Nacora Privacy Policy

Most of our services do not require any form of registration, allowing you to visit our website without telling us who you are. However, some services and communications may require you to provide us with personal data voluntarily. Such data may include identification data and contact details, business-related data, financial or payment data, and professional data in the context of a job application, as well as special categories of data such as health-related data, only if permitted or required by applicable law or with your consent. In addition, some website usage data will automatically be collected when you visit our website. If you do not provide such data, we may not be able to provide services or information to you or enter into commercial engagements with you.

Nacora processes the personal data it collects depending on the relationship you have with us. Unless the processing of your personal data is required or permitted by applicable law, we may process your personal data only to the extent necessary to fulfil a contractual relationship with you or to carry out pre-contractual measures, and to protect our legitimate business interests, such as responding to your inquiries and requests, providing our services, operating and maintaining our website, performing analytics about the use of our website, protecting our commercial interests and ensuring compliance with internal policies and applicable laws. In addition, we may anonymize, and aggregate data collected through this website for statistical purposes to expand our product portfolio and improve our services.

We may obtain your personal data directly from you (e.g., via email, through our contractual relationship, or via our contact forms on our website) or indirectly from public sources or third parties, such as address brokers.

On each retrieval of our website, our system automatically gathers data and information from the computer system of the accessing computer on so-called log files. These log files may contain information such as:

• Information on the browser type and the version used

• The user’s operating system

• The user’s terminal device IP address

• Date and time of the access

• Protocol information (e.g., protocol type, version, requested action, status codes)

• Websites from which the user’s system reaches our website

• Websites that are called up by the user’s system via our website portals

• Error messages

The processing of this data is done in our legitimate interest to enable the use of our website (connection establishment), to permanently ensure system security and stability, to fix technical problems, to ward off attacks on the infrastructure, to perform analyses on the occasion of cyber-attacks and to compile aggregated visitor statistics. After your visit to our website, we store your log files for the above purposes for the duration of the session or for a maximum period of 60 days.

This website uses the open-source web analytics service Matomo Analytics. Matomo Analytics uses technology that allows us to analyze user behavior on our website to improve our website by assigning session IDs to users and creating statistical aggregated data. For this purpose, we use cookies as described in Section 2 of this Privacy Notice. The use of Matomo cookies, and thus Matomo Analytics itself, is based on your explicit consent, which you can give via banner when you first visit the site or at any time via our consent portal (link). In order to store your preferences for the use of Matomo Analytics, a strictly necessary cookie is set.. You can revoke your consent with effect for the future at any time via our consent portal (link).

You have the option of contacting us via our website using the contact form, by email or by telephone. In this case, the data you provide, as well as your telephone number if you contact us by telephone, or your email address if you contact us by email, will be processed for correspondence with you and for processing your request. The legal basis for the data processing is our legitimate interest in providing and using a timely information medium to best fulfil your requests and manage our professional relationship with you.

If you contact us online via the contact form, it is mandatory to provide your first and last name, email address, country, as well as a description of your request.

Our online job applications are fully implemented and managed by the talent community program of Kuehne + Nagel. For more information about how your personal data will be processed, please review the Kuehne + Nagel Job Portal privacy policy at https://privacy.kuehne-nagel.com/privacy-policy-job-portal-kuehne-nagel-group

To use certain services (e-Insurance and BMS), you must log in by entering your user ID and password, which you will receive directly from Nacora, into an input mask. This data is transmitted to us and our service providers and stored by them and us. We process this data based on our legitimate interest to provide you with access to content relevant to you and to fulfill a contract with you. 

If you do not remember your password, you can reset it by entering your Nacora Clientside user ID and email address in the mask. We will only use this information to provide you with a new password at your request based on our legitimate interest and to fulfil a contract with you.

We process your personal data, as necessary and based on our legitimate interest, to preserve the company’s economic interests, remain competitive in the market, and ensure compliance and reporting, such as (a) complying with our policies, legal and regulatory requirements, including labor laws, money laundering, anti-bribery, and anti-corruption laws and regulations, (b) enforcing our terms and conditions, (c) protecting our operations or those of any of our affiliates, (d) protecting our rights, privacy, safety, or property, and that of our affiliates, you, or others, (e) preventing, monitoring and managing cases of alleged misconduct or fraud, misuse of IT systems, physical security, data loss, IT and network security, (f) conducting internal investigations, audits, and (g) defending litigation.

When you enter into a business relationship with us, we process your personal data through our business management systems such as the Broker Management System (hereinafter "BMS"), the Marine Liability Claims Management System (hereinafter "eClaimNEW") or the Cargo Insurance Certificate Management System (hereinafter "e-Insurance") in order to properly fulfil a contract with you or to execute pre-contractual measures and provide you with the requested services. 

In this context, we process the following business contact information for the creation of an account, the secure login to the portals, payment, for the proposal of an insurance, and for handling the report of a loss:

• Identification and contact data (first name, last name, email, private address, phone number, photo, ID and password)

• Encryption key

• Financial or payment data

• Information required for insurance proposal (e.g., FNOL/claim data, referral data and validation data)

• Business contact details such as employee data including employee ID logins, sex, job title and role, business division and office location

• Information to report a loss (e.g., ID login and claim number, security number, country and state, insurance policy number, certificate number and date). 

When you request a personnel insurance policy from a Nacora company that provides personnel insurance, you may be asked to provide special categories of data, such as health-related data or your social security information. This information is required to obtain a personnel insurance Notice and is only collected with your consent. If you choose not to provide this information, the respective Nacora company will not be able to provide the requested personnel insurance. 

For each business management system, the respective data protection declaration of the software provider applies insofar as this provider acts as controller for the corresponding data processing.

Description of the systems

• BMS manages centralized insurance policies, claims, CRM, reports and invoices in a consistent and secure manner to comply with legal obligations. The processing of personal data is based on our contractual obligations arising from the insurance contract with you, as well as our legitimate business interests, such as accessing the business management system to identify appropriate insurance coverage solutions. In addition, we may be required to retain certain information about you as a result of instructions from insurers, financial service providers or government agencies.

• eClaimNEW maintains all data and information related to the processing of transportation and logistics liability claims and recovery services for Kühne + Nagel based on our contractual relationship with you.

• e-Insurance global certificate and insurance booking system for cargo insurance. It enables collaboration and exchange of certain data elements between clients based on a contractual relationship or for the purpose of you obtaining a cargo insurance offer. Certain customer and shipment data stored in e-Insurance is used by MyNacoraQuote (MNQ) to generate insurance quotes. 

Login

For accessing the e-Insurance and BMS sites, you will need to login by entering your user ID and password, which you will receive directly from Nacora, in an input mask. Such data is transmitted to us and our service providers and stored by them and us. We process this information based on our legitimate interest to enable you to access the content specifically relevant to you and to fulfil a contract with you. 

Renewal of a password

If you do not remember your password, you can reset it by entering your Nacora Clientside user ID and email address in the mask. We will only use this information to provide you with a new password at your request based on our legitimate interest and to fulfil a contract with you. 

Reporting a loss, view claim status, verify certificate

If you wish to report a claim, view the claim status, and verify the customer certificate, you will be asked to complete a form and provide information, including the contact details of the person reporting the claim (the data usually refers to legal entities). We use this data based on our contractual relationship with you and our legitimate interest in responding to your request and providing you with the requested information. 

In addition to the above data, cookies, or similar technologies such as pixels (hereinafter generally referred to as "cookies") may be used on your computer when you visit our website. Cookies are small text files or image files that are placed on your end device by your browser to store certain information. The next time you visit our website from the same terminal device, the data stored in the cookies is subsequently sent back either to our website ("first-party cookie") or to another website with which the cookie is linked ("third-party cookie").

Duration of cookies: 

The cookies may be temporary, so-called session cookies, which are temporarily stored on your computer or mobile device. As soon as you close your browser, these cookies are automatically deleted. Permanent cookies remain on your device for a longer period, even after you have closed your browser. They remain on your device until the expiration date is reached and a new version of the cookie is installed or until you delete them manually. 

The duration depends on the purpose for which certain types of cookies are installed on your computer. 

Regardless of the purpose behind each specific cookie, Nacora considers the principle of data minimization when determining this duration. This means that whenever possible, we opt for the shortest possible duration that still allows the cookie to perform its function. 

Categories of cookies used on our website:  

Nacora.com: Nacora.com uses strictly necessary cookies to enable essential website functions by enabling basic functions such as page navigation and storing information such as your language selection. These cookies are either necessary for the website to function or used to provide you with the services you specifically requested. For this purpose, we use the CookieConsent cookie provided by Cookiebot to remember your consent choices or lack thereof for up to one year as well as a cookie provided by OneTrust to enable the use of our form to send a data subject request. Strictly necessary cookies cannot be turned off in our systems. You can set your browser to block these cookies. However, if you block these cookies, some parts of the website will not work.

In addition to strictly necessary cookies, Nacora.com uses statistics cookies for use of the analytics program Matomo Analytics. These cookies help Nacora understand and analyze how users interact with the website by creating a session ID and aggregating the data with those of other users. These cookies expire after you choose to end the session. 

Nacora BMS: In addition to our own first-party cookies, we use strictly necessary cookies from the third-party RGI when you click on the link to our BMS_WebPortal. We use these cookies based on our legitimate interest, for authentication purposes, to ensure the functionality of our website and to optimize our website. The cookies are stored for the duration of the session and are not processed further after the session ends.

Nacora e-Insurance: When you access the Nacora e-Insurance website (through our portal), you will be asked to consent (opt-in) to the collection and use of cookies that are not strictly necessary, including for analytics.

We maintain Nacora pages in the social network LinkedIn to inform about our services and news and to communicate with active customers. LinkedIn collects your personal data, especially by means of cookies, which are usually used for market research and advertising purposes. The processing may take place outside the European Union.

The provider in the EEA or the UK is: LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, D02 CA30, Ireland, and outside the EEA and the UK: LinkedIn Inc, 1000 W. Maude Avenue Sunnyvale, CA 94085, USA. You can adjust your LinkedIn privacy settings independently in your user account by the following link: https://www.linkedin.com/help/linkedin/answer/a1337839/ihre-konto-und-datenschutzeinstellungen-verwalten-ubersicht?lang=en. 
Details can be found in the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy

If you visit our LinkedIn profile and the GDPR is applicable, we are jointly responsible with the operator of the social media platform for the data processing and have therefore entered into a joint controller agreement (“Page Insights Joint Controller Addendum”), https://legal.linkedin.com/pages-joint-controller-addendum) concerning LinkedIn’s processing of personal data into aggregated data called Page Insights. You can assert your rights as defined in section 7 both against us and/or against the operator of the respective social media portal. Please note that despite the joint responsibility, we do not have any influence on the data processing procedures of LinkedIn. 

Our website may feature links to third-party websites that we consider useful and informative, such as LinkedIn or Kuehne + Nagel. However, we have no influence over the privacy practices of the operators of these other websites. We encourage you to read the privacy notices of each website you visit.

We can store your personal data or otherwise pass it on to our affiliates or further trustworthy business partners, who perform services in our name, for example, for technical support to evaluate the usefulness of this website for marketing purposes or other types of service providers or other third parties such as professional advisors, regulators, or governmental authorities.

Within Nacora Group: We may share your personal data with Nacora Group affiliates as necessary for the processing purposes as described in this Privacy Notice. Details of Nacora affiliates can be found on our website at www.nacora.com/contact.

With data processors: Certain service providers such as IT support, logistics, marketing, and business management system providers (hereinafter “processors”) may receive your personal data. We have conducted contracts with these processors to ensure that personal data is processed based on our instructions and in compliance with this Privacy Notice, and other suitable measures regarding confidentiality and security. We pass on your personal data to these processors exclusively to the required extent to perform services that you have requested or authorized and to protect your and our rights, property, or security.

Certain other third parties: Your personal data may need to be shared with group activities partners, professional advisors, regulators, governmental authorities, and other similar bodies, if we are obligated to do so based on applicable laws, orders by courts or other authorities, or if this disclosure is required to assist in legal or criminal investigations or court proceedings.

Please note that the companies of the Nacora Group, as well as authorities, customers, and suppliers to whom we may pass on your personal data for the above-mentioned purposes, might be domiciled outside of your home country, and potentially also in countries with data protection laws that can differ from those applicable in the country where you are domiciled, including all the countries where Nacora is operating, according to the list at www.nacora.com/contact, and the US, Italy, Germany, and Canada. In such cases, we will ensure that suitable measures for the protection of your personal data are taken by introducing suitable legal mechanisms, e.g., EU standard contractual clauses. Please contact us as described in section 8 for a copy of these clauses.

We will only retain personal data that we may have about you for as long as necessary to fulfil the purpose it was collected for, to fulfil a contract with you, or to comply with legal or regulatory requirements, but not longer than 10 years. The personal data of the data subjects will be deleted or blocked as soon as the purpose for storing it ceases to apply. Storing can also take place beyond this point in time if this has been provided by laws and other regulations which apply to us. The data will also be blocked or deleted when a storage period expires prescribed by said standards unless there is a necessity for the continued storage of the data for a contract conclusion or contract fulfilment or legal obligations. If we anonymize data, we may use such data without further notice.

Special retention periods:

Provision of the website and creation of log files:

The data will be deleted as soon as it is no longer needed to achieve the purpose for gathering it. This will be the case when the respective session is ended in the case that data is gathered for the purpose of providing this website.

If the data is stored in log files, deletion will occur at the latest after 60 days. Storing beyond this point is possible. In that case, the users’ IP addresses will be deleted or anonymized, so it will no longer be possible to attribute them to the retrieving client.

According to the applicable data protection law and under the conditions and within the limits outlined in the law, you have the following rights: 

Right to withdraw your consent: If, in accordance with applicable law, you have declared your consent regarding certain types of processing activities (such as for the receipt of direct marketing communication via email, SMS/MMS, fax, and telephone, or for transferring your personal data to a third country), you can withdraw this consent at any time with respect to future processing by contacting us via email, mail or phone as described in section 9 of this Privacy Notice. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

Right to request access to your personal data, respectively to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data.

Right to request rectification of inaccurate personal data concerning you.

Right to request erasure of your personal data, under certain conditions.

Right to request restriction of processing under certain conditions. In this case, the respective data will be marked and may only be processed for specific purposes as defined by law.

Right to object: On grounds relating to your particular situation, you have the right to object, at any time to the processing of personal data concerning you which is based on our legitimate interest.

Right to request data portability: As provided by applicable data protection law, you may – in cases where processing is based on consent or the performance of a contract, and the processing is carried out through automated means – have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.

Right to lodge a complaint: You also have the right to lodge a complaint with the competent supervisory authority in the relevant Member State (for example, the place where you live or work) - contact details can be found here.

Please note that these rights might be limited under the applicable local data protection law.

You can claim your rights at any time by sending us a message to privacy@nacora.com or using the following form.

If you have questions, you can contact us at

Nacora International Insurance Brokers,
Nacora Holding AG/Nacora Agencies AG,
Dorfstrasse 50, P.O.Box 67, 
CH-8834 Schindellegi, Switzerland
privacy@nacora.com