Munich Re
Munich Re Service GmbH

Privacy Policy for Location Risk Intelligence On-Demand Service

    alt txt

    properties.trackTitle

    properties.trackSubtitle

    Regarding the Munich Re Location Risk Intelligence On-Demand Service (the “On-Demand Service”), this notice explains how personal data collected by the On-Demand Service is processed and informs you of your rights as client and/or user or other interested party under data protection law.

    1. Who is responsible for the processing of your personal data?

    Munich Re Service GmbH
    Königinstrasse 107
    80802 Munich, Germany
    Tel.: +49 (0)89 38 91 0
    Fax: +49 (0)89 39 90 56
    Email: mrs-inbox@munichre.com

    You can reach Munich Re Service GmbH by email at mrs-inbox@munichre.com or by post at the address indicated above.

    You can contact our Data Protection Officer at the aforementioned address, with the addition “To the Data Protection Officer” or using the contact form at www.munichre.com/en/general/contact/form-data-protection.html and selecting “Munich Re Service GmbH” in the field “Company”.

    2. Which data is collected and processed?

    This On-Demand Service uses essential technical cookies which are required to provide its services. Such cookies are required for basic functions such as authentication and access to secure areas. In addition, they support the anonymous evaluation of user behaviour, which we use to continually optimise our On-Demand Service for you. The On-Demand Service does not use any social media plug-ins.

    (a) We (Munich Re Service GmbH) collect, process and store only the following types of personal data, which are related to your purchases of On-Demand Credits in the On-Demand Service:

    • your customer details (email, name, date of birth, company, address, phone number, last IP address visited, and date of last activity; please note that your account password is encrypted);
    • your order details (order number, order status, total number of orders made via the On-Demand Service, shipping method, order date; billing details such as the billing name, billing email, billing company, billing address, billing phone number, payment method used, VAT number, customer IP address, date paid, and authorisation transaction ID); as well as
    • your order item details (name, price, and quantity).

    (b) Our payment provider Stripe Payments Europe, Limited, The One Building, 1 Grand Canal Street Lower, Dublin 2, Co. Dublin, Ireland (see item 4 below) is the only entity that collects and processes

    • your payment details (name, credit card number, credit card provider, and card expiry date) for the purpose of processing the order via the On-Demand Service.
      However, none of the data is stored by Stripe, Inc. with the exception of the last four digits of your credit card number.

    (c) In terms of a Consent Management Platform (CMP) we use an online service provided by Usercentrics GmbH, Rosental 4, 80331 Munich.

    (d) During online sessions, we use the tracking pixel technology provided by WiredMinds GmbH, Lindenspürstraße 32, 70176 Stuttgart, to analyse user behaviour. Here, visitors’ IP addresses are processed. The processing takes place exclusively for the purpose of collecting company-relevant information such as the company name. The IP addresses of natural persons are excluded from further use (whitelist procedure). IP addresses are not stored at WiredMinds. The data collected by WiredMinds does not allow any conclusions to be drawn about natural persons at any time. WiredMinds GmbH uses this information to create anonymous usage profiles regarding behaviour while on our website. The data obtained in this way is not used to personally identify visitors to our website. We base the processing of the data on your consent (Art. 6(1)(a) GDPR).

    3. For what purpose and on what legal basis is your data processed?

    We process your personal data in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable laws.

    In order to fulfil our (pre-)contractual obligations in keeping with Art. 6(1)(b) GDPR, we collect, process and store your personal data in the On-Demand Service in order to allow the purchase by credit card of packages of On-Demand Credits, as well as the immediate invoicing by email or download of these purchased On-Demand Credits pursuant to Art. 6(1)(b) GDPR (i.e. to fulfil our previously mentioned (pre-) contractual obligations).

    You may revoke your consent at any time. Revoking consent applies only for the future and does not affect the validity of any data processing that takes place prior to revocation.

    4. Who receives your data? What categories of recipients might we disclose your data to?

    Where is your data forwarded to?

    a) Your customer details, order details and order item details are made available to Munich Re Service GmbH, your contractual partner. The subcontractor for the processing of your orders is

    Münchener Rückversicherungs- Gesellschaft
    Aktiengesellschaft in München
    (Munich Reinsurance Company),
    Königinstrasse 107,
    80802 Munich, Germany.

    b) Your payment details are forwarded to our payment provider:

    Stripe Payments Europe, Limited
    The One Building
    1 Grand Canal Street Lower Dublin 2
    Co. Dublin
    Ireland

    c) Accounting data in connection with your purchases in the On-Demand Service is forwarded to

    Erwein von Fürstenberg & Partner
    tax consultants,
    Liebigstr. 3,
    84030 Landshut, Germany

    The accounting data is stored at Erwein von Fürstenberg & Partner in accordance with statutory law.

    d) Your personal data (name, year of birth) is also forwarded to

    IVXS UK Ltd.
    90 Long Acre, 4th floor,
    London, England, WC2E 9RA

    where a financial sanctions check is conducted using their software, ComplyAdvantage. Such data is, however, not stored.

    e) Your VAT number is forwarded to the

    European Commission
    Rue de la Loi 200,
    1049 Brussels, Belgium

    for verifying purposes via the VIES VAT number validation tool. However, no data is stored there.

    5. Do we transfer data to countries outside Europe? 

    If we need to transfer personal data to service providers outside the European Economic Area (EEA), we only do so if the European Commission has confirmed that the level of data protection in the country in question is sufficient, or if data protection is suitably guaranteed in some other way (e.g. through binding, internal company data protection regulations, or the standard contractual clauses of the European Commission and Binding Corporate Rules of the Munich Re Group).

    6. How long do we store your data?

    As a rule, we anonymise or delete your personal data as soon as it is no longer necessary for the aforementioned purpose, unless statutory documentation and retention rules (e.g. Commercial Code (HGB) or Tax code (AO)) applicable to Munich Re Service GmbH require us to keep it longer. We will store your personal data for longer than this only in exceptional cases, where necessary in connection with claims asserted against Munich Re (Group) (statutory limitation period of up to 30 years).

    7. What data protection rights do you have?

    You have a right to information, under certain circumstances a right to have your data corrected or deleted, and a right to restrict its processing. On request, we will make the collected data available to you in a structured, accessible and machine-readable format. Please contact us using the contact details above if you wish to exercise these rights.

    You may also object, at any time, to the processing on grounds relating to your particular situation. This applies in cases where the processing of your personal data is based on Art. 6(1)(e) or (f) GDPR. In this case we shall no longer process your personal data unless we are able to demonstrate compelling and legitimate grounds for the processing which override your interests, rights and freedoms, or when the processing is done in order to establish, assert or defend against legal claims.

    8. Do you wish to file a complaint about the processing of your data?

    You may contact the aforementioned Data Protection Officer or the data protection authorities. The authority responsible for us is:

    Bayerisches Landesamt für Datenschutzaufsicht

    (Data Protection Authority of Bavaria for the Private Sector)
    Promenade 18, 91522 Ansbach, Germany

    Tel.: +49 (0) 981 53 1300
    Email: poststelle@lda.bayern.de or
    Web: https://www.lda.bayern.de/en/contact.html

    9. How will you be informed about changes to the privacy policy?

    Should we make changes to this privacy policy, it will be updated in the privacy section of the On-Demand Service.

    (Last updated: March 2025)