When an Insurer issues an insurance Policy to an Insured, the Insurer needs to know certain information about the Insured. The Insurer typically collects such information from the Insured during the process of underwriting the Policy. This information is necessary to evaluate the risk presented by the Insured.

When SCOR, as a Reinsurer, enters into a Reinsurance Agreement or Treaty with an Insurer to provide reinsurance coverage, that coverage is usually linked to a Policy, or group of Policies, that the Insurer has written with its own Insured(s). Like an Insurer, the Reinsurer needs to know certain information about the Insured(s). For this reason, the Insurer transmits some data about the underlying Policy(ies) and the associated Insured(s) to the Reinsurer. Some of this data is Personal Data.

In a similar manner, SCOR may also pass some Personal Data on to its own Retrocessionaires.

In relation to its reinsurance, insurance and asset management activities, SCOR will engage in a variety of exchanges of information including, but not limited to, letters, emails, contractual reporting and other similar activities that necessarily may include Personal Data relating to Insured(s) or business-related Personal Data related to employees of the Insurers, Reinsurers, Retrocessionaires, other clients or third parties.

In addition, SCOR has employees, contractors, interns and other similar types of workers. In the course of its professional relationship with its workers, SCOR will come into possession of Personal Data concerning those workers. SCOR also receives information from prospective workers such as curriculum vitae (CV), resumes, letters of interest and other similar documentation and therefore SCOR also possesses Personal Data about such prospective workers.

As described above, primarily acting as a Reinsurer and secondarily as an Insurer, SCOR processes Personal Data, in furtherance of its legitimate business interests, as a data controller and a party to reinsurance agreements or treaties with Insurers / to insurance policies with Insureds. This interest is the fulfilment of SCOR’s contractual obligations to the Insurer who, in turn, has its own contractual obligations to the Insured (or directly the Insured when SCOR is acting as an Insurer). SCOR’s processing of such Personal Data as a Reinsurer is therefore in the interests of both the Insurer and the underlying Insured.

Furthermore, SCOR as a reinsurer regulated under French law within the European Union, is required by law to process certain Personal Data for the purpose of establishing reserves and capital requirements, paying claims in a timely manner and otherwise complying with all applicable laws and regulations relating to its business as a reinsurer.

In addition, in relation to its asset management activity, SCOR Investment Partners SE as an entity regulated under French law within the European Union, is required by law to process certain Personal Data for the purpose of performance of legal or regulatory obligations such as the KYC (Know Your Customer) principle.

The Personal Data provided by Insurers to SCOR may include:

• identifying information such as name, address, occupation and date of birth;
• information concerning health status and other medical information;
• information concerning the death, injury or loss to a person that may be covered by a Policy;
• information concerning certain personal characteristics or habits such as whether a person smokes cigarettes or engages in hobbies or activities that present special insurance risks such as hang gliding or parachuting;
• other information as may be necessary to evaluate any aspect of premiums, claims or coverages under a Policy.

This data is usually provided to SCOR pursuant to contracts between SCOR and the Insurers. In a similar manner, SCOR may provide the same type of Personal Data to its Retrocessionaires, again pursuant to contractual agreements between them. Where those Retrocessionaires are located outside of the European Union, SCOR has entered into appropriate data transfer agreements. In addition, SCOR also maintains a Data Transfer Agreement covering transfers of Personal Data amongst SCOR subsidiaries. SCOR has adopted technical and organizational measures to provide a satisfactory level of protection of such data transferred outside of the European Union. You may request, through SCOR’s Data Protection Officer, that SCOR inform you as to whether your Personal Data in SCOR’s possession has been sent to one or more of our Retrocessionaires and, if so, the identity(ies) of such Retrocessionare(s). You may also request that SCOR’s Data Protection Officer provide you with a copy of the Data Transfer Agreement(s) applicable to your Personal Data.

The Personal Data provided to SCOR in relation to its asset management activity may include information, including but not limited to:

• Professional Identifying information such as name, professional email address or job;
• Telephone voice conversation with staff likely to receive, issue or process market orders.

SCOR’s processing of Personal Data is for one or more of the following purposes:

• Management of the client relationship – SCOR collects Personal Data for the purpose of identifying its professional contacts with its clients, partners or prospects. For this process, SCOR only collects professional data that are necessary to identify and contact its clients, partners or prospects in order to manage its business.
• Provision of Reinsurance / Insurance Coverage – SCOR processes Personal Data for the purpose of identifying, evaluating, underwriting, reserving and making claims payments relating to specific underlying Insureds or to Insureds. SCOR does not conduct automated decision-making activities within the European Union. While SCOR does not engage in profiling as part of its business, one might consider underwriting to be a form of profiling. In this regard, underwriting means that SCOR may review Personal Data concerning a person– such as age, height, weight, occupation, gender, medical history, hobbies or recreational activities, personal habits affecting health such as smoking cigarettes – in order to make a determination as to the risk of mortality (risk of dying) or morbidity (risk of sickness or health problems). When SCOR is acting as a Reinsurer, the results of this underwriting may be passed on to the Insurer who in turn may utilize the information in deciding whether to issue life or health insurance and at what price.
• Obtaining Reinsurance Coverage – As described above, SCOR may purchase its own reinsurance coverage from Retrocessionaires. In this regard, SCOR may provide information to its Retrocessionaires that is similar to the information provided to SCOR by Insurers, as described above.
• Financial Calculations – SCOR is required to evaluate its business and to perform a variety of calculations based on such evaluations. These include establishing reserves for the payment of present or future claims and establishing the capital needed to operate SCOR’s business.
• Statistical Analysis and Studies – Both in conjunction with the required financial calculations described above as well as SCOR’s own understanding of its business needs, SCOR may conduct studies of the loss experience of its business in the past. These studies help SCOR make projections into the future.
• Fraud monitoring and prevention – SCOR regularly reviews certain aspects of Personal Data, such as names, dates of birth, addresses and countries of residence to monitor and prevent insurance fraud. This process helps SCOR ensure that it and its clients do not engage in any business transactions, or enable any business transactions, that are part of any fraudulent scheme.
• Communication, Marketing and Training – SCOR may send professional letters, emails or other correspondence and communications, provide trainings to the employees of its business clients, prospective clients, brokers, or other individuals with whom it does business or who may be involved in one or more business transactions with SCOR. Similarly, SCOR may send newsletters, notices and similar information to individuals in the reinsurance and insurance industry.
• Screening and Review – SCOR regularly screens certain aspects of Personal Data, such as names, dates of birth, addresses and countries of residence against lists provided by governments or organizations relating to sanctions, embargoes, money laundering, politically exposed persons and other similar subjects. SCOR may also undertake a review and evaluation of transactions or proposed transactions to determine whether there is or may be money laundering or terrorism activity. This process helps SCOR ensure that it does not engage in any business transactions, or enable any business transactions, with regard to any sanctioned individuals or legal entities.
• Know Your Customer – In its asset management activity, SCOR is a regulated company with the French financial market regulatory body, the Autorité des Marchés Financiers (“AMF”). SCOR collects Personal Data to perform due diligences and perform checks to comply with Know Your Customer (“KYC”) regulatory requirements.
• Record of the telephone conversations – In its asset management activity, SCOR records telephone conversations with the personnel likely to receive, issue or process a market order, in order to keep a record of the transactions they make.
• Human Resources – SCOR collects and processes Personal Data in order to establish an application for a specific job advertisement or as an unsolicited application, in particular, for the following purposes: checking and assessing suitability for the position to be filled, performance and behavioral evaluations to the extent allowed by applicable law, if necessary for registration and authentication for application via SCOR’s website, if necessary for drawing up any employment contract.

Storage – With the exception of certain Personal Data originating from outside the European Union, SCOR stores all personal data in the European Union.

Retention – SCOR retains Personal Data pursuant to a data storage and retention schedule that is designed to keep Personal Data for so long as SCOR may be required to keep it in order to manage its business and for a reasonable period thereafter. In some instances, SCOR may be required to keep Personal Data for a specified period of time, but in the absence of a specific legal requirement SCOR will keep Personal Data relating to underlying Insureds for a reasonable period beyond the date when SCOR no longer reinsures the risk or is potentially liable to pay claims, whichever is later.

You have the right to know if SCOR has any of your Personal Data. In the event you wish to see a copy of the Personal Data SCOR has concerning you, please contact SCOR’s Data Protection Officer. SCOR will investigate your request promptly.

If after reviewing your Personal Data in SCOR’s possession, you determine that there is an error(s), you may request the error(s) be corrected. If you make such a request, SCOR will investigate and, if appropriate, correct any errors promptly.

If you desire to object to SCOR’s processing of your Personal Data or if you desire to have SCOR restrict its processing of your personal data, you may lodge an objection and/or request for restriction of processing with SCOR’s Data Protection Officer. If you make such a request, SCOR will investigate and, if appropriate, cease processing of your Personal Data or, if applicable, restrict processing of your Personal Data, promptly. However, under applicable law and SCOR’s contractual obligations, your objection and/or request for restriction does not automatically mean that SCOR is required to stop processing your Personal Data, or that SCOR must delete it or restrict its processing of it.

If you desire to request that SCOR erase your Personal Data or you wish to withdraw your consent to the processing of your Personal Data, you may make your request to SCOR’s Data Protection Officer. If you make such a request, SCOR will investigate and, if appropriate, erase your Personal Data and/or cease to process your Personal Data promptly. However, under applicable law and SCOR’s contractual obligations your request does not automatically mean that SCOR is required to stop processing your Personal Data, or to delete it.

Although SCOR considers it to be very unlikely given the nature of its business, if you desire to request that SCOR assist you with moving your Personal Data to another Reinsurer or Insurer, you may make your request to SCOR’s Data Protection Officer. If you make such a request, SCOR will investigate and, if appropriate, provide such assistance promptly. However, under applicable law and SCOR’s contractual obligations your request does not automatically mean that SCOR is required to stop processing your Personal Data, or to delete it.

Although SCOR always makes every effort to address concerns of which it is made aware, you have the right to lodge a complaint with a supervisory authority concerning SCOR’s processing of your Personal Data.

SCOR keeps its privacy notice under regular review. This privacy notice was first published on May 25, 2018 and last updated on May 23, 2023.