EUCARE processes your personal data
EUCARE Insurance PCC Ltd (“EUCARE”, “we”, “us” or the “Company”), with registered office at 16, Europa Centre, Triq John Lopez, Il-Furjana FRN 1400, Malta, processes your personal data as Data Controller when you visit and use EUCARE’s website.
EUCARE is a non-life insurance undertaking established and licensed in Malta and is authorised to carry on insurance business in other EU Member States under the EU passporting regime, including in the Netherlands, France, Germany and Belgium.
For any questions concerning the processing of your personal data or if you wish to exercise your data protection rights, you may contact us at:
By email: dpo@eucareinsurance.com
By post:
16, Europa Centre, Triq John Lopez, Il-Furjana FRN 1400, Malta / for the attention of the Data Protection Officer
How we use your personal data and on what legal basis
When you visit our website https://www.eucareinsurance.com, we may process personal data in order to:
- enable you to access and browse the website and use its features;
- ensure the proper and secure functioning, administration and maintenance of the website;
- respond to enquiries and requests submitted through our contact form or other contact channels;
- protect the website against spam, bots and other security threats;
- measure and understand how visitors use the website and improve its performance and functionality, where you have consented to analytical cookies or similar technologies;
- provide website functionality and third-party content, where applicable and subject to your cookie preferences; and
- comply with applicable legal or with a legally binding request from a regulator, court or law-enforcement authority.
Depending on the relevant processing activity, we process your personal data on one or more of the following legal bases:
- our legitimate interests, including operating, administering and securing our website and responding to general enquiries, where those interests are not overridden by your rights and interests;
- your consent, where required, including for the use of non-essential cookies and similar technologies;
- compliance with a legal obligation to which EUCARE is subject; and
- where applicable, taking steps at your request prior to entering into a contract.
Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Which personal data we use
When you browse our website for informational purposes only, you are not required to actively provide personal data or register with us. However, certain personal data and technical information, including a language-preference cookie set by our website’s multilingual plugin (WPML), are collected and processed automatically when you access and use the website, which is hosted on GoDaddy’s managed WordPress hosting environment.
This information may include your IP address, date and time of access, referring URL, browser type and version, operating system, device and browser characteristics, pages visited and approximate location derived from your IP address.
Additional personal data and information may be collected and processed through cookies and similar technologies used on the website. This includes information collected through an embedded Google Map on our Contact Us page. Depending on your cookie preferences, this may include information collected through Google Analytics 4 for audience measurement and website statistics, where you have provided the required consent.
For further information about the cookies and similar technologies used by EUCARE, their purposes and how you can manage your preferences, please refer to our Cookies Policy.
Information you provide to us
We may also collect personal data directly from you when you voluntarily provide it through the website.
In particular, if you use the “Talk to Us” contact form, we may collect:
- your name;
- your email address;
- the subject of your enquiry;
- the content of your message; and
- any other personal data that you voluntarily include in your communication.
We use this information to receive, manage and respond to your enquiry.
Contact-form submissions are handled through the email service used for info@eucareinsurance.com;
The contact form is intended to be protected by Google reCAPTCHA, a security service designed to help protect the website and its forms against spam, abuse and automated access by distinguishing legitimate users from automated bots. Where reCAPTCHA is deployed and enabled, and subject to any required consent, it may process certain information, such as your IP address, device and browser information, and interaction data, for the purposes of detecting and preventing bots, spam and other forms of abuse.
Please do not provide personal data that is not necessary for us to deal with your request.
Automated decision-making and profiling
EUCARE does not carry out automated decision-making or profiling through this website that produces legal effects concerning you or similarly significantly affects you.
The website is primarily informational in nature and does not provide online quotation, premium calculation, automated underwriting or insurance risk-scoring functionality based on personal data collected from or provided by users.
Certain technologies used to operate, secure or analyse the website may involve automated technical processing, such as bot detection or audience measurement where those services are deployed and enabled following the required consent. Such processing is not used by EUCARE through the website to make insurance underwriting or other decisions producing legal or similarly significant effects concerning website visitors.
With whom we share your personal data
Your personal data may be accessed by authorised personnel of the Company and by third parties to whom we have entrusted the provision of services or the performance of activities related to the purposes described in this Privacy Policy.
These third parties may include, in particular, providers of website development and maintenance services, website and cloud hosting and infrastructure services, email and communications services, analytics and audience measurement services, website security and anti-spam services, cookie consent management services, mapping and content-delivery services, as well as financial, professional and administrative services. This may include, where applicable, PTL Ltd (Malta) in connection with website development and maintenance; WP Umbrella, in connection with website monitoring, backups and maintenance, which involves access to the website’s underlying database and files; one.com in connection with managed WordPress hosting and related infrastructure; Complianz, in connection with cookie consent management, to the extent any consent records are stored outside the website; the email service provider handling contact-form submissions; the email service provider handling contact-form submissions; and Google in connection with services such as Google Analytics 4, Google reCAPTCHA, Google Maps and, where externally served, Google Fonts. Where required, the use of such services is subject to your applicable consent and cookie preferences. Your personal data will not be disclosed or disseminated to the public and we do not sell your personal data.
International transfers of personal data
EUCARE is established in Malta and operates within the European Economic Area, including in the Netherlands, France, Germany and Belgium.
Certain third-party technology providers used in connection with the website may process personal data outside the European Economic Area (EEA) or make personal data accessible from outside the EEA, including in the United States.
This may include transfers to, or access from, the United States in connection with services provided by Google, such as the embedded Google Map, Google Analytics 4 (where deployed and consented to), Google reCAPTCHA (where deployed and enabled) and Google Fonts, where such fonts are served externally.
Where personal data is transferred outside the European Economic Area, EUCARE will ensure that the transfer is carried out in accordance with applicable data protection legislation and that an appropriate transfer mechanism is relied upon, where required.
Such mechanisms may include:
- an adequacy decision adopted by the European Commission, including, where applicable, the EU-U.S. Data Privacy Framework in respect of transfers to U.S. organisations that are certified and actively participating in the Framework;
- the Standard Contractual Clauses approved by the European Commission; or
- another lawful transfer mechanism available under applicable data protection legislation.
Where the use of Google services involves a transfer of personal data to Google LLC in the United States, EUCARE may, where applicable, rely on Google LLC’s participation in the EU-U.S. Data Privacy Framework. Where the Framework does not apply to a particular transfer, other appropriate safeguards, including the European Commission’s Standard Contractual Clauses, may be relied upon, as applicable.
In relation to Google reCAPTCHA specifically, Google acts as a data processor (rather than a data controller) with effect from 2 April 2026. Where Google reCAPTCHA is deployed, EUCARE is the data controller for the personal data processed through this service, governed by Google’s Cloud Data Processing Addendum, in addition to relying on the EU-U.S. Data Privacy Framework, or, to the extent the Framework does not apply, the Standard Contractual Clauses.
You may contact us or our Data Protection Officer for further information about the safeguards applicable to international transfers of your personal data.
How long we keep your personal data
We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal and regulatory obligations.
The applicable retention period may vary depending on the type of information and the purpose for which it is processed.
In particular:
- Website and security logs are retained for the period required for website administration, security and troubleshooting, subject to the hosting provider’s applicable retention configuration;
- Information submitted through the contact form is retained for the period necessary to respond to and manage your enquiry and for any additional period required by applicable legal or regulatory obligations;
- Your personal data collected through website logs and contact-form submissions may be retained for as long as is strictly necessary to fulfil the purposes for which they were collected, and thereafter only for as long as required or permitted by applicable law, including for the establishment, exercise or defence of legal claims.
- Cookie retention periods vary according to the type of cookie and are described in the Cookies Policy.
How we protect your personal data
EUCARE applies appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal data is limited to authorised personnel and service providers that require access for the purposes described in this Privacy Policy and is subject to appropriate confidentiality and security requirements.
Your data protection rights
Subject to the conditions, limitations and restrictions provided by the GDPR, the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) and other applicable data protection legislation, you may exercise the following rights in relation to your personal data.
In certain circumstances, your rights may be restricted in accordance with applicable data protection law, including the Restriction of the Data Protection (Obligations and Rights) Regulations (S.L. 586.09). This may include, for example, restricting the right of access where necessary for the establishment, exercise or defence of a legal claim or for legal proceedings.
Any such restriction will only be applied where permitted by law and where it is necessary and proportionate. Where EUCARE applies such a restriction, you will be informed accordingly, unless providing such information would prejudice the purpose of the restriction.
Access
You may request confirmation as to whether we process your personal data and, where we do, obtain access to your personal data and information about its processing.
Rectification
You may ask us to correct personal data concerning you that is inaccurate and to complete information that is incomplete.
Erasure
You may ask us to erase your personal data where the conditions provided by applicable data protection law are satisfied, including where the personal data is no longer necessary for the purposes for which it was collected.
Restriction
You may ask us to restrict the processing of your personal data in certain circumstances, including while we verify the accuracy of information that you have contested.
Data portability
Where the applicable legal requirements are satisfied, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and may have the right to transmit that data to another controller.
Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
Right to object
Where we process your personal data on the basis of our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Automated decision-making
Where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, subject to the conditions and exceptions established by applicable data protection law.
As explained above, EUCARE does not carry out such automated decision-making through this website.
How to exercise your rights
You can exercise your data protection rights by contacting EUCARE or our Data Protection Officer using the contact details provided at the beginning of this Privacy Policy.
We may request information reasonably necessary to verify your identity before responding to your request.
We will provide information on the action taken on your request without undue delay and, in any event, within one month of receiving it. Where necessary, taking into account the complexity and number of requests, this period may be extended by up to two further months. If an extension is required, we will inform you within one month of receiving your request and explain the reasons for the delay.
Exercising your rights is generally free of charge. However, where permitted by applicable law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
Your right to lodge a complaint
If you believe that EUCARE’s processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
As EUCARE is established in Malta, you may lodge a complaint with the:
Office of the Information and Data Protection Commissioner (IDPC) – Malta
You may also have the right to lodge a complaint with the data protection supervisory authority in the EU/EEA Member State of your habitual residence, place of work or the place of the alleged infringement.
We encourage you to contact EUCARE or our Data Protection Officer first if you have any questions or concerns about how we process your personal data, so that we have an opportunity to address them.
Right to a judicial remedy
Without prejudice to your right to lodge a complaint with a competent supervisory authority, you may also have the right to an effective judicial remedy in accordance with applicable data protection law, including where you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data.
Changes and updates to this Privacy Policy
EUCARE may amend or update this Privacy Policy from time to time to reflect changes in applicable laws or regulatory requirements, guidance or recommendations issued by competent supervisory authorities, changes to our website or changes in the way we process personal data.
Any material changes will be communicated in accordance with applicable law, including, where appropriate, by publishing an updated version of this Privacy Policy on our website.
Last updated: 24th September 2026
