.versicherung is a community Top-Level Domain (TLD) exclusively designed for members of the German speaking insurance industry. The TLD .versicherung is an established, especially secure and trustworthy namespace. Furthermore it supports consumer protection because only approved insurance brokers are allowed to use a .versicherung domain.

Increase the impact of your internet presence with the exclusive domain ending .versicherung

The domain ending .versicherung works just like .com, .de, .ch or .at – but it is reserved for the exclusive use of the insurance industry. Aside from www.your-company.com, domains like www.your-company.versicherung are available to you as well. This will enable your company to stand out clearly from the crowd.

Who can register .versicherung domains?

The .versicherung TLD is a so-called "community based" top-level domain. Domain names may only be registered under the gTLD .versicherung by a limited group of registrants and are subject to special conditions as is their use.

Eligible registrants to register a second-level name in .versicherung TLD are related to the German-speaking insurance industry and mainly based in the countries of Austria, Germany, Liechtenstein, Switzerland and Luxembourg and are in detail:

• Governments
• Governmental organizations regulating the insurance industry
• Organizations and individuals (sole proprietors) that are recognized and registered members
  of the insurance industry community:
  • Primary insurers, reinsurers and social insurers with an authorization within the legal
    frameworks for the insurance industry in the respective countries.
  • Insurance agents and insurance intermediaries with an authorization within the legal
    framework for the insurance industry in the respective countries
  • At an official public register registered associations, educational institutions and service
    providers of the insurance industry

On request of the registry, a .versicherung domain name registrant has to proof its relationship to the insurance industry as defined in the .versicherung registration policy. The validation or re-validation of a registrant will happen in the following cases:

• New registration of a .versicherung domain name
• Changes of the owner data (e.g. owner change) of a domain name
• At least once a year even if nothing has changed in the owner data

.versicherung Policies

• Registration Policy
• RDDS-Policy
• Abuse Policy
• ERDR Policy
• Allowed Characters
• Reserved Domain Names

If you have questions about .versicherung or how to register a .versicherung domain, please feel free to contact us. Our customer support team is available Monday to Friday 8:00 - 18:00 (CET):

By e-mail: service@nic.versicherung

By telephone: +43 662 46 69 -731

In case of abuse contact our abuse department by e-mail: abuse@nic.versicherung

Postal address:
tldbox GmbH
Jakob-Haringer-Strasse 8/V
5020 Salzburg

Telephone:
+43 662 46 69-731

Kindly use the abuse conctact only in case of illegal use of .versicherung domains, like phishing, pharming, botnet, spam or other attempts to defraud. 

Privacy Policy of tldbox GmbH

tldbox GmbH is responsible for the use of your personal data in accordance with the law, in connection with the registration and administration of your .versicherung domain. tldbox GmbH handles your data with the utmost care and in accordance with the principles of the GDPR. If you establish any additional contractual relationships when registering a .versicherung domain (for example, with your registrar or internet service provider), your respective contractual partners are responsible for those relationships.

What is the GDPR?

The GDPR is the European General Data Protection Regulation, which has applied directly in all EU member states since 25 May 2018. It protects natural persons with regard to the processing of personal data, and sets out a range of obligations for those who process personal data to provide information and clarification. This refers to data controllers and those who process data on their behalf. The GDPR also establishes numerous rights and legal remedies for persons whose data is processed (“data subjects”). Austria has enacted additional measures supplementing the GDPR in its Datenschutzgesetz (Data Protection Act).

The text of the GDPR can be found here: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679. 
The text of the Austrian Data Protection Act, together with a translation, can be found here: https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597&FassungVom=2018-05-25.

tldbox GmbH is committed to transparent communication about the processing of your data. Below you will find details regarding the way tldbox GmbH handles your personal data as well as your individual data protection rights.

1 How tldbox GmbH handles your data

1.1 Data collection on the website

tldbox GmbH processes your data diligently in accordance with the GDPR (General Data Protection Regulation). tldbox GmbH strives to communicate its processing activities in a transparent and intelligible form: personal data is primarily processed only as far as necessary for the performance of the contract. Where processing is to be carried out by a processor, it is governed by a contract, which ensures compliance with the GDPR. As of 25 May 2018, the publication of natural persons' personal data in the WHOIS is generally no longer permitted. The same applies to transferring this data to third parties, unless they can demonstrate an overriding legitimate or public interest. Your data will not be forwarded to third parties for their marketing purposes. You receive the newsletter from tldbox GmbH only if you have given your consent, which you may revoke at any time. For details on data protection and your rights, please refer to the privacy policy.

Responsible according to the GDPR:
tldbox GmbH

Jakob-Haringer-Straße 8/V
5020 Salzburg
Austria

E: service@nic.versicherung
T: +43 662 46 69-731 

1.2 Data processing and data processing categories

tldbox GmbH is, among other things, the registry for .versicherung domains.
If you want to register a .versicherung domain, you sign a contract with a registrar or internet service provider and the latter with tldbox GmbH. Thus, billing of your domain is handled by the registrar or internet service provider. A direct contractual relationship between you as the domain owner (also called registrant) and tldbox GmbH does not arise. tldbox GmbH receives your data from your contractual partner (registrar/internet service provider), whom you have authorised to do so. For the registration of a .versicherung domain, if the domain owner is a natural person, tldbox GmbH needs the following data:

• First and last name,
• Contact details (postal address, email address, and phone number)

tldbox GmbH collects these data as domain holder data, together with information on the specific contractual relationship including any changes, and your domain names, as well as technical data such as name server data, the IP address (if required for technical purposes) and DS records.

Due to the contractual obligation with ICANN (the Internet Corporation for Assigned Names and Numbers is a non-profit organisation that coordinates the global allocation of IP addresses and domain names), tldbox GmbH also records the data of the "AdminC", provided that this optional administrative contact person is specified. The details of the (also optional) technical contact person "TechC" would be needed for security reasons because tldbox GmbH operates critical infrastructure that is essential for maintaining important social and economic functions and whose disruption could cause considerable damage. In order to adequately address the special protection needs of your domains, it is important that tldbox GmbH can reach your technical contact person quickly and directly in critical situations.

tldbox GmbH is contractually obliged to ICANN due to the .versicherung policy to validate the applicant upon registration of a .versicherung domain and subsequently once a year. Membership of the German-speaking insurance industry and the content of the websites operated under the domain name are examined. For this purpose, the above-mentioned data and any data published by you (e.g. insurance intermediary registration number) are used.

Furthermore, tldbox GmbH and the relevant registrar/internet service provider are required by various legal provisions (notably the European NIS2 Directive, as implemented in the current version of the Austrian NISG) to ensure that domain holders provide accurate and complete information, and keep it up to date. tldbox GmbH and the registrar/internet service provider may conduct reviews at any time to verify the accuracy and completeness of the data, and may request supporting documentation from domain holders.

Communications data are collected as required (including records of telephone calls, emails, forms, all necessary documents, log-in data, etc.).

Data are also collected and processed when you visit the website. The extent to which and the purposes for which tldbox GmbH collects and analyses anonymous data on the tldbox GmbH website are described under point 4.1 “Cookies”.

If you subscribe to the tldbox GmbH newsletter, tldbox GmbH processes the data required to send it to you and stores the consent you have provided.

1.3 Legal basis and purpose of data processing

Your data are collected and processed first and foremost as follows:

• for the purpose of fulfilling the contract
• anonymous user behaviour provides the basis for optimising the performance of the tldbox GmbH website, in which tldbox GmbH has a legitimate interest
• interest-based advertising, in which tldbox GmbH has a legitimate interest
• newsletters, on the basis of your consent, which you can revoke at any time

 1.4 Data recipients of tldbox GmbH

tldbox GmbH is a sister company of nic.at GmbH. In the absence of its own staff, all tldbox GmbH activities are carried out by nic.at GmbH. Your data are processed by different departments, depending on the purpose.

An external tax consultant takes care of tax matters for tldbox GmbH, and a debt collection agency is used to recover receivables when a counterparty to a contract with tldbox GmbH is in serious default.

In addition, tldbox GmbH engages some processors, who are given the necessary data as part of their assignments.

Because you conclude a contract with your registrar/internet service provider as part of the domain registration or use and the latter with tldbox GmbH, data are transmitted reciprocally for the purpose of fulfilling the contract. In addition, every registrar/internet service provider has access to data of domains that the company does not administer, as this is necessary for the efficient administration of .versicherung domains. All registrars/internet service providers are contractually obliged to limit the use of their full access to the purpose specified in the registrar’s/internet service provider’s agreement. Some of the .versicherung registrars/internet service providers are located in third countries, where the GDPR does not apply. Registrars in third countries that are not on the "White List" of the European Commission are bound to comply with the GDPR by signing the standard contractual clauses of the European Commission. Furthermore, tldbox GmbH is fully bound by the contractual conditions of ICANN and is obliged to pass on data regarding domains to ICANN.

In addition, the technical contact details of a domain are permanently available worldwide via name server queries for retrieval by third parties, since this is required to ensure the availability of a registered domain at all times and thus to fulfil the contract concluded with the domain holder.

1.5 Processors of tldbox GmbH

tldbox GmbH carefully selects the service providers who process personal data on its behalf. If tldbox GmbH commissions third parties to process personal data on the basis of a data processing agreement, this is done in accordance with Art. 28 of the GDPR.

tldbox GmbH enlists a number of processors to whom data are forwarded if required for the performance of their contracted tasks. For instance, Vienna University Computer Center provides tldbox GmbH with important technical support. tldbox GmbH also works with several marketing agencies. In all cases, tldbox GmbH ensures by means of contracts with processors that they comply with data protection obligations.

 1.6 Transfer to third countries

If data is processed in a third country or if this is done in the context of using the services of third parties or the disclosure or transfer of data to other persons or companies, this is only done for the reasons described above for the transfer of data. Subject to express consent or contractual necessity, tldbox GmbH processes or allows data to be processed only in third countries with a recognised level of data protection or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications or binding corporate rules in accordance with Art. 44–49 of the GDPR.

Legally compliant data transfer to the US based on the standard contractual clauses

The standard contractual clauses adopted by the Commission on 5 February 2010 (2010/87/EU) and Article 46(2)(c) of the GDPR remain in effect. However, a level of protection for personal data equivalent to that in the European Union must be ensured. Therefore, the contractual relationships between tldbox GmbH and its service providers are relevant, as is the ability of US authorities to access the data, and the US legal system (including legislation, case law and administrative practices of authorities).

What measures does tldbox GmbH take to ensure that data transfers to the US comply with the law?

tldbox GmbH requests your consent whenever possible before using a US tool and provides transparent information in advance about how a service works. This section outlines the risks associated with data transfers to the US.

With US service providers, tldbox GmbH strives to enter into standard contractual clauses and to require additional safeguards. In particular, tldbox GmbH requires the use of technologies that prevent access to data, such as unbreakable encryption or the anonymisation or pseudonymisation of data, whereby only the service provider can link the data to specific individuals. At the same time, tldbox GmbH requires additional information from the service provider in the event of third-party access to data, or demands that the service provider exhaust all legal remedies before granting access to data.

1.7 Automated registration

A number of conditions must be met in order for your desired domain to be registered. Satisfaction of these conditions is checked by automated means. The registration will be carried out by your registrar/internet service provider. More detailed information about the prerequisites for registration can be found at https://www.nic.versicherung/de/ueber-versicherung/richtlinien

1.8 WHOIS

RDDS (Registration Data Directory Services) refers to all services containing a public directory of registered .versicherung domains, provided the data does not constitute personal information. The so-called WHOIS was previously used for this purpose, but the Registration Data Access Protocol (RDAP) is now used instead. Due to the requirements of the GDPR and the NISG 2026, the public access feature works as follows:

Domain holder information for legal entities is published, including the domain’s registration date. Therefore, it is recommended that any individuals associated with such legal entities specify departments rather than individual employees when providing contact information, and use depersonalised email addresses (e.g. info@example.com). If the domain owner is an individual, only the domain and registration date are displayed, with no personal data shown. The data for AdminC and TechC—both of which are optional—will be published if they are legal entities, but not if they are natural persons.

In addition, the managing registrar/internet service provider will be displayed.

1.9 Information requests by third parties

If a third party claims to need information about a domain whose holder is not listed in the RDDS, for instance to assert legal claims, it must submit an information request to the managing registrar/internet service provider, who is published for this domain. Should this registrar/internet service provider not cooperate, you can contact tldbox GmbH. In every case, tldbox GmbH very carefully assesses whether the request appears justified on the basis of the facts provided. The third party must have a legitimate interest in the data requested, and be able to demonstrate such an interest. This can be done by providing a detailed statement of facts and concrete evidence, such as an extract from the trademark register, regarding infringements of rights to a name, distinctive sign and/or trademark, or other legal claims.

For instance, the wish to purchase a particular domain or ascertain the identity of a counterparty to a contract is not sufficient.

1.10 Erasure of data

tldbox GmbH believes that data must not be stored indefinitely without good reason. tldbox GmbH intends to store data only for as long as necessary. In the view of tldbox GmbH, storage of data for the duration of a contractual relationship is clearly necessary. In addition, tldbox GmbH stores data for as long as claims arising from a contractual relationship can be enforced. Furthermore, due to various statutory requirements, such as those on proper accounting, tldbox GmbH is obliged to store data for specific periods.

2 Your data protection rights

The GDPR includes an extensive package of protective rights for natural persons whose data are processed (i.e. collected, stored, transferred, restricted, erased, etc.):

2.1 Right of access

In accordance with Art. 15 of the GDPR, you have the right to request information about your personal data processed by tldbox GmbH. In particular, you may request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if not collected by tldbox GmbH, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information on the details thereof.

2.2 Right to rectification

In accordance with Art. 16 of the GDPR, you have the right to demand without delay the rectification of inaccurate or incomplete personal data stored by tldbox GmbH.

2.3 Right “to be forgotten” / erasure

In accordance with Art. 17 of the GDPR, you have the right to demand the erasure of your personal data stored with tldbox GmbH, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

2.4 Right to restriction of processing

In accordance with Art. 18 of the GDPR, you have the right to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure and tldbox GmbH no longer requires the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 of the GDPR.

2.5 Right to object

In accordance with Art. 21 of the GDPR, if your personal data are processed on the basis of the legitimate interest of tldbox GmbH, you have the right to object to the processing of your personal data for reasons arising from your specific situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which tldbox GmbH will implement without you having to indicate a specific situation.

2.6 Right to data portability

In accordance with Art. 20 of the GDPR, you have the right to receive your personal data from tldbox GmbH, and to have the data transmitted to another controller, provided this is technically feasible.

2.7 Right to withdraw consent

In accordance with Art. 7(3) of the GDPR, you may at any time withdraw the consent you have given to tldbox GmbH. As a result, tldbox GmbH may no longer continue the data processing based on this consent in the future. Among other things, you have the option of withdrawing your consent to the use of cookies on the website www.nic.versicherung with effect for the future by opening the Cookie Settings.

2.8 Assertion of rights of data subjects

You yourself decide on the use of your personal data. Should you therefore wish to exercise one of your above-mentioned rights towards tldbox GmbH, you are welcome to contact tldbox GmbH by email at service@nic.versicherung, by post or by telephone.

Together with your request, please send tldbox GmbH a copy of an official photo ID for clear identification (if this cannot be clearly determined) and support tldbox GmbH in clarifying your request by answering questions regarding the processing of your personal data. In your request, please state in which role (employee, applicant, visitor, supplier, customer, etc.) and during which period you have been in contact with tldbox GmbH. This enables tldbox GmbH to process your request promptly.

2.9 Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 of the GDPR, you have the right to complain to a data protection authority regarding the unlawful processing of your data by tldbox GmbH. As a rule, you can contact the data protection authority at your habitual place of residence or workplace or at the headquarters of tldbox GmbH. 

The competent data protection authority for tldbox GmbH is:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at

 3 Security of personal data

The security of your personal data is of particular concern to tldbox GmbH. Therefore, in accordance with Art. 32 of the GDPR and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, tldbox GmbH takes appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

These measures shall include, but not be limited to, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, disclosure, safeguarding of availability and segregation of data relating to them. Furthermore, tldbox GmbH has established procedures to ensure that data subjects' rights are exercised, data is deleted, and tldbox GmbH responds to threats to data. In addition, tldbox GmbH takes the protection of personal data into account as early as the development or selection of hardware and software, in accordance with the principles of data protection by design and by default set out in Art. 25 of the GDPR. 

Information security is of considerable importance for the protection of data. Therefore, tldbox GmbH is certified according to the international standard ISO 27001 in order to be able to offer the greatest possible security.

This understanding of security is also required of the processors that tldbox GmbH uses.

4 Technologies on our website
 Matomo Analytics
Provider: Matomo GmbH, Schönhauser Allee 36, 10435 Berlin, Germany
Responsible for technical development: InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand
E-mail address: privacy@matomo.org
Purpose: Web analytics, event tracking, conversion tracking, user-centered analysis
Category: Statistics
Recipient: New Zealand (cloud version), on-premise (self-hosting)
Processed data: Visit data (e.g. number of page views, dwell time, bounce rate), user behavior (e.g. clicks, conversions), anonymized IP addresses, browser and device data
Data subjects: Users of the website / app
Technology: Cookies (details in the cookie list), JavaScript, tracking pixels, local storage
Legal basis: Consent
Website: https://matomo.org
Further information:
https://matomo.org/gdpr-analytics/
https://matomo.org/100-data-ownership/
https://matomo.org/security/
https://matomo.org/matomo-cloud-privacy-policy/
https://matomo.org/privacy-policy/
https://matomo.org/terms/

We use the Matomo Analytics service to gain detailed insights into the behavior of our users. The technical purpose is to measure the success of our website/app and our marketing measures and to optimize user-friendliness.

Matomo works by collecting data via JavaScript and tracking pixels. 

The following data is processed as part of the reach measurement: 

the browser type and version used
the operating system used
country of origin
date and time of the server request
the number of visits
time spent on the website/app
and the external links clicked on
The information collected is stored either locally on a dedicated server or in the cloud. Matomo anonymizes IP addresses and uses cookies to recognize users without compromising their privacy. All relevant information about the cookies, including name, purpose of use and storage duration, is included in our detailed list of cookies used.

The storage period depends on the configurations. As a rule, the data is deleted after the expiry of statutory retention obligations. Additional details can be found in the linked further information. We recommend that you check these links regularly for changes.

Additional information on the rights of data subjects and the relevant contact details can be found in the general section of this privacy policy.

Cookies and Local Storage
We use cookies to make our website as user-friendly and functional as possible for you. Some of these cookies are stored on the device you use to access the site. 

Cookies are small packages of data that are exchanged between your browser and our web server whenever you visit our website. They do not cause any damage and are used solely to recognise website visitors. Cookies can only store information provided by your browser, e.g. information that you have entered into your browser or that is available on the website. Cookies cannot execute code and cannot be used to access your terminal device. 

The next time you access our website using the same device, the information stored in the cookies can then either be sent back to us (“first-party cookie”) or to a web application of third party to whom the cookie belongs (“third-party cookie”).  The information that is stored and sent back allows each web application to recognise that you have already accessed and visited the website using the browser on your device. 

Cookies contain the following information:

Cookie name
Name of the server from which the cookie originates
Cookie ID number
An expiry date, after which the cookie will be automatically deleted
We classify cookies in the following categories depending on their purpose and function:  

Technically necessary cookies, to ensure the technical operation and basic functions of our website. These types of cookies are used, for example, to maintain your settings while you navigate our website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart). 
Statistics cookies, to understand how visitors interact with our website by collecting and analysing information on an anonymous basis only. In this way we gain valuable insights to optimize both the website and our products and services. 
Marketing cookies, to provide targeted promotional and marketing activities for users on our website.
Unclassified cookies are cookies that we are trying to classify together with individual cookie providers.
Depending on the storage period, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your device. Persistent cookies store information between two visits to the website. Based on this information, you will be recognized as a returning visitor on your next visit and the website will react accordingly. The lifespan of a persistent cookie is determined by the provider of the cookie.

The legal basis for using technically necessary cookies is our legitimate interest in the technically fault-free operation and smooth functionality of our website. The use of statistics and marketing cookies is subject to your consent. These technologies are only activated after you have provided explicit consent via the cookie banner. You can withdraw your consent for the future use of cookies at any time. Your consent is voluntary. If consent is not given, no disadvantages arise. For more information about the cookies we actually use (specifically, their purpose and lifespan), refer to this Privacy Policy and to the information in our cookie banner about the cookies we use.

You can also set your web browser so that it does not store any cookies in general on your device or so that you will be asked each time you visit the site whether you accept the use of cookies. Cookies that have already been stored can be deleted at any time. Refer to the Help section of your browser to learn how to do this.

Please note that a general deactivation of cookies may lead to functional restrictions on our website. 

On our website, we also use so-called local storage functions (also called "local data"). This means that data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser - as long as you do not delete the cache or data is stored within the session storage. 

Third parties cannot access the data stored in the local storage. If special plug-ins or tools use the local storage functions, you are informed within the description of the respective plug-in or tool. 

If you do not wish plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.

Hosting
In the context of hosting our website, all data that arises in connection with the operation and use of the website is processed. This includes, in particular, content data, usage data, communication data, and technical data that are necessary for providing and securely operating the website.

The storage and processing of this data is necessary to enable access to the website, ensure the stability and security of the online offering, and to technically optimize the website.

To provide our online presence, we use the services of external web hosting providers. In this context, the data generated during the operation of the website is transmitted to these service providers or processed by them on our behalf. Processing is carried out exclusively in accordance with legal requirements and based on contractual agreements for data processing on behalf.

Further information on the handling of personal data in connection with hosting can be found in the privacy policy of this website.

Server-Logfiles
Category: General processing activity
Purpose: Technical security, stability, and error analysis
Data types: Technical connection data and access data
Data subjects: Visitors to the online offering
Recipients: Hosting providers or technical service providers
Technologies: Server logs
Legal basis: Legitimate interest (technical operation & security)

When you visit our website, so-called server log files are automatically created. These log files contain the following data, which is automatically transmitted by the browser:

IP address
Date and time of access
File or page accessed
Amount of data transferred
Notification of successful retrieval
Browser type and version used
Operating system used
Referrer URL (previously visited page)
Host name of the accessing device
This data is processed to ensure the functionality, security, and stability of our website, in particular to defend against or track attacks (e.g., DDoS attacks), for error analysis, and for the technical provision of the website. The legal basis for this is a legitimate interest in the secure and error-free provision of the website.

The log file data is automatically deleted after a standard technical period – after 12 weeks at the latest– once it is no longer required for the aforementioned purposes. Longer storage may occur in individual cases if data is required for evidence purposes (e.g., to investigate security-related incidents). This data is not merged with other data sources.

SSL Encryption
Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use this encryption procedure on the basis of our justified interest in the use of suitable encryption techniques.

We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art.

Webcare
Provider: DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria.
Purpose: Consent Management
Category: technically required
Recipient: EU, AT
Data processed: IP Address, Consent Data
Data subjects: Users
Technology: JavaScript call, Cookies, Swarmcrawler
Legal basis: Legitimate interest, consent (swarmcrawler to evaluate search results)
Website: https://www.datareporter.eu/
Further information: https://www.datareporter.eu/company/info

On our website, we use the Webcare tool for consent management. Webcare records and stores the decision of each user of our website. Our Consent Banner ensures that statistical and marketing technologies such as cookies or external tools are only set or started if the user has expressly consented to their use.

We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by accessing the cookie setting and managing the declaration of consent. Existing cookies are deleted after revocation of consent. For the storage of information about the status of the consent of the user, a cookie is also set, which is referred to in the cookie details. Furthermore, the IP address of the respective user(s) is transmitted to DataReporter's servers when this service is called up. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service.

With the help of Webcare, our website is regularly checked for technologies relevant to data protection. This investigation is only carried out for those users who have expressly given their consent (for statistical or marketing purposes). The search results of the users are evaluated by Webcare in an anonymous form and only in relation to technologies and used for the fulfillment of our information obligations. To start the Swarmcrawler technology, a request is sent to our servers and the IP address of the user is transmitted for the purpose of data transfer. Servers are selected which are geographically close to the respective location of the user. It can be assumed that for users within the EU, a server with a location within the EU will also be selected. The IP address of the user is not stored and is removed immediately after the end of the communication.

5 Manage cookie settings

About cookies
You can set your browser so that the storage of cookies is generally prevented or you are asked each time whether you agree to the setting of cookies. Once set, you can delete cookies at any time. How this works can be found in the help function of your browser. 

Required
Technically necessary cookies are used to enable the technical operation of a website and make it functional for you. The use is based on our legitimate interest to provide a technically flawless website. However, you can generally disable the use of cookies in your browser.  

6 Actuality of this Privacy Policy
Due to further developments or changes in legal requirements, it may become necessary to adapt this Privacy Policy from time to time. The current Privacy Policy can be found and printed out by you at any time here on this website.

For questions regarding data privacy, you can reach us at service@nic.versicherung or at the other contact details stated in this Privacy Policy.

Salzburg, September 30, 2026