Your personal data

What we collect, why, for how long, who else has access — and how to take back control.

Who is responsible

Maximum Insurance, c/o WinHealth Group SA, Rue François-Versonnex 7, 1207 Geneva, Switzerland, is the controller for the processing described here. Contact: operations@maximum-insurance.com.

Two exceptions. For a company area, the employer is the controller for its employees' data and we act as processor. For claims handling, the insurer carrying the risk is the controller for the data it processes.

What we collect, and when

Taking out cover
Title, first and last name, date of birth, nationality, email, destination, cover dates. For a company pack: company name, covered headcount, contact details. Address if you optionally enter it on the payment page.
Paying
Payment is handled by Stripe on a page it hosts. No banking data passes through or is stored on our servers. We keep the transaction identifiers Stripe returns.
Filing a claim
Description of the situation, dates, amounts, reimbursement IBAN, signature, supporting documents. Detailed in the next paragraph.
Company area
Employee directory entered by the employer, head-office address, registered trips, logo. The employer decides on this data; we process it on its behalf.
Partner area
Company name, contact, email, phone, country, logo. The partner's bank details are entered at Stripe, never with us.
Contact forms and country watch
Name, company, email, phone, message and the page the request came from. For the watch service, the email to alert.

Health data

Health data — special category

Your claim file — completed official forms and attachments, including medical items — is sent to the Maximum Insurance claims desk, which forwards it to the insurer carrying the risk. The insurer examines the file and decides on settlement.

The files you attach (reports, invoices, photos) are stored on none of our servers: they leave with the email and nothing remains with us. The information typed into the form stays attached to your insured area so that you can download your declaration again.

Legal basis: your explicit consent and performance of the insurance contract (GDPR art. 9.2.a and 6.1.b). Without these items, a claim cannot be examined.

Why we process it

Performing the contract — issuing your certificate, card and invoice, assisting you, handling a claim.
Meeting a legal obligation — accounting retention, fraud prevention.
Legitimate interest — service security, measuring our errors, answering a contact request.
Consent — country-watch alerts, review requests. Withdrawable at any time, with no effect on your cover.

For how long

Contract and issued documentsTerm of the contract, then 5 years

Claim fileFor as long as the claim is examined, then 5 years

Claim attachmentsNot stored

Contact request, unsigned quote3 years after the last exchange

Country-watch subscriptionUntil you unsubscribe — a link in every alert

Accounting records10 years, legal obligation

Who else has access

Stripe Payments Europe
Payment collection, invoices, partner payoutsIreland
Brevo
Sending emails and documentsFrance
Airtable
Register of contracts and accountsUnited States
Modal Labs
Application hostingUnited States
Cloudflare
Page delivery, protectionUnited States
The insurer and its medical network
Claims handling, 24/7 assistanceSwitzerland and worldwide
The introducing partner, if any
Your name and the amount of the sale it introducedDepending on its country

We sell no data and rent none. No provider on this list is allowed to use it for its own purposes.

Transfers outside the European Union

Three of our providers are established in the United States: Airtable, Modal Labs and Cloudflare. These transfers are governed by the European Commission's standard contractual clauses. Payment data stays with Stripe in Ireland, and emails with Brevo in France.

Cookies and third-party services

This site sets no advertising cookie and no analytics tracker — no Google Analytics, no social pixel. Only three cookies, all necessary to the service, which is why there is no banner: mi_sess keeps you signed in, mi_lang remembers your language, mi_devise remembers your display currency.

Our pages do, however, load resources from third-party services, which therefore receive your IP address: Google Fonts typefaces and three mapping libraries served by jsDelivr. None of these requests carries your identity or your browsing.

Security

Exchanges are encrypted end to end (HTTPS). Access to your area goes through a signed link sent to your email address, never through a stored password. Administrator access is named and logged. Documents uploaded during a claim are checked against the file's real format, not its name.

Your rights

You may request access to your data, its rectification, erasure, restriction of processing, portability, and object to processing based on our legitimate interest. Write to operations@maximum-insurance.com: we answer within one month. If our answer does not satisfy you, you may refer the matter to the CNIL in France (cnil.fr) or the FDPIC in Switzerland (edoeb.admin.ch).

Legal notice →