Legal
Privacy and cookie policy
The purpose of this privacy policy is to inform you about how we collect and process your personal data.
Updated: 6 October 2026
Here you can see which personal data we collect and process and in which contexts, who we may share it with, and read about your rights under the General Data Protection Regulation (GDPR).
The data controller responsible for the collection and processing of personal data is:
Health Insurance Instantly Agency A/S (hereinafter “HII”)
H.C. Andersens Boulevard 37
1553 Copenhagen V
Denmark
Phone: +45 31 63 83 03
Email: info@healthinsuranceinstantly.com
Company reg. no. (CVR): 36737069
Collection and processing of personal data
Here you can read more about how we handle your personal data in different contexts.
We provide quotes or send you information
When you contact us to get a quote for an insurance policy or to receive information about our insurance products, we collect and process personal data in order to provide you with the requested information and/or a quote. We collect and process data about you as a prospective policyholder under Article 6(1)(b) GDPR (necessary for entering into a contract), and we collect and process data about any prospective co-insured persons under Article 6(1)(f) GDPR (legitimate interests).
The categories of data subjects about whom we collect and process personal data are:
- Prospective policyholders
- Prospective co-insured persons
The types of personal data we collect and process in order to provide you with the requested information and/or a quote include:
- Name
- Age
- Nationality
- Country of residence
- Email and phone number
When we provide a final quote, we also collect and process personal data about you as a prospective policyholder in order to provide the final quote and issue an insurance policy. We collect and process this data on the basis of consent under Article 9(2)(a) and Article 6(1)(a) GDPR (consent).
The additional types of personal data we collect and process in order to provide a final quote include:
- Residential address
- Health information
- Payment details
Personal data is stored for a maximum of 12 months from first contact. The purpose is to ensure that we can issue a policy if you decide to become a customer. The period is based on our experience that the decision process can take up to 12 months. Personal data is therefore deleted no later than 12 months after first contact if you do not become a customer. If you become a customer, personal data is stored for longer; see the section “Issuing a policy and customer relationship” below.
Issuing a policy and customer relationship
When you become a customer, we do not collect more personal data than we have already collected in order to send the final quote; see the personal data listed under “We provide quotes or send you information” above.
HII forwards the data to the insurance company that is to issue your policy. The insurance company is an independent data controller for the personal data it receives. The insurance companies we work with are mainly established in the EU/EEA. If the insurance company is located outside the EU/EEA, the transfer takes place either to a country that the European Commission has recognised as providing an adequate level of protection under Article 45 GDPR, or on the basis of the European Commission’s standard contractual clauses under Article 46(2)(c) GDPR.
HII only forwards the data after we have obtained your explicit consent under Article 9(2)(a), cf. Article 6(1)(a) GDPR (consent), and under Article 6(1)(b) GDPR (necessary for entering into a contract).
The types of personal data about all insured persons that are forwarded to the insurance company include:
- Name
- Age
- Nationality
- Residential address and country
- Email and phone number
- Health information
- Payment details
When you are a customer, we store your data for as long as the customer relationship lasts and for 3 years after it ends, so that we can handle any claims arising from the agreement. Payment details, however, are deleted immediately after the agreement ends.
Newsletter and webinar sign-up
You can sign up for our newsletter and webinars. The purpose is to send you our newsletter and/or a link to join a webinar. We collect the personal data under Article 6(1)(a) GDPR (consent). You may withdraw your consent at any time by contacting us at info@healthinsuranceinstantly.com, after which we will delete your data immediately.
You can also sign up for our webinars. The purpose is to tell you about our products and related topics of general interest. We collect the personal data under Article 6(1)(a) GDPR (consent). You may withdraw your consent at any time by contacting us at info@healthinsuranceinstantly.com, after which we will delete your data immediately.
Types of personal data we collect and process when you sign up for newsletters and webinars:
- Name
- Phone number
The personal data is stored until you withdraw your consent (until you tell us that you no longer wish to receive newsletters and/or webinar links).
Marketing
We collect data in order to inform you about our products and the benefits of being our customer. To do so, we may collect data from publicly available registers or via third parties. This is done under Article 6(1)(f) GDPR (legitimate interests).
Types of personal data we collect and process in connection with marketing:
- Name
- Address
- Phone number
Data is stored for a maximum of 12 months from first contact. The purpose is to ensure that we can issue a policy if you decide to become a customer. The period is based on our experience that the decision process can take up to 12 months.
Marketing on social media
We market our products digitally on social media. There you can interact with our ads and/or fill in contact forms if you would like us to contact you. The information you provide and how it is processed is described below:
Data controllers
For the collection and processing of personal data on the social media platforms used by HII, data controllership is shared between HII, Meta (Facebook/Instagram) and LinkedIn (together “the Services”), whose contact details are:
HII:
Health Insurance Instantly Agency A/S
H.C. Andersens Boulevard 37
1553 Copenhagen V
Denmark
Phone: +45 31 63 83 03
Email: info@healthinsuranceinstantly.com
Company reg. no. (CVR): 36737069
Meta (Facebook/Instagram):
Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland
Company no.: 462932
LinkedIn:
LinkedIn Ireland Unlimited Company
Attn: Legal Dept. (Privacy Policy and User Agreement)
Wilton Plaza
Wilton Place, Dublin 2
Ireland
Collection and processing of personal data
HII is the data controller for the following:
When you interact with our ads or posts on social media, you may provide personal data. This can happen, for example, when you visit our pages, comment on or “like” our ads, and through your behaviour on our pages. You may also actively provide personal data if you fill in one of our contact forms.
You can communicate directly with HII via the Services, e.g. by sending a message via Facebook/Messenger. As HII cannot guarantee that the content is secure, we prefer that you email or call us.
We collect data in order to inform you about our products and the benefits of being our customer. We collect and process the data under Article 6(1)(f) GDPR (legitimate interests). If you actively provide your personal data by filling in one of our contact forms, we collect and process the data under Article 6(1)(a) GDPR (consent).
Types of personal data we collect and process in connection with marketing on social media:
- Name
- Phone number
- Email address
Data is stored for a maximum of 12 months from first contact. The purpose is to ensure that we can issue a policy if you decide to become a customer. The period is based on our experience that the decision process can take up to 12 months. Where data is collected on the basis of consent, the personal data is stored in accordance with the consent given.
You have rights under the GDPR in relation to the collection and processing for which HII is the data controller; read more about your rights in the section “Your rights under the GDPR” below.
Meta and LinkedIn are data controllers for the following: Meta and LinkedIn collect various types of information about you when you use their services. This is done using “cookies” or “pixels”, small programs stored on your device that track your activity. The Services collect data such as age, gender, occupation, interests, purchases, location etc. They do this to pursue their own commercial interests, including improving their advertising. The Services share data with HII so that we can improve our advertising.
As a user of Facebook, Instagram and LinkedIn, you can read more about how they process your data as data controllers and about your rights, including withdrawal of consent, here:
Meta’s privacy policy and other information:
https://www.facebook.com/about/privacy
https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy
Complaints regarding the Services:
https://www.dataprotection.ie/en/contact/how-contact-us
Cookie policy, website
Our website uses cookies. We use cookies to personalise our content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this data with other information you have provided to them or that they have collected from your use of their services.
Cookies are small text files that websites can use to make the user experience more efficient.
The law states that we may store cookies on your device if they are strictly necessary to provide the service you have explicitly requested. For all other types of cookies, we only collect and process cookies if you have given us your consent in advance. We therefore collect and process cookies under Article 6(1)(a) GDPR.
You can change or withdraw your consent at any time in the cookie declaration on our website. Read about your right to change or withdraw your consent in the section “Your rights under the GDPR” below.
You can contact HII at any time and ask to exercise your rights under the GDPR (which you can read more about below).
Your rights under the GDPR
Right to withdraw consent
If you have given your consent, you can always contact us to ask about its scope, and you can withdraw your consent at any time. You can contact us at info@healthinsuranceinstantly.com. HII will stop processing your personal data if you withdraw your consent, unless we can continue the processing on another legal basis (e.g. Article 6(1)(b) GDPR, necessary for entering into a contract).
Right of access
You have the right to obtain confirmation as to whether HII processes your personal data and, if so, the right to receive the data we process about you, together with certain other information.
Right to rectification
You have the right to have inaccurate personal data about you corrected.
Right to erasure
In certain cases, you have the right to have your personal data erased before the time when HII would otherwise delete it. If you are a customer, however, we will only delete your data when claims can no longer be made against us under the agreement (3 years after the agreement ends).
Right to object
You have the right to object to the processing of your personal data based on Article 6(1)(f) GDPR (legitimate interests), and you always have the right to object to the processing of personal data for direct marketing (see our processing for direct marketing in the marketing sections above).
Right to restriction of processing
In certain cases, you have the right to have the processing of your personal data restricted. If you have this right, we will in future only process the data, other than storing it, with your consent, for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.
Right to data portability
You have the right to receive the personal data you have provided to us in a machine-readable format, and the right to have it transmitted to another data controller where technically feasible.
Right to lodge a complaint
If you are dissatisfied with the way we process your personal data, you can lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, phone +45 33 19 32 00, dt@datatilsynet.dk, www.datatilsynet.dk. You can also lodge a complaint with the data protection authority in the EU/EEA country where you live.
Protection of your personal data
When we collect and process your personal data, cf. the section Collection and processing of personal data, we make sure that your personal data is adequately protected. You can read more about how we do this here.
Phone
When contact takes place by phone, we will inform you of the purpose of collecting your personal data and of your right to ask us to delete it before we register it. We do not record phone calls.
The purpose of collecting personal data may be to send you more information, provide a quote or issue a policy. You can read more about each purpose in the relevant sections above. The collection of personal data is based on Article 6(1)(a) GDPR (consent). You can withdraw your consent at any time by contacting us.
When we communicate with you by email, we use encrypted email between sender and recipient. Our system ensures encryption that meets the requirements for sending sensitive personal data, i.e. TLS 1.2 or higher. This ensures that your data cannot be read by third parties. Access to email is password-protected.
Sharing with others
When we transfer personal data to an insurance company, we do so via encrypted email (TLS 1.2 or higher) or directly to the company’s secure online quoting system, which can only be accessed with a password and where the transfer is encrypted. Transfers to insurance companies outside the EU/EEA take place on the basis described in the section Issuing a policy and customer relationship above.
Transfers to third countries
We use HubSpot as our CRM system. Our data is stored in HubSpot’s data centre in the EU. To the extent that HubSpot transfers personal data to the USA, this takes place on the basis of the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which HubSpot is certified, supplemented by standard contractual clauses.
Read HubSpot’s data processing agreement here: https://legal.hubspot.com/dpa
Personal data breaches
If we become aware of a personal data breach that may involve your personal data, we will, where relevant, notify you as soon as possible and report the breach to the Danish Data Protection Agency within 72 hours of becoming aware of it.