1. What personal data do we collect about you, why and why is it justified?
1.1 Provision of the website and creation of logfiles
1.2 Website Analytics
1.3 Contact form and contacts via other channels
1.4 Online job application
1.5 Use of specific services
1.6 Preserving our economic interests and complying with legal obligations applicable to NACORA
1.7 Business management systems
2. Use of cookies
3. Social networks
4. Links to other websites
5. With whom do we share your personal data?
6. How long do we store your personal data?
7. What are your rights and how can you exercise them?

1. What personal data do we collect about you?

Most of our services do not require any form of registration, allowing you to visit our website without telling us who you are. However, some services and communications may require you to voluntarily provide us with personal data, which may include identification data and contact details, and professional data in the context of a job application. Some website usage data will automatically be collected when you visit our website. If you do not provide such data, we may not be able to provide services or information to you or enter into commercial engagements with you.

1.1 Provision of the website and creation of logfiles

On each retrieval of our website, our system automatically gathers data and information from the computer system of the accessing computer:

• Information on the browser type and the version used
• The user’s operating system
• The user’s IP address
• Data and time of the access
• Websites from which the user’s system reaches our website
• Websites that are called up by the user’s system via our website

The data will likewise be stored in the logfiles of our system. This data will not be stored together with other personal data of the user.

1.2 Website Analytics

This website uses the open-source web analytics service Matomo Analytics. Matomo Analytics uses technology that allows us to analyze user behavior on our website to improve our website by assigning session IDs to users and creating statistical aggregated data. For this purpose, we use cookies as described in Section 2 of this Privacy Notice. The use of Matomo cookies, and thus Matomo Analytics itself, is based on your explicit consent, which you can give via banner when you first visit the site or at any time via our consent portal (link). In order to store your preferences for the use of Matomo Analytics, a strictly necessary cookie is set.. You can revoke your consent with effect for the future at any time via our consent portal (link). 

1.3 Contact form and contacts via other channels

You have the option of contacting us via our website using the contact form, by email or by telephone. In this case, the data you provide, as well as your telephone number if you contact us by telephone, or your email address if you contact us by email, will be processed for correspondence with you and for processing your request. The legal basis for the data processing is our legitimate interest in providing and using a timely information medium to best fulfil your requests and manage our professional relationship with you. 

If you contact us online via the contact form, it is mandatory to provide your first and last name, email address, country, as well as a description of your request.

1.4 Online job application

Our online job applications are fully implemented and managed by the talent community program of Kuehne + Nagel. For more information about how your personal data will be processed, please review the Kuehne + Nagel Job Portal privacy policy at https://privacy.kuehne-nagel.com/-/website-privacy-policy#/.

1.5 Use of specific services

To use certain services (e-Insurance and BMS), you must log in by entering your user ID and password, which you will receive directly from Nacora, into an input mask. This data is transmitted to us and our service providers and stored by them and us. We process this data based on our legitimate interest to provide you with access to content relevant to you and to fulfill a contract with you. 

If you do not remember your password, you can reset it by entering your Nacora Clientside user ID and email address in the mask. We will only use this information to provide you with a new password at your request based on our legitimate interest and to fulfil a contract with you. 

1.6 Preserving our economic interests and complying with legal obligations applicable to NACORA

We process your personal data, as necessary and based on our legitimate interest, to preserve the company’s economic interests, remain competitive in the market, and ensure compliance and reporting, such as (a) complying with our policies, legal and regulatory requirements, including labor laws, money laundering, anti-bribery, and anti-corruption laws and regulations, (b) enforcing our terms and conditions, (c) protecting our operations or those of any of our affiliates, (d) protecting our rights, privacy, safety, or property, and that of our affiliates, you, or others, (e) preventing, monitoring and managing cases of alleged misconduct or fraud, misuse of IT systems, physical security, data loss, IT and network security, (f) conducting internal investigations, audits, and (g) defending litigation. 

1.7 Business management systems

When you enter into a business relationship with us, we process your personal data through our business management systems such as the Broker Management System (hereinafter "BMS"), the Marine Liability Claims Management System (hereinafter "eClaimNEW") or the Cargo Insurance Certificate Management System (hereinafter "e-Insurance") in order to properly fulfil a contract with you or to execute pre-contractual measures and provide you with the requested services. 

In this context, we process the following business contact information for the creation of an account, the secure login to the portals, payment, for the proposal of an insurance, and for handling the report of a loss:

• Identification and contact data (first name, last name, email, private address, phone number, photo, ID and password)
• Encryption key
• Financial or payment data
• Information required for insurance proposal (e.g., FNOL/claim data, referral data and validation data)
• Business contact details such as employee data including employee ID logins, sex, job title and role, business division and office location
• Information to report a loss (e.g., ID login and claim number, security number, country and state, insurance policy number, certificate number and date). 

When you request a personnel insurance policy from a NACORA company that provides personnel insurance, you may be asked to provide special categories of data, such as health-related data or your social security information. This information is required to obtain a personnel insurance Notice and is only collected with your consent. If you choose not to provide this information, the respective NACORA company will not be able to provide the requested personnel insurance. 

For each business management system, the respective data protection declaration of the software provider applies insofar as this provider acts as controller for the corresponding data processing.

Description of the systems

• BMS manages centralized insurance policies, claims, CRM, reports and invoices in a consistent and secure manner to comply with legal obligations. The processing of personal data is based on our contractual obligations arising from the insurance contract with you, as well as our legitimate business interests, such as accessing the business management system to identify appropriate insurance coverage solutions. In addition, we may be required to retain certain information about you as a result of instructions from insurers, financial service providers or government agencies.
• eClaimNEW maintains all data and information related to the processing of transportation and logistics liability claims and recovery services for Kühne + Nagel based on our contractual relationship with you.
• e-Insurance global certificate and insurance booking system for cargo insurance. It enables collaboration and exchange of certain data elements between clients based on a contractual relationship or for the purpose of you obtaining a cargo insurance offer. Certain customer and shipment data stored in e-Insurance is used by MyNacoraQuote (MNQ) to generate insurance quotes. 

Login

For accessing the e-Insurance and BMS sites, you will need to login by entering your user ID and password, which you will receive directly from Nacora, in an input mask. Such data is transmitted to us and our service providers and stored by them and us. We process this information based on our legitimate interest to enable you to access the content specifically relevant to you and to fulfil a contract with you. 

Renewal of a password

If you do not remember your password, you can reset it by entering your Nacora Clientside user ID and email address in the mask. We will only use this information to provide you with a new password at your request based on our legitimate interest and to fulfil a contract with you. 

Reporting a loss, view claim status, verify certificate

If you wish to report a claim, view the claim status, and verify the customer certificate, you will be asked to complete a form and provide information, including the contact details of the person reporting the claim (the data usually refers to legal entities). We use this data based on our contractual relationship with you and our legitimate interest in responding to your request and providing you with the requested information. 

3. Social networks

We maintain NACORA pages in the social network LinkedIn to inform about our services and news and to communicate with active customers. LinkedIn collects your personal data, especially by means of cookies, which are usually used for market research and advertising purposes. The processing may take place outside the European Union.

The provider in the EEA or the UK is: LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, D02 CA30, Ireland, and outside the EEA and the UK: LinkedIn Inc, 1000 W. Maude Avenue Sunnyvale, CA 94085, USA. You can adjust your LinkedIn privacy settings independently in your user account by the following link: https://www.linkedin.com/help/linkedin/answer/a1337839/ihre-konto-und-datenschutzeinstellungen-verwalten-ubersicht?lang=en. 
Details can be found in the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy

If you visit our LinkedIn profile and the GDPR is applicable, we are jointly responsible with the operator of the social media platform for the data processing and have therefore entered into a joint controller agreement (“Page Insights Joint Controller Addendum”), https://legal.linkedin.com/pages-joint-controller-addendum) concerning LinkedIn’s processing of personal data into aggregated data called Page Insights. You can assert your rights as defined in section 7 both against us and/or against the operator of the respective social media portal. Please note that despite the joint responsibility, we do not have any influence on the data processing procedures of LinkedIn. 

5. With whom do we share your personal data?

We can store your personal data or otherwise pass it on to our affiliates or further trustworthy business partners, who perform services in our name, for example, for technical support to evaluate the usefulness of this website for marketing purposes or other types of service providers or other third parties such as professional advisors, regulators, or governmental authorities.

Within NACORA Group: We may share your personal data with NACORA Group affiliates as necessary for the processing purposes as described in this Privacy Notice. Details of NACORA affiliates can be found on our website at www.nacora.com/contact.

With data processors: Certain service providers such as IT support, logistics, marketing, and business management system providers (hereinafter “processors”) may receive your personal data. We have conducted contracts with these processors to ensure that personal data is processed based on our instructions and in compliance with this Privacy Notice, and other suitable measures regarding confidentiality and security. We pass on your personal data to these processors exclusively to the required extent to perform services that you have requested or authorized and to protect your and our rights, property, or security.

Certain other third parties: Your personal data may need to be shared with group activities partners, professional advisors, regulators, governmental authorities, and other similar bodies, if we are obligated to do so based on applicable laws, orders by courts or other authorities, or if this disclosure is required to assist in legal or criminal investigations or court proceedings.

Please note that the companies of the NACORA Group, as well as authorities, customers, and suppliers to whom we may pass on your personal data for the above-mentioned purposes, might be domiciled outside of your home country, and potentially also in countries with data protection laws that can differ from those applicable in the country where you are domiciled, including all the countries where Nacora is operating, according to the list at www.nacora.com/contact, and the US, Italy, Germany, and Canada. In such cases, we will ensure that suitable measures for the protection of your personal data are taken by introducing suitable legal mechanisms, e.g., EU standard contractual clauses. Please contact us as described in section 8 for a copy of these clauses.

7. What are your rights and how can you exercise them?

According to the applicable data protection law and under the conditions and within the limits outlined in the law, you have the following rights: 

Right to withdraw your consent: If, in accordance with applicable law, you have declared your consent regarding certain types of processing activities (such as for the receipt of direct marketing communication via email, SMS/MMS, fax, and telephone, or for transferring your personal data to a third country), you can withdraw this consent at any time with respect to future processing by contacting us via email, mail or phone as described in section 9 of this Privacy Notice. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

Right to request access to your personal data, respectively to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data.

Right to request rectification of inaccurate personal data concerning you.

Right to request erasure of your personal data, under certain conditions.

Right to request restriction of processing under certain conditions. In this case, the respective data will be marked and may only be processed for specific purposes as defined by law.

Right to object: On grounds relating to your particular situation, you have the right to object, at any time to the processing of personal data concerning you which is based on our legitimate interest.

Right to request data portability: As provided by applicable data protection law, you may – in cases where processing is based on consent or the performance of a contract, and the processing is carried out through automated means – have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.

Right to lodge a complaint: You also have the right to lodge a complaint with the competent supervisory authority in the relevant Member State (for example, the place where you live or work) - contact details can be found here.

Please note that these rights might be limited under the applicable local data protection law.

You can claim your rights at any time by sending us a message to privacy@nacora.com or using the following form.