responsible for the processing of your personal data.