NewEquine surgery insuranceNewdental supplementary insuranceNewClassic car insuranceNewE-bike insuranceNewDog Health InsuranceNewCat health insurance
nextsure

Privacy Policy

Last updated: January 2026

We (i.e. the company providing you with this privacy policy or named in the imprint as the operator of this site) take the protection of your personal data seriously. This privacy policy describes how we collect, record, use, disclose, transfer and store (“process”) your personal data. The personal data collected depends on the context of your interactions with us, the products, services and features you obtain from us, your location and place of residence, and the applicable law.

1. Processing of personal data in connection with your use of our websites, applications and online services

Data categories and purpose of processing

In connection with your use of our external and internal websites, applications or online services (each an “online offering”), we process the following categories of personal data:

  • your contact information, such as first and last name, business address, business phone number, business mobile number and business email address,
  • organisational information, including position and company name,
  • other personal data that you yourself provide in contact and other forms of an online offering,
  • information that you provide in the course of a support request, a survey, a comment or a forum post,
  • information collected automatically in the course of your use of an online offering, such as your device and user ID, information about your operating system, pages and services you used and visited during your visit, and the date and time of a user request.

We process your personal data for the following purposes:

  • to enable you to use the services and functions of the online offerings, including creating and administering your online account, in the course of updates, security and troubleshooting measures,
  • to provide customer support and to improve and further develop our online offerings,
  • to bill the use of an online offering, to establish your identity and to enable user authentication,
  • to process your request or instruction,
  • to process your order and to make related information and offers available to you,
  • to contact you with information and offers about our products and services, to send you further marketing information or to contact you in the course of customer satisfaction surveys,
  • to enforce our terms of use, to assert or defend legal claims, and to prevent and stop fraudulent and similar acts, including attacks on our IT infrastructure.

Online offerings provided by your company

In some cases, our online offerings are provided to you by the company that employs you. If you use an online offering provided by your company, the processing of personal data entered into the content of the online offering by you or your company takes place on behalf of and according to the instructions of your company, within the framework of a data processing agreement between your company and us. In this case, your company is responsible under data protection law. If you have questions about personal data that we process as a processor for your company, please contact your company.

2. Processing of personal data in connection with your use of our marketplaces

Data categories and purpose of processing

In connection with your use of our marketplaces (each a “marketplace”), we process the following categories of personal data:

  • your contact information, such as first and last name, business address, business phone number, business mobile number and business email address,
  • organisational information, including position and company name,
  • payment data, such as information required to process payment transactions or for fraud prevention, including credit card information and card verification numbers,
  • other personal data that you yourself provide in contact and other forms of a marketplace,
  • information that you provide in the course of a support request, a survey, a comment or a forum post,
  • information legally required in the course of compliance and export control screenings, such as date of birth, nationality, place of residence, ID numbers, information on relevant court proceedings and other legal disputes, and
  • information collected automatically in the course of your use of a marketplace, such as your device and user ID, information about your operating system, pages and services you used and visited during your visit, and the date and time of a user request.

We process your personal data for the following purposes:

  • communicating with you about our services and products, e.g. to process your inquiries or to provide technical information about products,
  • planning, performing and managing the (contractual) business relationship, e.g. to process orders for products and services, collect payments, for accounting and billing purposes, and to carry out deliveries, maintenance or repairs,
  • contacting you with information and offers about our products and services and carrying out further marketing activities and customer satisfaction surveys,
  • maintaining and protecting the security of our products and services and of our websites, preventing and detecting security risks, fraudulent conduct or other criminal or malicious acts,
  • complying with legal requirements (e.g. tax and commercial retention obligations), existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) as well as our policies and industry standards, and
  • settling legal disputes, enforcing existing contracts and asserting, exercising and defending legal claims.

3. Processing of personal data of business partners

Data categories and purpose of processing

In the course of our cooperation with business partners, we process personal data of end consumers and contact persons at customers, prospects, sales partners, suppliers and partners (each a “business partner”):

  • contact information, such as first and last names, business address, business phone number, business mobile number and business email address,
  • organisational information, including position and company name,
  • payment data, such as information required to process payment transactions or for fraud prevention, including credit card information and card verification numbers,
  • other information whose processing is required in the course of a project or the performance of a contractual relationship with us, or which is provided voluntarily by business partners, e.g. in the course of orders placed, inquiries or project details,
  • personal data collected from publicly available sources (including company- or profession-related social networks and websites), information databases or credit agencies, and
  • information legally required in the course of compliance and export control screenings, such as date of birth, nationality, place of residence, ID numbers, information on relevant court proceedings and other legal disputes in which business partners are involved.

We process the personal data for the following purposes:

  • communicating with business partners about products, services and projects, e.g. to process the business partner’s inquiries or to provide technical information about products,
  • planning, performing and managing the (contractual) business relationship between the business partner and us, e.g. to process orders for products and services, collect payments, for accounting and billing purposes, and to carry out deliveries, maintenance or repairs,
  • creating a personal profile with business-related information about interactions between you and us, with the aim of being able to offer you and the company you work for relevant information and suitable offers for services and products, and of improving our personal communication with you,
  • conducting market analyses, prize draws, competitions or similar campaigns and events,
  • contacting you with information and offers about our products and services and carrying out further marketing activities and customer satisfaction surveys,
  • maintaining and protecting the security of our products and services and of our websites, preventing and detecting security risks, fraudulent conduct or other criminal or malicious acts,
  • complying with legal requirements (e.g. tax and commercial retention obligations), existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) as well as our policies and industry standards, and
  • settling legal disputes, enforcing existing contracts and asserting, exercising and defending legal claims.

4. Processing of personal data for customer satisfaction surveys and direct marketing

Within the framework of applicable law, we may use your contact details for direct marketing purposes (e.g. trade fair invitations, newsletters with information and offers about our products and services) and to conduct customer satisfaction surveys, in each case also by email. You have the right to object to the use of your contact details for these purposes at any time by sending an email to datenschutz@nextsure.de or by using the opt-out option in the message you received.

5. Processing of personal data in connection with your application

If you apply for an open position with us, we process your personal data as described in the privacy policy of the nextsure recruiting portal or of the application platform you use.

6. Transfer and disclosure of personal data

We only transfer your personal data as described below:

Companies and sales partners

For the purpose and to the extent necessary to carry out our business relationship with you, we transfer your personal data to our companies and other third parties (e.g. sales partners and agents). For example, we distribute certain products and services only via local business relationships, in which case we transfer your personal data to our respective local companies or other sales partners who handle the business relationship with you.

Transactions on our marketplaces

Via our marketplaces, we also make products, services and offers from our companies and other third parties available. We transfer personal data of our customers in connection with these transactions to the respective company and/or other third parties.

Service providers

We commission companies and other enterprises to perform tasks on our behalf, e.g. manufacturers, service providers, IT services or payment processing. These companies and other enterprises process personal data exclusively for the purpose of the commissioned products and services.

Other third parties

We transfer personal data in connection with the fulfilment of legal obligations or the establishment, exercise or defence of rights or claims to other third parties (e.g. for court and arbitration proceedings, to regulatory, law enforcement and government authorities, to lawyers and advisers). Recipients of your personal data may be located outside the country in which you reside. Personal data published by you via online offerings (e.g. in chat rooms or forums) may be accessible worldwide to other registered users of the respective online offering.

7. Retention periods

Unless an explicit retention period is specified at the time of collection (e.g. in a declaration of consent), your personal data will be deleted once it is no longer required to fulfil the purpose of storage, unless statutory retention obligations (e.g. commercial and tax retention obligations) prevent deletion.

8. Your rights

Under applicable data protection law, you may have the right:

  • to request confirmation as to whether we process personal data about you and to obtain information about the personal data we process,
  • to request the rectification of inaccurate personal data,
  • to request the erasure of the personal data we process,
  • to request the restriction of the processing of personal data,
  • to request the transfer of the personal data you have actively provided to us,
  • to object to the processing of personal data on grounds relating to your particular situation, or
  • to withdraw consent you have given.

9. Data security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, use or alteration, and against unauthorised disclosure or access.

10. Contact

Our data protection organisation supports you with all questions relating to data protection. Complaints can also be lodged with our data protection organisation, and the rights set out in this privacy policy can be asserted through it.

Our data protection organisation can be contacted at datenschutz@nextsure.de.

Our data protection organisation always endeavours to address and remedy your inquiries and complaints. In addition to contacting the data protection organisation, you also have the option of contacting the competent data protection supervisory authority at any time.

11. Processing of personal data within the scope of the EU General Data Protection Regulation

This section applies if your personal data is processed by one of our companies established in the European Economic Area.

Controller for data processing – online offerings

The controller within the meaning of the General Data Protection Regulation for the processing activities described in this privacy policy is the company named in the imprint of the online offering.

Marketplaces

The company named on the marketplace as the operator of the marketplace is the controller for data processing.

Personal data of business partners in our customer relationship systems

We may share contact information of business partners with other companies in the context of your business relationship with us. We and these companies are jointly responsible for the protection of your personal data (Art. 26 General Data Protection Regulation). To ensure that you can exercise your data protection rights easily and reliably within this joint responsibility, we have agreed with these companies that you can assert your data subject rights described in section 8 not only against the respective company but also centrally against SCAILE Technologies GmbH. You can contact us at: datenschutz@nextsure.de.

Legal basis of processing

The General Data Protection Regulation obliges nextsure to inform you about the legal basis of data processing. Unless expressly stated otherwise at the time the personal data is collected, the legal basis for data processing is:

  • the performance and fulfilment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation) (“performance of a contract”),
  • compliance with legal obligations to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation) (“compliance with legal obligations”), or
  • the protection of our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation) (“legitimate interest in the processing”).

Our legitimate interest lies in processing your personal data for the purposes of (i) offering and operating the online offerings and (ii) initiating, performing and settling our business relationship.

Where our legitimate interest in the processing is stated below as the legal basis for the processing of your personal data, we believe that your interests, fundamental rights and freedoms are adequately taken into account, because (i) we regularly review the processing activities described in this privacy policy and the underlying processes, (ii) we take the protection of your personal data into account in our processes, including the Binding Corporate Rules for the protection of personal data (nextsure Binding Corporate Rules), (iii) we ensure the transparency of our processing activities, and (iv) you are entitled to the aforementioned rights with regard to our processing activities.

If you would like further information on the balancing of interests described, please contact our data protection organisation at datenschutz@nextsure.de.

If, in an individual case, you have expressly given your consent to the processing of your personal data, this consent is the legal basis for the processing (Article 6 (1) (a) of the General Data Protection Regulation) (“consent”).

Processing of personal data in connection with the use of our online offerings – purpose and legal basis

  • Enabling the use of the services and functions of the online offerings, including creating and administering your online account, in the course of updates, security and troubleshooting measures, providing customer support, and improving and further developing our online offerings
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Billing the use of an online offering
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Establishing identity and user authentication
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Processing your request or instruction
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Processing your order and making related information and offers available
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Sending marketing information or contacting you in the course of customer satisfaction surveys, as described in section 4
    • Consent, if given voluntarily (Article 6 (1) (a) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Enforcing our terms of use, asserting and defending legal claims, preventing and stopping fraudulent and similar acts, including attacks on our IT infrastructure
    • Compliance with legal obligations (Article 6 (1) (c) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)

Processing of personal data in connection with your use of our marketplaces and of business partners – purpose and legal basis

  • Communication about products, services and projects, e.g. to process the business partner’s inquiries or to provide technical information about products
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Planning, performing and managing the (contractual) business relationship between us, e.g. to process orders for products and services, collect payments, for accounting and billing purposes, and to carry out deliveries, maintenance or repairs
    • Performance of a contract (Article 6 (1) (b) GDPR)
    • Compliance with legal obligations (Article 6 (1) (c) GDPR)
  • Creating a personal profile with business-related information about interactions between you and us, with the aim of being able to offer you and the company you work for relevant information and suitable offers for services and products, and of improving our personal communication with you
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Conducting market analyses, prize draws, competitions or similar campaigns and events
    • Consent, if given voluntarily (Article 6 (1) (a) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Conducting customer satisfaction surveys and direct marketing as described in more detail in section 4
    • Consent, if given voluntarily (Article 6 (1) (a) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Maintaining and protecting the security of our products and services and of our websites, preventing and detecting security risks, fraudulent conduct or other criminal or malicious acts
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Complying with legal requirements (e.g. tax and commercial retention obligations), existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) as well as our policies and industry standards
    • Compliance with legal obligations (Article 6 (1) (c) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Settling legal disputes, enforcing existing contracts and asserting, exercising and defending legal claims
    • Compliance with legal obligations (Article 6 (1) (c) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)
  • Processing your contact details for direct marketing purposes (e.g. trade fair invitations, newsletters with further information and offers about our products and services) and for conducting customer satisfaction surveys
    • Consent, if given voluntarily (Article 6 (1) (a) GDPR)
    • Legitimate interest in the processing (Article 6 (1) (f) GDPR)

International data transfers

If we transfer your personal data to a recipient not established in the European Economic Area, we ensure that your data is adequately protected in accordance with the General Data Protection Regulation. In this context, where legally required, we take the following measures:

  • We only pass on your personal data to companies in such countries if they have implemented the Binding Corporate Rules for the protection of personal data (“BCR”).
  • Personal data is only transferred to recipients outside the group in such countries if they have (i) concluded EU standard contractual clauses with us or (ii) implemented Binding Corporate Rules.

Further information and a copy of the implemented measures can be obtained at datenschutz@nextsure.de.

The competent data protection authority

Our data protection organisation supports you with all questions relating to data protection. In addition to contacting the data protection organisation, you also have the option of contacting the competent data protection supervisory authority at any time. An overview of the national data protection authorities in the European Economic Area is available on the website of the European Data Protection Board: www.edpb.europa.eu.

12. Processing of personal data within the scope of Swiss data protection law

Every data subject has the right to enforce their rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority of Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).

13. Further information for users of online offerings and business partners in the USA

Do Not Track

Our online offerings do not recognise so-called “Do Not Track” settings of your web browser. For further information on the “Do Not Track” functionality, please visit the help pages of your web browser.

Use by children

Our online offerings are not directed at children under the age of 13. Where required by law, we do not knowingly collect personal data from children under 13 without the consent of their legal guardians. We only collect and transfer personal data of children to the extent legally permissible, in order to obtain the consent of the legal guardians or to protect the child.

Your rights in certain US states

Under the laws of some US states, residents of these states have further rights with regard to their personal data. Further information is available on request at datenschutz@nextsure.de.