Privacy Policy

Controller.

Website access and server logs.

When the website is accessed, the production hosting environment may process technical information needed to deliver and protect it. Depending on the final configuration, this may include the IP address, date and time, requested resource, browser or device information, referrer where technically recorded, and security or operational log information.

This information may be processed to provide the website, maintain stability, prevent abuse, investigate incidents and meet security or legal requirements. Exact hosting-provider, log-content and retention details must be confirmed from the production infrastructure.

Correspondence.

The Correspondence form is designed to collect a name, company, email address, area of interest and message. The current preview prepares a draft in the browser and does not transmit it. If a live service is connected, the notice and form must be updated to describe the actual recipients, providers, routing and retention.

Start Underwriting.

The Start Underwriting form is designed to collect a name, company, email or other contact details, area of interest and free-text risk information. Risk information may include cargo details, route, cargo value and other facts relevant to considering the risk.

Submission of underwriting information does not itself bind cover. Cover exists only when expressly confirmed in accordance with the applicable insurance documentation and underwriting authority.

Please do not submit health information, political opinions, religious beliefs or other special-category personal data through this form.

The current preview prepares a local draft and does not send information to Havenarx.

Purposes of processing.

Where applicable, personal information may be processed to:

• answer enquiries and communicate with prospective customers, brokers and other commercial contacts;
• consider submitted risks and prepare or discuss possible insurance terms;
• carry out insurance distribution activities and manage customer relationships;
• meet regulatory, compliance and recordkeeping obligations;
• operate, maintain and secure the website and related systems;
• establish, exercise or defend legal claims.

Legal bases.

Depending on the context, processing may be based on steps requested before entering into a contract, performance of a contractual relationship, legitimate interests in operating the business, responding to commercial enquiries, protecting systems and managing legal claims, or compliance with legal obligations.

Consent is intended to be used for non-essential analytics or marketing technologies where required. It is not asserted as the basis for every enquiry or insurance-distribution activity. Where processing relies on consent, it may be withdrawn prospectively.

Recipients.

Where relevant and necessary, information may be disclosed to insurers, insurance partners, IT and hosting providers, CRM or email providers, professional advisers, and regulators or public authorities where legally required. Providers and processors must be confirmed from the final operational setup; this policy does not name suppliers that have not been selected.

Analytics, marketing and security tools.

The website uses Google Analytics 4 in Google’s advanced consent mode: its tag is loaded on every page but sets no cookies and identifies no visitor until you enable the Analytics category in Cookie Settings; it does not load PostHog, LinkedIn Insight Tag, Meta Pixel or reCAPTCHA. The analytics cookies, their lifetimes and how to withdraw consent are described in the Cookie & Tracking Policy. Any further tool would remain conditional on its actual implementation and the applicable consent category.

Google Analytics data may be processed by Google LLC in the United States; the applicable transfer safeguard is stated in the Cookie & Tracking Policy once confirmed.

International transfers.

Some future service providers or recipients may process information outside the European Economic Area. Before that occurs, Havenarx must identify the relevant destination, legal basis, transfer mechanism and safeguards. This notice does not assume a mechanism before the production setup is confirmed.

Retention.

Personal information is retained only for as long as needed for the relevant purpose, taking account of the relationship, the status of an enquiry or risk, legal and regulatory recordkeeping duties, limitation periods, disputes, security needs and deletion or anonymisation capability. Exact periods will be documented where the final systems and legal requirements make them applicable.

Your rights.

Subject to applicable conditions, individuals may have rights of access, rectification, erasure, restriction, data portability where applicable, and objection. Where processing relies on consent, consent may be withdrawn prospectively. A complaint may also be made to a competent supervisory authority.

For private-sector data protection in Bavaria, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA). No unverified authority contact details are reproduced here.

Automated decision-making.

The website does not make fully automated decisions that by themselves bind insurance cover. The illustrative underwriting interface does not quote, accept, decline or bind a risk.

Changes to this notice.

This policy will be reviewed against the final hosting, forms, providers and operational processes before public launch, and updated when those arrangements materially change.