.versicherung is a community Top-Level Domain (TLD) exclusively designed for members of the German speaking insurance industry. The TLD .versicherung is an established, especially secure and trustworthy namespace. Furthermore it supports consumer protection because only approved insurance brokers are allowed to use a .versicherung domain.

Increase the impact of your internet presence with the exclusive domain ending .versicherung

The domain ending .versicherung works just like .com, .de, .ch or .at – but it is reserved for the exclusive use of the insurance industry. Aside from www.your-company.com, domains like www.your-company.versicherung are available to you as well. This will enable your company to stand out clearly from the crowd.

Who can register .versicherung domains?

The .versicherung TLD is a so-called "community based" top-level domain. Domain names may only be registered under the gTLD .versicherung by a limited group of registrants and are subject to special conditions as is their use.

Eligible registrants to register a second-level name in .versicherung TLD are related to the German-speaking insurance industry and mainly based in the countries of Austria, Germany, Liechtenstein, Switzerland and Luxembourg and are in detail:

• Governments
• Governmental organizations regulating the insurance industry
• Organizations and individuals (sole proprietors) that are recognized and registered members
  of the insurance industry community:
  • Primary insurers, reinsurers and social insurers with an authorization within the legal
    frameworks for the insurance industry in the respective countries.
  • Insurance agents and insurance intermediaries with an authorization within the legal
    framework for the insurance industry in the respective countries
  • At an official public register registered associations, educational institutions and service
    providers of the insurance industry

On request of the registry, a .versicherung domain name registrant has to proof its relationship to the insurance industry as defined in the .versicherung registration policy. The validation or re-validation of a registrant will happen in the following cases:

• New registration of a .versicherung domain name
• Changes of the owner data (e.g. owner change) of a domain name
• At least once a year even if nothing has changed in the owner data

.versicherung Policies

• Registration Policy
• Whois Policy
• Abuse Policy
• ERDR Policy
• Allowed Characters
• Reserved Domain Names

If you have questions about .versicherung or how to register a .versicherung domain, please feel free to contact us. Our customer support team is available Monday to Friday 8:00 - 18:00 (MEZ):

By e-mail: service@nic.versicherung

By telephone: +43 662 46 69 -731

In case of abuse contact our abuse department by e-mail: abuse@nic.versicherung

Postal address:
tldbox GmbH
Jakob-Haringer-Strasse 8/V
5020 Salzburg

Telephone:
+43 662 46 69-731

Kindly use the abuse conctact only in case of illegal use of .versicherung domains, like phishing, pharming, botnet, spam or other attempts to defraud. 

Data Protection & Privacy Policy

tldbox is your registry for .versicherung-domains. We are processing your personal data with diligence according to the GDPR (General Data Protection Regulation). We strive for communicating our processing activities in a transparent and intelligible form: Primarily personal data is processed as far as necessary for the performance of the contract. Where processing is to be carried out by a processor, it is governed by a contract, which ensures compliance with the GDPR. Therefore data of domain-holders will not be published in the WHOIS database. Furthermore there will not be any disclosure by transmission of personal data to a third party without proof of outweighing legitimate or public interests. Personal data shall not be used for advertising purposes of third parties. You receive our newsletter based on your consent, which can be withdrawn any time. Further information on data protection, your rights and our privacy policy can be found on: www.nic.versicherung/datenschutz.

What is GDPR?

The GDPR is the European General Data Protection Regulation, which applies directly in all EU member states as of 25 May 2018. It protects natural persons with regard to the processing of personal data, and sets out a range of obligations for those who process personal data to provide information and clarification. This means data controllers and those who process data for them. The GDPR also establishes numerous rights and legal remedies for persons whose data is processed (“data subjects”). Austria has enacted additional measures to the GDPR in its Datenschutzgesetz (Data Protection Act).

The text of the GDPR can be found here: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679. 
The text of the Austrian Data Protection Act, together with a translation, can be found here: https://www.ris.bka.gv.at/Dokumente/Erv/ERV_1999_1_165/ERV_1999_1_165.pdf.

We are committed to transparent communication about the processing of your data. Below you will find details regarding the way we handle your personal data as well as your individual data protection rights.

How we handle your data

• Data processing and data processing categories
  
• Your options for controlling your data
  
• Legal basis and purpose of data processing
  
• Our data recipients
  
• Our processors
  
• Automated registration
  
• WHOIS
  
• Information requests by third parties
  
• Erasure of data
  
• Newsletter
  
• Cookies: general information
  
• Our cookies
  
• Third-party cookies used in our services
  
• Technical data security measures

Your data protection rights

• Right of access
• Right to rectification
  
• Right to erasure (‘right to be forgotten’)
  
• Right to restriction of processing
  
• Right to object
  
• Right to data portability
  
• Right to withdraw consent
  
• Right to lodge a complaint with a supervisory authority

How we handle your data

Our data processing and data processing categories

tldbox is besides other activities the registry for .versicherung domains.
If you want to register a .versicherung domain, sign up for a registrar and the latter with us. A direct contractual relationship between the domain owner and tldbox does not arise. We receive your data in the way via your contractual partner. For the registration of a .versicherung domain, if the domain owner is a natural person, we need the following data:

• first and last name,
  
• contact details, namely postal address and e-mail address.

Telephone and fax numbers can - but do not have to - be specified.

We collect this data as domain owner data, together with information about the specific contractual relationship including any changes and your domain name, as well as technical data such as name server data, the IP address (if technically required) and DS records.

Due to our contractual obligation with ICANN we record the date "AdminC". The details of the technical contact person "TechC" we need for security reasons. Because we operate critical infrastructures that are essential for maintaining important social and economic functions and whose disruption could cause considerable damage. In order to be able to take sufficient account of the special protection requirements of your domains, we must be able to reach your technical contact person in critical situations quickly and directly.

tldbox is contractually obligated to ICANN to validate the applicant on the occasion of the registration of a .versicherung domain and subsequently once a year. The membership in the German-speaking insurance industry and the contents of the websites operated under the domain name are examined. For this purpose, the above-mentioned data and any data published by you (eg insurance intermediary registration number) are used.

Usually the billing of a .versicherung domain takes place with the registrar. You are invoice recipient, apart from individual cases, only when registering premium domains. In order to register a premium domain, you need an advance authorization for the promotion, which you will receive after paying a fixed price. For this purpose you can receive an invoice directly from us. We then process the data necessary for accounting and clearing.

Any communication data (including notes on telephone calls, e-mails, forms, any necessary documents, log-in data, etc.) are recorded on an ad-hoc basis.

Data is also collected and processed when you visit our website. To what extent and to what extent we anonymously collect and analyze this data on our website, you can find out under "Our Cookies / Third Party Cookies in our Services".

When you receive our newsletter, we process the data necessary for the shipment and save the consent you have obtained.
A publication of domain owner data in the WHOIS is not provided. The same applies to the transmission of these data to third parties, unless they prove a legitimate or public interest.

Your options for controlling your data

You have the option to expressly request that your name and selected contact data for your domain be published in the WHOIS database. Because there are natural persons behind every legal entity, we recommend that you provide department names rather than names of individual employees, and non-personal e-mail addresses where contact details are required. Otherwise, the consent of the named contact person must be obtained in advance

If you want to be convinced of the correctness of the domain holder data stored on your domain or if you want to make changes, please contact your registrar.

Legal basis and purpose of data processing

Your data are collected and processed first and foremost for the purpose of fulfilling the contract. We send you newsletters on the basis of your consent, which you can revoke at any time.

Anonymous user behaviour provides the basis for optimising the performance of our website, as well as our interest-based advertising, in which we have a legitimate interest.

Your data will not be forwarded to third parties for their marketing purposes.

Our data recipients

tldbox GmbH is a sister organization of nic.at GmbH. In the absence of our own staff, all tldbox activities are carried out at nic.at. Your data will therefore be processed appropriately in the various departments of nic.at.

An external tax consultant oversees our tax affairs and, if necessary, an debt collection agency is charged with asserting any claims if one of our contractual partners is grossly in default of payments.
In addition, tldbox also attracts some processors, who are given the necessary data as part of their assignments.

Because you conclude a contract with your registrar as part of the domain registration or use and this with us, data are transmitted reciprocally for the purpose of fulfilling the contract. Each registrar of .insurance also has WHOIS access to domains that are not managed by him, as this is necessary for the smooth administration of .versicherung domains. All registrars are contractually obliged to restrict their full access to the purpose defined in the registrar contract to a very limited extent. Among the 35 or so registrars are some in third countries where the GDPR does not apply. Registrars in third countries that are not on the "White List" of the European Commission or have submitted themselves to the "Privacy Shield" - ensuring compliance with the GDPR will be ensured by signing the standard contractual clauses of the European Commission. In addition, we are fully bound by the contractual conditions of ICANN and are obliged to pass on data to ICANN.

The technical contact details of a domain are available via name server queries also globally permanently available for retrieval for third parties, as this requirement of the accessibility of a registered domain at any time and thus to fulfill the contract concluded with the registrar is required.

Our processors

tldbox attracts some processors, who are given the necessary data as part of their assignments. For example, Vienna University Computer Center is an important technical partner. We also work with several marketing agencies. In all cases, compliance with data protection obligations will be contractually ensured by tldbox's processors.

Automated registration

A number of conditions must be met in order for your desired domain to be registered. Satisfaction of these conditions is checked by automated means.
The registration will be done by your registrar. In all cases, the first step is to check whether your desired domain is available.

After domain holder data and technical data was entered, a technical check is performed to see if the name servers provided are correctly configured (i.e., if they respond to a request). Among other things, the syntax of your domain name is also checked.
The subsequent validation will not be automated. More detailed information about the prerequisites for registration can be found at https://www.nic.versicherung/de/ueber-versicherung/richtlinien

Registration takes place exclusively via your registrar. If you have any questions about the automation-supported registration, please contact your registrar. Questions about our interface are answered by our customer service via e-mail to service@nic.versicherung or by phone on +43 662 46 69 -731.

WHOIS

The WHOIS is a public directory of registered .versicherungs domains, which previously showed the holders of all .versicherung-domains and their contact details. Due to the direct applicability of the GDPR, this extensive means for the public to make queries will change as follows:

As there is no possibility to distinct between natural and legal entities, holder data in general will no longer be published in the WHOIS. Such data will only appear in the WHOIS at a natural person’s express request. Only the sponsoring registrar will be shown.
On a case-by-case basis, holder data concerning natural persons will be shared in response to a specific information request from a third party, which must demonstrate a legitimate interest in order to receive such data.

Information requests by third parties

As a rule, the holder data for domains can no longer be accessed in the WHOIS. A third party which claims to require these data, for instance to assert legal claims, must submit an information request to nic.at. In every case, we very carefully assess whether the request appears justified on the basis of the facts provided. The third party must have a legitimate interest in the data requested, and be able to demonstrate such an interest.

For instance, the wish to purchase a particular domain or ascertain the identity of a counterparty to a contract is not sufficient.

With regard to the disclosure of domain holder data in connection with infringements of name rights, trademarks and/or brand rights or other legal claims, we require a precise statement of the facts and specific evidence (e.g. an extract from the trademark register) in order to assess whether a legitimate interest exists.

Erasure of data

We believe that data must not be stored indefinitely without good reason. We intend to store data only for as long as necessary. In our view, storage of data for the duration of a contractual relationship is definitely necessary. In addition, we store data for as long as claims arising from a contractual relationship can be enforced. Furthermore, due to various statutory requirements, such as those on proper accounting, we are obliged to store data for specific periods.

You receive our newsletter on the basis of the consent you provided.
You can quickly and easily unsubscribe from the newsletter at any time using the "unsubscribe" link provided in every e-mail. Please note that this does not affect the lawfulness of delivery prior to your withdrawal of consent.

Cookies: general information

A cookie is a small text file that your browser stores on your device (PC, smartphone, etc.) when you visit a website. This text file stores information so that the website recognises your device when you visit the site again. Cookies were developed to enhance website functionality. For this reason, information is stored and transmitted in the background when you visit a website. Cookies have differing lifespans, and can be stored either temporarily for the duration of a website visit or for a longer period of time.

Cookies have various uses, ranging from technologically helpful and essential cookies to profiling cookies. Technologically essential cookies enhance convenience, allowing you to visit websites without interference and to shop online, for example. Third-party cookies can be used to profile your surfing behaviour online, and this information is normally used for tailored advertising.
You can delete cookies and limit the possibilities for them being installed in your browser settings. Most browsers give you the option of

• finding out what cookies are stored on your device;
  
• erasing individual cookies;
  
• blocking cookies from third parties;
  
• blocking cookies from certain websites;
  
• blocking all cookies;
  
• erasing all cookies when you close your browser.

Please note that if you choose to erase cookies, all of your session data will be lost. In addition, our website does not function properly if you block cookies. Therefore, we recommend that you do not block all cookies.

It should also be noted that cookies usually cannot be stored for use in different browsers. For example, cookies saved in Chrome do not automatically work in Firefox. This means that you should configure the settings separately for each browser you use.

Nowadays, it is standard practice to use cookies on websites. Without cookies, it would not be possible to make use of services on websites. However, the purpose for which cookies are used is important, because there are now various ways in which they can be misused.

Our cookies

When you visit our website, cookies are primarily used where they are technologically necessary, so that you can access the information you are looking for quickly, easily and in a user-friendly manner. The cookies we use include session cookies, which mean that you do not have to reload data during your visit to our site, and security cookies, which attach data allocated specifically and temporarily when you send forms. These cookies are only stored for a very short time. In contrast, the consent cookie that records whether you have consented to the use of cookies on our website has a lifespan of several years, so that you are not asked for your consent every time you visit our site. Thanks to the technical assistance we receive from Vienna University Computer Center, a load balancer ensures the efficient distribution of load when many users visit the site at the same time. When you first access our website, the relevant cookie records the “information flow path” (via various servers) for the duration of your visit.

Third-party cookies used in our services

We use the open-source web analysis service Matomo (formerly Piwik; see https://matomo.org/) to continuously optimise our website. Analysing visitor information helps us to identify potential sources of errors and less user-friendly interfaces, and rectify them. The analysis-tool cookie allocates a user ID under which your IP address is stored in a database in pseudonymised form together with information on your surfing behaviour (traffic data).

Abstract user behaviour (under the allocated ID number) is of interest to us, not information on a specific person. We use plug-ins produced by third parties for various purposes, including to evaluate the effectiveness of our marketing. This requires geolocalisation, and this information is derived from your IP address and stored (prior to pseudonymisation). In itself, this information does not allow an individual user’s location to be determined. It only provides vague information on the country or federal province in which your IP address was registered. We store and analyse this data exclusively for our own use. This data is not shared with third parties for outside marketing.

You can stop Matomo from collecting this information by clicking on the following link: https://stat.nic.at/index.php?module=CoreAdminHome&action=optOut&language=de. An opt-out cookie will then be saved, which stops your data from being collected when you visit our website in future.

Technical data security measures

Information security is an extremely important aspect of data protection. Our sister organisation nic.at is certified in accordance with the international ISO 27001 standard in order to provide the highest possible level of security. tldbox also applies these standards.
If you have any questions on the use of your data, please contact our legal department or our customer services unit. You can find the relevant e-mail addresses and telephone numbers at https://www.nic.versicherung/de/english.

Your data protection rights

The GDPR includes an extensive package of protective rights for natural persons whose data are processed (i.e. collected, stored, transferred, restricted, erased, etc.).

Right of access

Under Article 15 GDPR, you have the right to obtain information on the categories of personal data we process and for what purpose, the recipients of this data, (where possible) the period for which data will be stored, any information on the source of personal data not collected from you, as well as whether automated decision-making, including profiling, is carried out and how this works. On request, we will send you an overview of these data processing activities free of charge, and inform you of your additional rights.

Right to rectification

You have the right to have inaccurate or incomplete personal data rectified and/or completed (Article 16 GDPR).

Right to erasure (‘right to be forgotten’)

You have the ‘right to be forgotten’ (Article 17 GDPR). This means we will erase your personal data on request when the data is no longer required for the purposes for which it was collected and processed, and there is no other ground for continued storage of the data. The same applies if you object to or withdraw your consent to the processing of your data, or your data was unlawfully processed.

Right to restriction of processing

You have the right to restrict processing of your data (Article 18 GDPR), for example if you contest the accuracy of your personal data or the lawfulness of data processing, or because the data is required to exercise legal claims. Austrian legislators have also provided for restricted data processing in cases where data cannot be rectified or erased without delay for technical or financial reasons.

Right to object

Under Article 21 of the GDPR, if your data is processed on the basis of legitimate public or private interests, you have the right to object to processing at any time. The same applies to profiling and direct advertising. Therefore, you have the right to object at any time to the cookies that help us to use your personal data – even in pseudonymised form – in order to carry out interest-based advertising.

Right to data portability

You have the right to receive your personal data from us, and to have the data transmitted to another controller, provided this is technically feasible.

Right to withdraw consent

The right to withdraw consent means that you can unsubscribe from our newsletter at any time. By withdrawing your consent, you restrict processing of your data in future (in this case, delivery of the newsletter). This does not affect the lawfulness of data processing carried out before you withdraw your consent.

Right to lodge a complaint with a supervisory authority

If you believe that your data has not been processed in accordance with the GDPR, Article 77 of the Regulation and section 24 Austrian Data Protection Act give you the right to lodge a complaint with the Austrian Data Protection Authority (https://www.data-protection-authority.gv.at/).