Mandatory
Privacy policy
The controller for data collected on this site is Expavy Assurances, an insurance broker registered with ORIAS under number 24000431.
The processing actually active on this site
The quote request form (Your diagnostic) collects: destination country, situation (leaving, already there, returning), the people to be insured, nationality, current country of residence, planned departure date, length of stay, CFE membership, an indicative budget, plus an email address and, optionally, a phone number. No health data is collected or processed by this form or by any artificial intelligence: the medical questionnaire, where required, remains entirely handled by the insurer at the time of underwriting.
Purpose: to prepare an international health insurance quote and allow an Expavy Assurances advisor to contact you back. Legal basis: performance of pre-contractual measures taken at your request (article 6.1.b of the GDPR). Recipients: Expavy Assurances and, once the quote has been validated with you, the partner insurer chosen for your contract.
Precise retention period, contact details for a data protection officer if any, and the host’s identity: to be completed as soon as communicated by Expavy Assurances.
Follow-up emails
A checkbox, unticked by default, lets you agree to receive a follow-up email if your enquiry is left unfinished. Legal basis: your explicit consent (article 6.1.a of the GDPR), which you can withdraw at any time via the unsubscribe link in every follow-up email, with no effect on the processing of your quote request itself.
Your rights
You have a right of access, rectification, erasure and objection over your data, as well as the right to lodge a complaint with the CNIL (the French data protection authority). To exercise these rights, use the Contact page.
What’s still to be confirmed
- Technical subprocessors (final host, any analytics or CRM tool).
- Exact retention period for quote requests.
- Transfers outside the European Union, if any, and the safeguards attached to them.