Privacy policy.

1. Who is the data controller

For any matter relating to the protection of your data, you can write to us at info@assega.com stating “Data protection” in the subject line, or by post to the address given.

2. Applicable legislation

Assega processes personal data in accordance with Llei 29/2021, del 28 d'octubre, qualificada de protecció de dades personals (LQPD) (the Qualified Act on Personal Data Protection) and its implementing regulations, under the supervision of the Andorran Data Protection Agency (APDA). Where applicable to users resident in the European Union, the principles of Regulation (EU) 2016/679 (GDPR) are also taken into account. As an insurance brokerage, Assega is also subject to Llei 12/2017 d'ordenació i supervisió d'assegurances i reassegurances (the Act on the regulation and supervision of insurance and reinsurance) and to the regulations on the prevention of money laundering.

3. What data we collect and through which channel

We only collect the data that you voluntarily provide to us through the Website forms, by email or by telephone, and the technical data necessary for the operation and security of the Website.

3.1 Contact form

Full name, telephone number, email address, reason for the enquiry and message.

3.2 Quote request

In all cases: first name, surname, email address and telephone number. Depending on the type of insurance, we also ask for the data essential to assess the risk and request offers from the insurers:

• Vehicles: type and use of the vehicle, make, model, year, registration number, date of birth, years of holding a driving licence, desired cover and current insurer.
• Assega Prestige: make, model, year, approximate value, annual mileage, type of garage, cover of interest and contact preference.
• Health: date of birth, sex, occupation, number of people to be insured, desired cover and sum insured, and information on habits (smoking, sports activity).
• Life: date of birth, occupation, smoking habit, purpose of the insurance, sum insured and cover of interest.
• Home & communities: type and use of the home, parish, floor area, year of construction, values of the building and contents, and security measures.
• Shops & retail: name and activity of the retail business, address, floor area, year of construction, number of employees, type of premises, insurable values and security measures.
• Business: name and activity of the business, turnover, number of employees, activity outside Andorra, sum insured and cover of interest.

Health-related data (for example, smoking habit or sports activity in the health and life forms) are special categories of data. We process them only with your explicit consent, which you give when submitting the form, and exclusively to assess the risk and obtain offers from insurers.

3.3 Claim report

Name of the insured, type of insurance, policy number, registration number, email address, telephone number, date and place of the claim, description of the facts, damage observed, remarks and, where applicable, attached photographs or documents. If another party is involved, also their name, insurer, policy number and registration number. Anyone who reports a claim warrants that they are entitled to provide third-party data (for example, that of the other driver) for the sole purpose of handling the claim.

3.4 Suggestions and complaints

Name, file number (if you have one), email address, telephone number and comments.

3.5 Browsing

IP address, type of browser and device, language, pages visited and cookies, as explained in the Cookie policy. To protect the forms against spam we use Google reCAPTCHA and our own automatic detection mechanisms (hidden fields and checks on submission time).

4. Why we process the data and on what legal basis

We do not use your data to send unsolicited commercial communications or to take automated decisions with legal effects. We do not sell personal data.

5. Who we share the data with

• Insurers that Assega works with, in order to obtain offers, formalise the policy and manage claims. Each insurer is responsible for its own processing.
• Loss adjusters, workshops, healthcare or legal professionals involved in the handling of a claim, where necessary.
• Service providers acting as data processors, under a contract that binds them to confidentiality: hosting of the Website and email (servers located in the European Union), technical maintenance of the Website and cookie consent management tools.
• Google LLC, to the extent that its reCAPTCHA, Maps and Fonts services are used and, if you consent, Google Analytics.
• Public administrations and authorities (AFA, UIFAND, courts) where required by law.

6. International transfers

Data are processed mainly in Andorra and the European Union. The use of Google services may involve data transfers to the United States; Google provides appropriate safeguards (standard contractual clauses and adherence to the EU-US Data Privacy Framework). You can consult its terms at policies.google.com/privacy.

7. How long we keep the data

• Enquiries, suggestions and quotes not taken up: up to 12 months from the last communication, so that we can follow up your request.
• Policies taken out and claims: for the entire duration of the relationship and, once it has ended, for the limitation periods applicable to legal liabilities and the document retention periods imposed by insurance, tax and money laundering prevention regulations.
• Browsing data and cookies: the periods stated in the Cookie policy.

8. What rights you have

In accordance with the LQPD, you may at any time exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as to withdraw your consent without affecting the lawfulness of the processing carried out previously, and the right not to be subject to decisions based solely on automated processing.

To exercise them, send a request to info@assega.com or to Baixada del Molí, 14 · AD500 Andorra la Vella (Principality of Andorra), stating the right you wish to exercise and attaching a copy of a document that identifies you. We will respond within one month, which may be extended depending on the complexity of the request.

If you consider that we have not properly dealt with your rights, you may lodge a complaint with the Andorran Data Protection Agency (APDA).

9. Security

We apply technical and organisational measures to protect the data: encrypted communication (HTTPS), access restricted to authorised persons in the office, backups, protection of the forms against spam and confidentiality contracts with providers.

10. Minors

The forms on the Website are aimed at persons over 16 years of age. If you are a minor, ask your mother, father or guardian to make the request on your behalf.

11. Changes to this policy

We may update this Privacy policy to adapt it to legal developments or to changes in the services of the Website. We recommend that you review it periodically.

Last updated: September 2026