Privacy Policy

In this Privacy Policy we tell you how your personal data are gathered, processed and used.

1. WHO IS THE CONTROLLER FOR YOUR DATA?

Identity of the controller: ON RISK AGENCIA DE SUSCRIPCIÓN, S.L. (hereinafter, “onRisk”).

Postal address: C/ Londres, número 29, Barcelona (08029)

Email:lopd@onriskseguros.com

2. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

At onRisk, we process the personal data you provide to us for the following main purposes:

  1. Manage, maintain and perform the contractual relationship resulting from taking out the insurance policy.
  2. Perform quality control of the products and services taken out.
  3. Comply with statutory obligations in insurance issues.
  4. Conduct opinion surveys and market research for statistical purposes.
  5. Respond to your queries and requests.
  6. Send you information about onRisk products, services and events similar to those you have previously taken out. You may also opt out of receiving such messages at any time.

Likewise, and only if you have given your consent in each case, we will also process your data for the following additional purposes:

g) Receive information about discounts, news, products and services related to the insurance sector, either from onRisk or from any entity that is part of the Grupo Mutua Propietarios, of which onRisk is a member, by printed, electronic and/or telephone means, even if such information is not directly related to the products and/or services you may currently have or may have previously contracted.

3. WHAT IS OUR LAWFUL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing your data is: for purposes a) and e), the implementation of pre-contractual measures requested by the user or the execution of the contractual relationship between the parties (in a broad sense); for purpose c), compliance with our legal obligations; for purposes b) and d), our legitimate interest to understand and analyse the assessment of our products and services, and to improve them; for purpose f), Article 21.2 of Law 23/2002 of July 11, on Information Society Services and Electronic Commerce, and our legitimate interest to offer you promotions related to services similar to those you have taken out.

Our processing of your data for the additional purposes is based on the specific consent you have given for each of them. However, you may withdraw your consent at any time for any or all of the purposes, although in no case will your withdrawal of such consents restrict the management and administration of our contractual relationship with you and nor will it affect the lawfulness of the processing based on the consent prior to its withdrawal.

4. HOW LONG DO WE STORE YOUR DATA FOR?

We will keep your personal data for as long as they are needed for the purposes for which they were collected shown above. Where the basis for our processing is your consent, we will keep them until you ask to have them erased. Subsequently, they will be kept duly blocked for the applicable legal limitation periods and solely available to judges and courts and government agencies.

5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

Your data may be shared with the following entities of the Mutua Propietarios Group if you have requested to take out a service provided by them that complements your insurance policy or information about such services, for the purpose of providing the contracted services or the requested information. The legal basis for this communication is the performance of the contract or the implementation of pre-contractual measures requested by you. Your data may also be shared with third parties to comply with our legal obligations, in which case the legal basis is compliance with such obligations. Additionally, your data may be shared with financial entities we work with to process payments and collections, in which case the legal basis is the performance of the contractual relationship we maintain with you.

We may also share them with any suppliers we may use for the provision of the services requested and who will process them as data processors solely and exclusively for the provision of such services. If these entities are located outside the European Economic Area, we will seek to use vendors based in territories that provide an adequate level of data protection (i.e., territories that have an adequacy decision from the European Commission). If they are in a territory which does not have an adequacy decision from the European Commission, we will provide appropriate safeguards by using the standard data protection clauses adopted by the European Commission together with any supplementary measures as may be required to ensure that you have enforceable rights and effective legal remedies. You can learn more about these appropriate safeguards by getting in touch with us through one of the contact options set out above.

6. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

RIGHTCONTENTSSERVICE CHANNELS
AccessYou can obtain confirmation of whether we are processing your personal data and view your personal data included in our systems.You can exercise your rights by sending an email to lopd@onriskseguros.com.
RectificationYou may have your personal data rectified when they are inaccurate and have incomplete personal data completed.
ErasureYou may ask us to erase your personal data if, for example, the data are no longer necessary in relation to the purposes for which they were collected.
ObjectionYou may ask us not to process your personal data. onRisk will no longer process the data except on compelling legitimate grounds or for the exercise or defence of legal claims. In particular, you may object at any time to receiving marketing messages about our activities using the means provided for this purpose available in all the messages you receive and also by emailing the address shown on the right. Please note that there are advertising opt-out systems which you can register with if you do not wish to receive marketing messages in general. You can view additional information on these systems in the unwanted advertising section of the Spanish Data Protection Agency’s website.
Restriction of processingYou may ask us to restrict our processing when one of the following applies:
  • While you contest the accuracy of your data;
  • When the processing is unlawful, you object to the erasure of your data and request restriction of their use instead;
  • When onRisk no longer needs to process your data but you need them for the exercise or defence of legal claims;
  • When you have objected to the processing of your data for the performance of a task carried out in the public interest or for the fulfilment of a legitimate interest, pending verification of whether the legitimate grounds for the processing override yours.
PortabilityYou may receive the personal data that you have provided to us and any which have been obtained from your relationship with onRisk, in electronic format and also transmit them to another organisation.


If you believe that onRisk has not processed your personal data in accordance with the applicable laws, you may file a claim with the competent control authority through the website www.aepd.es. 

Last update: 1/06/2025