1. Controller and Data Processor Roles

Insurteam AG ("the Company," "we," "us," or "our"), 21 Bahnhofstrasse, Zurich 8001, Switzerland, is the controller for personal data processed in connection with use of this website (insruteam.com) and direct inquiries addressed to us. Contact: [email protected].

Insurteam is claims-automation tooling sold to travel insurers and their claims teams. When the Company processes claim documents, FNOL data, and policyholder information through its platform on behalf of an insurer client, the Company acts as a data processor operating under that insurer's instructions. The insurer client is the data controller for policyholder and claimant personal data in that context. If you are a traveler or claimant whose data has been processed through our platform by your insurer, please direct data-rights requests to your insurer in the first instance.

The Company processes all personal data entrusted to it under the Swiss Federal Act on Data Protection (revised FADP, in force 1 September 2023) and, where applicable to EU-resident data subjects, under the General Data Protection Regulation (GDPR).

2. Personal Data We Process

Website and inquiries (the Company as controller):

  • Identity and contact data you submit via our contact or demo-request forms (name, company, email, phone, role);
  • Communication content in emails and messages you send to us;
  • Technical data automatically collected when you browse the site (IP address, browser type, device identifiers, pages visited, referrer);
  • Analytics data collected with your prior consent through our cookie banner.

Claims platform (the Company as data processor on behalf of insurer clients):

  • FNOL intake data submitted by the insurer or its policyholder (claimant name, contact details, policy number, loss event description);
  • Insurance policy documents uploaded by the insurer client for clause extraction;
  • Supporting evidence attached to a claim (booking confirmations, delay certificates, medical summaries);
  • Structured settlement decision outputs generated by the pipeline and returned to the insurer's core system.

The Company does not use claim content to train or fine-tune machine learning models without the insurer client's explicit written consent.

3. Purposes and Legal Bases

For website and inquiry data, the Company processes personal data: to respond to inquiries and book product demonstrations (legitimate interest / performance of pre-contractual steps); to operate and secure the site (legitimate interest); to comply with legal obligations; and, where you have given prior consent through the cookie banner, to run analytics that help us improve the site.

For claims platform data, the Company processes personal data solely to provide the contracted automation service to the insurer client, under the data processing agreement in place with that client. The legal basis is the performance of the service contract with the insurer, supplemented by any legal obligation applicable to the processing.

4. International Transfers

Where the Company transfers personal data to recipients located outside Switzerland or the European Economic Area, it ensures adequate protection through mechanisms recognised by the Federal Data Protection and Information Commissioner ("FDPIC"), including Standard Contractual Clauses or transfers to countries the Swiss Federal Council has recognised as providing an adequate level of data protection. For insurer clients with EU data-residency requirements, the Company offers Swiss-hosted infrastructure and executes GDPR-compliant Standard Contractual Clauses (Module 2, controller to processor) as part of the data processing agreement.

5. Retention

Website inquiry and contact data: retained for 24 months from last contact, then deleted or anonymised. Server and access logs: 90 days. Analytics data: up to 13 months from collection, subject to consent.

Claims platform data processed on behalf of insurer clients is retained in accordance with the data processing agreement with the relevant insurer and the insurer's own record-keeping obligations. Upon contract termination, claims data is deleted or returned to the insurer within the period specified in the agreement, unless mandatory retention laws require longer storage.

6. Your Rights under the FADP

  • Right to information about whether we process your personal data;
  • Right to access and obtain a copy;
  • Right to rectification;
  • Right to erasure or destruction;
  • Right to object to processing not based on contract or legal obligation;
  • Right to data portability;
  • Right not to be subject to automated individual decisions with significant effects.

Email [email protected] to exercise any right. The Company responds within 30 days, with a possible extension where the request is complex. If you are a claimant whose data was processed through the platform by your insurer, the Company will refer your request to the relevant insurer client as controller.

7. Right to Complain

You may lodge a complaint with the Federal Data Protection and Information Commissioner: edoeb.admin.ch. EU residents may also contact their national supervisory authority.

8. Cookies

See our Cookie Policy. Non-essential cookies are not set without your prior consent. The cookie banner allows you to accept or decline analytics cookies at any time.

9. Changes to This Policy

The Company may update this Privacy Policy when the law changes or the Company's processing activities change. Material updates are posted with a revised effective date. Continued use of the site after the revised date constitutes acceptance of the updated policy.

10. Contact

Insurteam AG
21 Bahnhofstrasse
Zurich 8001
Switzerland
Email: [email protected]
Phone: +41 44 500 2200