Your personal data

Maximum Insurance, c/o WinHealth Group SA, Rue François-Versonnex 7, 1207 Geneva, Switzerland — operations@maximum-insurance.com.

In a company area, the employer is the controller for its employees' data; for a claim, the insurer is the controller for the data it processes.

Identity, contact details, trip and policy, to issue and manage your cover (performance of the contract); accounting and fraud prevention (legal obligation); service security and answers to your requests (legitimate interest); country-watch alerts (consent, withdrawable at any time).

Payment is handled by Stripe: no banking data passes through our servers.

A claim file, medical items included, is sent to Maximum Insurance, which forwards it to the insurer; the insurer examines it. Attachments are stored on none of our servers. Legal basis: your explicit consent and the contract (GDPR art. 9.2.a and 6.1.b).

Stripe (payment, Ireland), Brevo (emails, France), Airtable, Modal Labs and Cloudflare (register, hosting and delivery, United States, under standard contractual clauses), the insurer and its medical network, and the introducing partner if any. No data is sold or rented.

Policy: its term, then 5 years. Claim: its handling, then 5 years. Contact request or unsigned quote: 3 years. Country watch: until you unsubscribe. Accounting records: 10 years.

Three necessary cookies (session, language, currency); no advertising or analytics tracker. Fonts (Google Fonts) and mapping libraries (jsDelivr) receive your IP address.

Access, rectification, erasure, restriction, portability and objection: write to operations@maximum-insurance.com, answer within one month. You may complain to the CNIL (cnil.fr) or the FDPIC (edoeb.admin.ch).