Insured individuals, relatives of the insured and beneficiaries
This personal data information describes how we process personal data specifically for you who are the insured party, a relative of the insured party or a beneficiary of Afa Försäkring and have initiated a case for any of our insurance policies.
For general personal data information that applies to all categories of data subjects, such as what rights you have, where your personal data is processed and stored, or where you can turn to if you believe that our processing is not in accordance with applicable data protection law, please refer to How we process your personal data.
Print this page
If you want to print this information, click the "Skriv ut"-link at the bottom of this page.
1. What personal data do we process and why?
Claims handling
We process personal data for claims handling purposes. More specifically, we process your personal data in order to administer and assess your entitlement to insurance compensation, coordinate insurance compensation, investigate recovery claims, in connection with litigation, to investigate offsetting opportunities, to follow up, plan and quality-assure our claims handling, for our internal communication regarding insurance claims, for storing in shared IT systems and to maintain a high quality of the underlying data. We also process your personal data to provide control information to the Swedish Tax Agency on taxable benefits paid by us.
| Categories of data | Legal basis for the processing |
|---|---|
| Identitity data, Contact details, Employment data, Financial data, Claims and case information | Our legitimate interest to administer and investigate the right to insurance compensation, fulfilment of our obligations under the insurance agreement and fulfilment of legal obligations under the law or deriving from collective agreements. |
| Health data | We process health data to establish, excersice or defence legal claims. |
| Retention period | During the lifetime of the insured party, or seven years after the end of the calendar year in which the financial year ends for processing for accounting purposes. |
Automated decision-making within claims handling
Afa Försäkring uses automated decision-making for decisions on granted compensation for the Group Health Insurance (AGS, AGS-KL), provided that you have given your consent to this. Automated decision-making works in the same way as when your claim is handled manually, with the exception that your claim is processed without human intervention. All data processed for claims handling purposes are also processed in this procedure, to assess your eligibility and grant you insurance compensation.
Automated decision-making may be used under the following conditions:
You have consented to automated decision-making in your application
You have filled in your details correctly
Your employment is confirmed by your employer
You meet the insurance conditions of Afa Försäkring
Your illness benefit qualifying income does not exceed a certain amount that is adjusted on an ongoing basis (in 2024 the amount was 483,000 SEK per year).
If your application cannot be approved, your case will instead be handled by an insurance claims handler.
The methods and algorithms used are tested and monitored regularly to ensure they are fair, efficient and impartial.
You can withdraw your consent to automated decision-making at any time by contacting us using the contact details set out in section 7 of the general personal data information which can be found here: How we process your personal data.
Calculating insurance risks
We process personal data to calculate insurance risks. More specifically, we process your personal data in order to calculate our actuarial provisions and to produce reporting data for the Swedish Financial Supervisory Authority and to quality assure our underlying data and calculation models.
| Categories of data | Legal basis for the processing |
|---|---|
| Personal identity number, Claims and case information | Our legal obligation to ensure that the cost of our insurance policies is proportionate to the actual insurance risks and to ensure a good financial position in our operations and to meet requirements regarding risk control in insurance business regulations. |
| Health data | We process health data to fulfil our obligations within social protection and social sequrity. |
| Retention period | During the lifetime of the insured party. |
Statistics
We process personal data for the purpose of producing statistics. More specifically, we process your data to produce statistical data for external parties, such as clients, trade union and employers’ associations, employers and government authorities. We also produce statistical reports for external and internal use. Published statistics never contain information that can identify you as an individual.
| Categories of data | Legal basis for the processing |
|---|---|
| All personal data processed for other purposes. | Our legitimate interest in providing relevant statistics to various stakeholders. To the extent that sensitive personal data is processed, this is done because it is necessary to produce relevant statistics and for the public interest associated with the statistics that Afa Försäkring provides on behalf of the labour market parties. |
| Retention period | During the time the statistics are compiled, usually less than a day. |
Research
The data we have collected about you for other purposes may in some cases be further processed for research purposes in areas such as working environment, health and the insurances provided by Afa Försäkring. At the request of researchers, we may disclose personal data to research projects. Generally, information in these cases is disclosed in anonymised or pseudonymised form.
Upon request from researchers, we may also process your personal data to make selections and send letters to you in order to give you the opportunity to participate in surveys conducted by researchers. In these cases, you always choose whether you want to participate in the research project, and we do not disclose any information about you directly to the researcher. In all cases where personal data is processed for research purposes, we require the research project in question to have an ethical approval.
| Categories of data | Legal basis for the processing |
|---|---|
| All personal data processed for other purposes. | The further processing of your personal data for research purposes is based on the same legal basis as for the original processing. To the extent sensitive personal data is processed, the processing is necessary for research purposes. |
| Retention period | Until the research study is completed. |
Preventing future claims
We process personal data to prevent future claims. More specifically, we process your data to carry out injury prevention projects and activities to reduce occupational injuries and illness, as well as to follow up on preventive projects and activities.
| Categories of data | Legal basis for the processing |
|---|---|
| Identity data, Claims and case information | Our legitimate interest in conducting preventive measures against occupational injuries and illness in the public interest. |
| Health data | We process health data because it is necessary to produce relevant statistics and because there is a significant public interest in the statistics that Afa Försäkring produces for injury prevention projects and activities. |
| Retention period | Five years after the extraction of information for the report. |
Customer surveys
We process your personal data for the purpose of conducting customer surveys. More specifically, we process your personal data to improve the business in terms of communication, service level and experience of the process, as well as to develop the business in terms of expectations of Afa Försäkring (e.g. regarding sustainability), the requirement of service level and to investigate the need for new insurance products through surveys and telephone surveys.
| Categories of data | Legal basis for the processing |
|---|---|
| Identity data, Contact details | Our legitimate interest in following up on how you, as an insured party, experience Afa Försäkring’s service and handling of insurance claims. |
| Health data | We only process sensitive data upon your explicit consent, which is obtained in the context of conducting the customer survey. Participation in a customer survey is always voluntary. |
| Retention period | Until the customer survey is completed. |
Improving, testing, and developing operations
We process personal data for the purposes of improving, testing and developing our operations. More specifically, we process your data to perform function and performance tests in systems, system and acceptance tests, system and service development and troubleshooting.
| Categories of data | Legal basis for the processing |
|---|---|
| All personal data processed for other purposes. | Our legitimate interest in being able to develop and improve IT systems and our operations. |
| Retention period | One month after the testing has been completed. |
2. From where do we obtain your personal data?
Yourself
We collect personal data from yourself when you fill in your details when you submit a claim on our website, on registration forms on paper, or through telephone calls. The personal data we process about you differ depending on the insurance compensation you are applying for.
Below are examples of what personal data you need to provide when you apply for one of our insurance policies. When the data is collected, it is stated whether it is mandatory to provide the data. If you are required to provide the data, but you fail to do so, it may result in us being unable to process your claim or a delay in processing your claim until the data is provided.
Your employer
Your employer may provide additional and confirmatory information regarding your employment in support of your application. The employer can also make an employer declaration in our group health insurance, industrial injuries insurance, or parental leave insurance with your personal data and on your behalf.
| What insurance are you applying for? | Confirming employment | Employment declaration | Personal data we collect about you from your employer |
|---|---|---|---|
| Group Health Insurance (AGS) | X | X | Employment data, identity data, financial data, health data |
| Group Health Insurance (AGS-KL) | X | Employment data | |
| Industrial injuries insurance (TFA/TFA-KL) | X | X | Employment data, identity data, financial data, health data |
| Group life insurance (TGL) | X | Identity data, financial data | |
| Parental leave insurance (FTP) | X | X | Employment data, identity data, financial data, data relating to data of birth or adoption |
| Work redundancy insurance (AGB) | X | Employment data | |
| Waiver of contribution insurance | X | Employment data | |
| Waiver of premium insurance | X | Employment data |
Healthcare providers
In the event of an occupational injury, we may need to gather medical documents from healthcare providers. If this is the case, we will need a medical authorisation from you to be able to obtain the documents. Below is the personal data that we may collect about you through healthcare providers.
| Source | What personal data do we collect about you? |
|---|---|
| Healthcare providers | Medical records |
Other sources
We supplement your application with personal data from sources other than yourself and your employer. Below is the personal data that we may collect about you in addition to the personal data that you and your employer specify when applying.
| Source | Personal data |
|---|---|
| SPAR | Civil registration details |
| Other insurance companies | Claims and case information |
| The Swedish Social Insurance Agency (”Försäkringskassan”). | Financial data and health data |
| Fora | Employment data, financial data, claims and case information |
| Business and credit information agencies | Employment data, company information and financial data |
| GSR* | See information in the paragraph below. |
*Claims register (GSR).
For claims from February 1, 2024, Afa Försäkring uses a common claims register for the insurance industry (GSR). This register contains certain information about the claim and information about who has claimed compensation and is only used in connection with claims settlement.
This means that the company will know if you have previously reported a claim to another insurance company or authority handling similar claims. The purpose of the GSR is to provide insurance companies and authorities handling similar claims with a basis for identifying unclear insurance cases and claims. In this way, companies and authorities can prevent the payments of claims based on incorrect information as well as incorrect payments from several insurances for the same claim. The data can also be used in anonymous form for statistical purposes.
The data controller for GSR is Skadeanmälningsregister (GSR) AB, Box 24171, 104 51 Stockholm. Visit www.gsr.se for more information about the processing of data in the register.
3. Transfer and disclosure of personal data
When necessary, we disclose or transfer your personal data to the following categories of recipients.
Other insurance companies
To investigate unclear insurance claims, investigate insurance liability, recourse claims or for coordination purposes when handling your insurance claim, we may, when necessary, disclose information about your personal identity number and the date of the injury to other insurance companies.
If we have paid insurance compensation to you and have a recourse claim against another insurance company, we will provide the other insurance company with information about the compensation paid, a medical assessment and a copy of the decision documented. The decision-making documents shows the personal data that we process in our claims handling, i.e. identity data, contact details, claims and case information and health data.
The disclosure is based on a balancing of interests and is necessary to satisfy our legitimate interest in establishing, exercising and defending legal claims. We may also disclose health information about you, such as copies of disability certificates, medical records, or medical reports, at the request of other insurance companies. Afa Försäkring always requires the insurance company to present a valid medical authorisation or other authorisation in connection with such requests.
Your employer
We will notify your personal identity number to your employer to confirm your employment.
The Swedish Tax Agency
We provide the Swedish Tax Agency with control data as a result of settling your insurance claim.
The Swedish Social Insurance Agency (”Försäkringskassan”).
We disclose information about you to the Swedish Social Insurance Agency, e.g. your personal identity number or your monthly compensation from Afa Försäkring, so that we can supplement and verify your notification with regard to information such as the registered date of illness or so that the Swedish Social Insurance Agency can coordinate social benefit compensations when necessary.
Fora
We disclose information about you to Fora, which performs certain administrative services for us. Through Fora, we then collect your employment details and ascertain whether you are covered under any of our insurance policies.
Statistics Sweden/National Board of Health and Welfare
We may disclose your personal data to Statistics Sweden or the National Board of Health and Welfare for pseudonymisation prior to disclosing data to research projects.
Banks
We disclose your personal data to the bank that Afa Försäkring uses to pay insurance compensation, in cases where we have assessed that you are entitled to insurance compensation for one of our insurance policies.
Service providers
To fulfil the above-stated purposes of our processing of your personal data, we – where applicable – engage service providers to process personal data on our behalf. These service providers may only process your personal data in accordance with our explicit instructions, and they may not use your data for their own purposes. They are also legally and contractually bound to take appropriate technological and organisational security measures to protect your data.
The categories of service providers with whom we may share your personal data are physicians who, for example, make medical statements about claims, providers of additional services in some of our insurance policies, companies that enhance our claims handling for you as an insured party through training of our case officers, and IT service providers for document archiving.
Pension choice agency
We share information about you with the pension choice agency responsible for administering pension contributions for the occupational pension insurance scheme that covers your employment with your employer.
Claims register (GSR)
If you report a claim to us, we will disclose your personal data to the GSR (see section 2 above).
Other recipients
In certain cases, we may share your personal information with recipients other than those mentioned above to comply with applicable laws and regulations, in response to police reports, a request or order from an authorised court or authority, and, when necessary, have your claim assessed and fulfil our legitimate interest in establishing, exercising, and defending legal claims.
Further, your personal data may be disclosed to potential acquirers in conjunction with a merger or a transfer to fulfil our legitimate interest in executing the transaction in question.