Privacy Statement
Explaining our Privacy Policy
About us and scope
Contact us
For any questions regarding any aspect of this privacy policy and our use of your personal data, you may contact us using the contact information below:
The Hartford Steam Boiler Inspection and Insurance Company
Attn: Corporate Communications
One State Street
Hartford, CT 06102-5024
Email: customer_solution_center@hsb.com
Telephone: 1-800-472-1866
Data we collect and how we use it
Use of cookies
Sharing your personal data
Transmitting your personal data externally
Security
Retention of your personal data
Your rights
California residents: Your privacy rights
Privacy Policy
Last updated: May 07, 2021
About us and scope
The Hartford Steam Boiler Inspection and Insurance Company and its affiliates and subsidiaries (“HSB”, “we”, “us”, or “our”) are committed to protecting the privacy of your personal data. This privacy policy applies to the websites located at http://www.hsb.com, https://www.munichre.com/hsb/en.html, and the various related mobile applications and platforms owned or controlled by HSB and/or its parent company, Munich Re (individually and collectively, the Site(s)). This privacy policy explains our policies and practices concerning collection, use, disclosure, and processing of your personal data collected through the Site(s) and by other related means (for example, through e-mail, phone calls and other communications).
Depending on the nature of your relationship with us, there may be other websites, platforms, and related mobile applications that are distinct from the Site(s) that you use or are offered in the jurisdiction in which you are located. In such cases, there may be supplemental or different privacy policies which apply to your specific use. You are advised to review the privacy policies made available on each of the Site(s) that you use, as well as any other applicable privacy policies, notices, or statements provided by us to you.
Date we collect and how we use it
There are two categories of personal data that we may collect when you visit the Site(s): data collected automatically; and data that you provide voluntarily. Before we collect any of your personal data, you must affirmatively agree that we may collect, disclose, use or otherwise process your personal data in accordance with this privacy policy.
Data collected automatically
When you access the Site(s), we use automatic data collection technologies to collect your IP address, browser information (such as type, version, location and carrier), operating systems information, referral URL information, network information, user location, login dates and times, language preferences, access information, and information about how and when you use the Site(s) (e.g., page visits and views, link clicks, etc.). We collect this data through cookies, server logs, and other technologies, such as web analytics tools.
Use of cookies
While We use cookies in the Site(s). Some cookies stay on your device when you leave our Site(s), however, most cookies that we use are deleted when you leave our Site(s). If you would like further information on the use of cookies in our Site(s), please click on the following link to our data protection declaration page and scroll down to Section 3 entitled “Cookies and log files”: https://www.munichre.com/en/general/privacy.html.
Data that you provide voluntarily
Our relationship with you
Our relationship with you (including the Site(s) that you use and the products or services you request) will dictate the types of personal data that we collect from you and our uses of such data. For example, we collect and use different personal data according to whether you are an insured policyholder, a claimant, a customer to whom we provide inspection services, a passive visitor of our Site(s), or a job applicant.
Where you provide personal data to us about other individuals (for example, where you are a customer to whom we provide services and you provide us with personal data about your employees or your own customers), we will collect, use and disclose such personal data in accordance with this privacy policy. You must be authorized by the individual(s) to provide us with their personal data and it is your responsibility to refer such individuals to this privacy policy before providing us with personal data on their behalf.
Collecting and processing your personal data
Personal data that we collect from you may include the following:
- Contact information, such as: first and last name, title, company name, e-mail address, phone number, location and postal address.
- Authentication and access information, such as: username, password and related security information.
- Policy and claim information (including materials submitted as part of a claim).
- Feedback, inquiries or other communications about the Site(s) and our products and services.
- Your preferences, such as: language, date format, notification method, postal code, and time zone.
- Your profile picture (if provided voluntarily).
We process your personal data in accordance with applicable laws and always for one or more of the following reasons:
- To enter into or perform a contract or for other business or commercial purposes: For example, we use your personal data to provide quotes; investigate claims; fulfill orders for products or services; communicate with you; respond to customer service requests; facilitate use of the Site(s), fulfill the reason for which you provided us your information, to improve our Site(s) and content; for testing, research, analysis or product development; etc.
- Our legitimate business interests: For example, we use your personal data to make improvements to our Site(s), our internal operations, our security efforts, and our products and services which benefit our customers.
- With your consent: For example, we will obtain your consent to process your personal data for purposes of sending you marketing or promotional material. Consent can be withdrawn in these circumstances by opting out of such communications at any time; provided, however, that it will not affect data processed prior to such withdrawal.
- As otherwise permitted by law or where required to comply with one or more of our legal obligations: For example, we may process your personal data for the establishment, exercise or defense of legal claims.
Sharing your personal data
We will keep your personal data confidential and only share it with others in furtherance of one or more of the purposes above.
Internal disclosures
We share your personal data, on a confidential basis, with those departments and staff members (including departments and staff members of our affiliates or subsidiaries) who are responsible for the applicable use or processing activity and who have a need to know in order to perform their duties.
Disclosures to third parties
We may share your personal data with our parent, Munich Re (and its subsidiaries), as well as third party service providers. A list of the categories of third party service providers to whom your data may be disclosed is provided below:
- Any agent or representative acting for you;
- Insurers or reinsurers;
- Third parties in the insurance distribution chain who we rely on to administer insurance, such as brokers, insurers, and other intermediaries;
- Actuaries;
- Auditors;
- Law firms and other advisors;
- Credit referencing, debt collection and fraud and prevention agencies;
- IT service providers, IT maintenance providers, and cloud service and hosting providers;
- Regulators and other applicable governmental bodies;
- Selected third parties in connection with any sale, transfer, or disposal of our business; or
- Any other person where necessary to perform a contract with you, to protect ourselves from risk, or to ensure regulatory compliance or good governance.
Transmitting your personal data internationally
Sale
Third party sites
Security
Retention of your personal data
Your rights
To the extent provided by law, you may have the right to:
- request access, updates or corrections to your personal data, or that we delete your personal data;
- request a disclosure of the personal data that we have collected from you;
- request transfer of your personal data;
- request we restrict access to your personal data;
- object to our processing of your personal data; or
- lodge a complaint with your local data privacy regulator.
The rights listed above may not apply in every circumstance or to every user. You can exercise your rights or request more information about your rights by contacting us using the contact information below. If we require further information from you to process your request or verify your identity, one of our staff will contact you. Verification of your identity may be through various means, including but not limited to, verification against our own records, through use of a password protected account that you maintain with us, or by other means we deem appropriate given the nature of the request and the personal data involved. In any case, we will attempt to respond to each of your requests not later than thirty (30) days after receipt of such requests or in such other timeframe as may be specified by applicable law. We will advise you in writing if we cannot meet your requests within this time limit.
Please note that there may be certain circumstances where we cannot comply with your request; such as where complying with it would mean that we couldn't comply with our own legal or regulatory requirements or an exemption under applicable law applies to the specific circumstances. In these instances, we will let you know why we cannot comply with your request.
In some circumstances, complying with your request may result in your insurance policy or inspection or other related services contract being cancelled or your claim being discontinued where we can no longer provide you with the relevant service. We will inform you of this at the time you make such a request.
California Residents: Your Privacy Rights
Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights with respect to HSB’s collection, use, and sharing of their personal data.
HSB collects various categories of personal data when you use the Site(s). A detailed description of the data HSB collects and how we use it is provided above (Section entitled - “Data we collect and how we use it”). You will find that the Section entitled “Sharing your personal data” describes the categories of third parties with whom we share your personal data and what information may be shared under different circumstances.
We will not discriminate against you for exercising your rights under the CCPA. We will not: (i) deny goods or services to you, (ii) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, (iii) provide you a different level or quality of goods or services, or (iv) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. We do not offer financial incentives associated with our collection, use, or disclosure of your personal data.
Separate from the CCPA, California’s Shine the Light law gives California residents the right to ask companies what personal data they share with third parties for those third parties’ direct marketing purposes. We do not disclose your personal information to third parties for the purpose of directly marketing their goods or services to you unless you request such disclosure.
If you have any questions regarding this privacy policy or wish to submit a rights request through HSB’s Customer Solutions Center, you may contact us using the contact information provided below.
How to ‘opt out’ from marketing
You have control over the extent to which we market to you and can request that we stop sending you marketing messages at any time. You can do this by either clicking on the "unsubscribe" button in any marketing email that we send to you or by contacting us using the contact information set forth below.
Please note that even if you opt out from receiving marketing communications, we may still send you service-related and administrative communications from which you cannot opt out without choosing to discontinue doing business with us.
Children's use of the site(s)
Do not track disclosure
Our contact information
For any questions regarding this privacy policy, how to exercise your rights, or to inquire about our collection, use, disclosure, and processing of your personal data, you may contact us using the contact information below:
The Hartford Steam Boiler Inspection and Insurance Company
Attn: Corporate Communications
One State Street
Hartford, CT 06102-5024
Email: customer_solution_center@hsb.com
Telephone: 1-800-472-1866
Your authorized agent may also make requests on your behalf. Please have your authorized agent contact us using the information above and to include the proper documentary evidence that demonstrates their authority to make such a request on your behalf. Such documentary evidence includes a signed permission by you or a properly executed power of attorney. Where you have provided signed permission to the authorized agent, we may take steps to verify your identity or directly confirm with you that you have authorized the agent to make a request on your behalf.