GENERALI GLOBAL ASSISTANCE & INSURANCE SERVICES
WASHINGTON MY HEALTH MY DATA ACT
PRIVACY POLICY
Generali Global Assistance & Insurance Services (“Company” or “We”) values the privacy of our Washington users (collectively “Users” or individually each a “User”) who visit and use any Company website and its associated services (the “Website”). This Washington My Health My Data Act Privacy Policy (“Washington Privacy Policy”) specifically addresses our collection, use, and protection of Consumer Health Data as defined under the Washington My Health My Data Act (RCW 19.373), in addition to other personal information. This Washington Privacy Policy governs information provided to us by you as a User of the Website (“You”), or that we learn from Your use of the Website. BY ACCESSING, BROWSING, OR USING THE WEBSITE, YOU ACKNOWLEDGE THAT YOU HAVE RECEIVED, READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS WASHINTON PRIVACY POLICY, INCLUDING THE PROVISIONS RELATING TO CONSUMER HEALTH DATA UNDER THE WASHINGTON MY HEALTH MY DATA ACT, AND ANY UPDATES TO IT. This Washington Privacy Policy incorporates by reference the terms and provisions of the Company Privacy Policy, the Company CCPA Privacy Policy and the Company Terms of Service. What is Consumer Health Data?Under the Washington My Health My Data Act (RCW 19.373), “Consumer Health Data” is defined as personal information that is linked or reasonably linkable to a consumer and that identifies, or can be used to identify, the consumer’s past, present, or future physical or mental health status. How We Use Consumer Health DataFor Company’s travel insurance and assistance services, Consumer Health Data may include, but is not limited to:
Sale and SharingWe do not sell Consumer Health Data, nor do we use it for targeted advertising or marketing purposes. Your Consumer Health Data is treated with the highest level of confidentiality and is only shared in limited circumstances necessary to deliver our services and comply with legal obligations. Specifically, we may share Consumer Health Data with:
ConsentWe obtain your explicit, informed consent before collecting or processing any Consumer Health Data. This consent is requested separately from any other personal information you may provide, and we clearly explain the specific purposes for which your Consumer Health Data will be used. You have the right to withdraw your consent at any time, without penalty or impact to your eligibility for other services. To withdraw consent, you may contact us using any of the methods described in the “Contact Information” section below, such as email, mail, or our online Personal Data Request Form. Upon receiving your withdrawal request, we will promptly cease processing your Consumer Health Data for the purposes to which you had previously consented, unless continued processing is required by law or necessary to complete a transaction you initiated. We will not collect, use, or share your Consumer Health Data for any purpose without your explicit consent, except where permitted or required by applicable law. Please note that withdrawing consent may limit CSA’s ability to process claims, administer benefits, or provide emergency assistance services when that information is necessary to fulfill contractual or legal obligations Your RightsWashington residents have specific rights regarding their Consumer Health Data under the Washington My Health My Data Act (RCW 19.373). These rights include:
Our Commitment to Data SecurityNo method of transmitting data over the internet or storing information can be guaranteed to be completely secure. While we implement measures designed to protect your information, we cannot guarantee absolute security. Once we receive Your transmission of information, Company implements reasonable administrative, technical and physical safeguards designed to ensure the security and confidentiality of Your information, protect against any anticipated threats or hazards to the security or integrity of such information, and protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any User. Our data security practices expressly exclude the use of geofencing technology for collecting or tracking consumer health data related to healthcare facilities These safeguards include use of a firewall, content filtering, intrusion detection, SSL encryption and access controls. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical or administrative safeguards. If Company learns of a security systems breach, then we may attempt to notify You electronically so that You can take appropriate protective steps. By using the Website, You agree that Company can communicate with You electronically regarding security, privacy and administrative issues relating to Your use of the Website. Company may post a notice on the Website if a security breach occurs. Depending on where You live, You may have a legal right to receive notice of a security breach in writing. Links to other sitesThis Website may contain links to other sites and other products and services that are not owned or controlled by Company. Please be aware that we are not responsible for the privacy practices or content of such other sites, products and services. Company encourage you to be aware when you leave our Website. We encourage you to review the privacy policies of each and every third-party website that collects personal information as their privacy policy may differ from ours. Contact Information
For questions or to exercise your rights, contact us at: Changes and Updates to this Washington Privacy PolicyCompany may occasionally update this Washington Privacy Policy. Your agreement to this Washington Privacy Policy and any updates. Updates will only apply after the effective date of the update. Effective Date. This Washington Privacy Policy was last revised on, and is effective as of, January 23, 2026 |
