Outside the KBC Group

KBC Insurance uses specialist third parties in Belgium and abroad to perform some processing operations. Such parties include:

• Exclusive insurance agencies, which also includes KBC Bank and CBC Banque
• Insurance brokers acting under a mandate/delegation granted to them by KBC Insurance
• Insurance intermediaries operating around the world, for the purpose of insuring international risks
• The e-health platform (www.ehealth.fgov.be) for secure exchanges of health data among doctors, victims and insurers
• AssurCard NV (www.assurcard.be), which supports communication between the insurance sector and service providers
• Association of Pharmacists Belgium (APB) and the Office of Co-operative Pharmacies in Belgium (OPHACO), which support the processing of BVAC certificates
• Informex (www.informex.be), which supports vehicle coachwork repairs and related payments
• Repairers (e.g., car repairers, glass repairers)
• Network managers who are responsible for steering and managing repairers from their network
• Loss assessors for the assessment of material damage or bodily injuries
• Psychologists providing support in the context of a claim event
• Private detectives engaged to investigate fraud cases
• (International) insurance firms with offices around the world
• Security and surveillance firms
• Services such as RAVIN AI Ltd or EMS Nederland BV for the assessment of damage to vehicles, buildings or their contents, and who can refer you to an appropriate repair service
• Applications like REVIDIA that we use to remotely view and assess the damage to your building via video, and take pictures of it to get an accurate view of the damage
• Service providers performing other services to which one is entitled, such as repatriation
• Assistance companies
• …

KBC Insurance may also directly or indirectly (e.g., through KBC Group NV) engage the services of other processors, such as:

• Consultants
• Third-party business introducers to fulfil its general duty of vigilance as laid down by law:
  • The obligation to identify and verify identities
  • The obligation to identify the customer characteristics and the purpose and nature of the business relationship
  • The obligation to update information
• Market research agencies such as Ipsos (www.ipsos.co), Profacts (www.profacts.be), GFK (www.gfk.com), Check market (www.checkmarket.com.), iVOX (www.ivox.be) and Intrinsiq (www.intrinsiq.be), DataSynergy (www.data-synergy.be), for issuing invitations and carrying out surveys
• ICT and ICT security service providers like Microsoft, Cognizant, IBM, Amazon and HP, and specialist fintech and artificial intelligence companies such as Onfido for facial recognition during the customer onboarding process
• Specialist cybersecurity companies that can provide you, as an insured, with round-the-clock technical support
• Marketing and communication agencies and similar companies, whereby KBC uses personal profile information on you that is held by them, along with the data it holds on you, to be able to make targeted offers to you via their channels (e.g., Google, Facebook, etc.)
• Companies that support KBC in identifying and analysing your user behaviour in our apps and on our websites (e.g., Adobe, Dynatrace). In preparation for the analysis of Adobe Data Analytics, KBC will rely on the services of Amazon Web Services – Cloud Computing Services. The transfer and processing of personal data from, to and in Amazon Web Services is encrypted
• Companies specialising in information archiving and access, such as Doccle (Doccle stores information on all our customers, including those that haven’t opted for digital record-keeping). Doccle uses Amazon Web Services – Cloud Computing Services)
• Companies specialising in scanning digital documents in order to digitise files with associated info
• Companies specialising in solvency investigations
• Printers for the printing and addressing of news magazines and badges, among other things, but also for the outsourcing of printed matter intended for customers. In this latter case, the information contained in the printed matter may also include health data or criminal records
• Translators and translation agencies
• Social Media Management tools (CX Social, 19 Public)
• Sworn real estate experts
• Communications agency Motisha BV www.motisha.com
• Companies providing Platform as a Service (PaaS) and Software as a Service (SaaS) in the cloud, such as:
• The Microsoft Dynamics CRM app used by KBC to maintain customer overviews
  • VEE24’s video chat app for enabling digital communication with KBC 
  • The storage services of Microsoft Azure or Amazon, on which KBC can place its own platforms or software that process and store your personal data
• Security services that screen Internet or e-mail traffic with KBC for cyberattacks or phishing scams
• TreasurUp, with whom KBC exchanges the contact details of company representatives to enable forex transaction analysis
• Nomios Belgium NV to set up a secure network connection between KBC entities worldwide based on SD WAN technology
• Applications that facilitate and automate call recording, where appropriate, for instance as offered by Luware
• Companies that carry out administrative duties in the context of property management, such as Quares NV
• ...

Other data controllers

As a data controller, KBC may – in addition to using other processors – also use other service providers or third parties, such as insurance brokers, lawyers, notaries public or doctors, who themselves are data controllers.

KBC may outsource the collection of payment arrears for a credit, for example, to firms specialised in it, which are themselves responsible for processing. KBC also distributes its own products and services in cooperation with third parties who refer their customers to KBC for insurance, for example. They do not act as intermediaries and only communicate to KBC the personal data necessary for making an offer or simulation. In doing so, the third parties are responsible for passing on the personal data. The third parties have access to a dashboard to monitor the purchase of the products. 

As a bank-insurer, KBC Insurance works together with KBC Bank, with both acting as personal data controller. Specific information regarding the controllers for the direct marketing domain is found here.​

KBC can itself act as a third-party business introducer for, for example, Payconiq, Belgian and Mobile ID (itsme). KBC then processes personal data as data controller. KBC transfers this personal data to the third party. Likewise, a third party may act as a third-party business introducer for KBC.

If you have Cyber Insurance with KBC Insurance, you yourself will also pass on personal data to third parties acting as data controllers in certain cases. This mainly concerns experts who assist you in the event of a possible claim event.

KBC Insurance uses the services of reinsurance companies (such as, for example, Swiss Re, Hannover Re, Munich Re and QBE Re) to reinsure risks it has assumed as insurer and thus to mitigate its own risk. These reinsurance companies act as data controller of your personal data. 

KBC Insurance uses the services of Datassur CV (www.datassur.be), a partnership between insurers for shared IT applications (Verpais, RDR (direct claims settlement) platform, Crashform and Siabis+), for claim settlement in files involving public interest entities and for managing databases with specific information (RSR database, car@ttest, find@car, Discover and contractor accreditations and registrations).

In order to detect and combat insurance fraud and to analyse risks, insurers exchange certain personal data through two databases established for this purpose within the insurance sector: the RSR database kept by Datassur (www.datassur.be) and the claims database whose controller is non-profit organisation Alfa Belgium (www.alfa-belgium.be). The purpose of these databases is to facilitate sound risk analysis and combat (organised) insurance fraud. Insurers will occasionally also directly exchange personal data in that context.

In certain specific cases, processors whose services KBC engages (see 'Specialist processors and joint controllers outside the KBC Group' and 'Other processors') may nevertheless act as controllers for the processing of KBC data. One such case is Microsoft, which also processes personal data for activities beyond the limited scope of a processor, such as billing, internal remuneration, internal reporting and internal organisation, combating fraud and security of their services, service improvement, financial reporting, and compliance with legal obligations applicable to them. KBC has entered into the necessary contractual arrangements with Microsoft to ensure compliance with the relevant data protection safeguards.

KBC can also cooperate with third parties such as Xerius Ondernemingsloket vzw. Xerius helps you to start up a business. During that process, Xerius may put you in touch with KBC to conclude an insurance agreement. Xerius then sends identification details to KBC. Xerius does this with your consent.

Voice Assistants

As a customer, you can ask for your balance and transactions via so-called virtual ‘Voice Assistants’ (Alexa, Google Assistant, etc.). In order to do this, you must first give KBC your consent to transfer the necessary insurance contract information to that service. The further processing, such as the electronic pronouncement of the amount of your claim by the service, is carried out entirely by the third party that provides the service to you. KBC is not responsible for that.