https://www.aiglife.co.uk/microsite/privacy-policy/what-is-the-legal-justification-for-our-use-of-personal-information Individual Protection from AIG
...

What is the legal justification for our use of Personal Information?

Summary:

To comply with the law, we need to tell you the legal justification we rely on for using your Personal Information.  The legal justification depends on the purpose for using your Personal Information, but it will usually be considered to be in our legitimate interests or involve your consent.

In detail:

Data protection law seeks to ensure that the way Personal Information is used is fair. 

To comply with the law, we need to tell you the legal justification we rely on for using your Personal Information.

While the law provides several legal justifications, the table below describes the main legal justifications that apply to our purposes for using Personal Information.

We may be required to obtain Personal Information from you to comply with applicable legal requirements, and certain Personal Information may be needed to enable us to fulfil the terms of our contract with you (or someone else), or in preparation of entering into a contract with you (or someone else). We may inform you of this at the time that we are obtaining the Personal Information from you.  In these circumstances, if you do not provide the relevant Personal Information to us, we may not be able to provide our products or services to you.  If you would like further information, please contact us using the details below (see section below ‘Who to contact about your Personal Information?’).

Sensitive Special Categories of Personal Information

For more sensitive special categories of Personal Information we will rely on either:

  • your consent; or
  • one or more of the other legal justifications set out in the table below and typically one of the following two additional justifications (however other legal justifications may be available):
  1. the use is necessary for the establishment, exercise or defence of legal claims, or whenever courts are acting in their judicial capacity (for example, when a court issues a court order requiring the processing of Personal Information); or
  2. the use is necessary for medical diagnosis .

These more sensitive special categories of Personal Information include Personal Information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning an individual’s sex life or sexual orientation.

Additional legal justifications may also be available in the country in which you are based and we may also rely on these justifications from time to time.

Processing of Personal Information relating to criminal convictions and offences is subject to the requirements of applicable law.

 

Purpose for use of Personal Information

Legal Justifications for use of Personal Information

 

You have provided consent

Needed to perform a contract with you or prepare to enter into a contract with you

Needed to comply with legal requirements

It is in our legitimate interests or those of a relevant third party

To communicate with you

 

YES

YES

YES

To make assessments and decisions about you

YES

YES

YES

YES

To provide insurance, claims and assistance services, and other products and services

 

YES

 

YES

To assess your eligibility for payment plans and to process payments

 

YES

YES

YES

To improve the quality of our products and services, for training, and to maintain information security

 

 

YES

YES

To detect, investigate and prevent crime, and manage commercial risks

 

 

YES

YES

To carry out research and analysis

YES

(in circumstances where a legal justification over and above legitimate interests is required by applicable law)

 

 

YES

To provide marketing information

YES

(in circumstances where a legal justification over and above legitimate interests is required by applicable law)

 

 

YES

To allow you to participate in competitions, prize draws and other promotions

 

YES

 

YES

To personalise your experience when using AIG Digital Services

YES

(in circumstances where personalisation is achieved with the use of cookies)

 

 

YES

To manage our business operations and IT infrastructure

 

YES

YES

YES

To manage complaints, feedback and queries

 

YES

YES

YES

To comply with applicable laws and regulations

 

 

YES

YES

To establish and defend legal rights

 

YES

YES

YES

 

Where we rely on our legitimate business interests or the legitimate interests of a third party to justify the purposes for using your Personal Information, those legitimate interests will be set out in a supplemental privacy notice (which is tailored to our relationship with you where this is useful to provide you with a full picture of how we collect and use Personal Information), but in any event our legitimate interests will usually be:

  • pursuit of our commercial activities and objectives, or those of a third party (for example, by carrying out direct marketing);
  • compliance with applicable legal and regulatory obligations, and any guidelines, standards and codes of conduct (for example, by carrying out background checks or otherwise, detecting, investigating and preventing fraud or money laundering);
  • improvement and development of our business operations and service offering, or those of a third party;
  • protection of our business, shareholders, employees and customers, or those of a third party (for example, ensuring IT network and information security, enforcing claims, including debt collection); and
  • analysing competition in the market for our services (for example, by carrying out research, including market research).

We may need to collect, use and disclose Personal Information in connection with matters of important public interest, for instance when complying with our obligations under anti-money laundering and terrorist financing laws and regulations, and other laws and regulations aimed at preventing financial crime.  In these cases, the legal justification for our use of Personal Information is that the use is necessary for matters of public interest. Additional justifications may also apply depending on the circumstances.