Data protection

On this page we inform you about the processing of your personal data.

The protection of your personal data is very important to us. We therefore ensure that you are informed about the use of cookies on our website. On this page you will find all the information about all the cookies we use on our website. Of course, we use proven data protection procedures to ensure that your data remains protected.

Changing your cookie settings

When you visit our website for the first time, a cookie banner (cookie consent) automatically appears, in which you can accept the use of cookies for the tracking technologies listed ("Accept all" option), reject them ("Reject all" option) or only allow selected categories of cookies in addition to those necessary for the function ("Save settings" option). If you do not give your consent, only cookies that are essential for the website to function are stored on your end device. A new notification is displayed after the validity of the consent cookie has expired, after the consent cookie has been deleted or after the content based on the consent has been changed.

If you wish to change your data protection settings (grant consent or revoke consent already granted), you can change your settings at any time.

Please note that the cookie settings you select on the website www.annual-report.vig or other domains of www.annual-report.vig will also be applied to the other websites.

If you subsequently withdraw your consent for certain cookies, we will no longer use them when you visit our websites in the future. Please note, however, that for technical reasons we cannot delete the cookies already stored in your system with your consent (from the categories "Performance cookies", "Other service cookies" and "Marketing cookies"), so they will be stored. We therefore recommend that you delete these cookies manually via the settings of your web browser or corresponding browser extensions.

You can also set your browser so that cookies are generally not stored and/or cookies that have already been stored are deleted and/or you can use modern web browsers with built-in ITP/ETP/TP technology (e.g. Apple Safari, Chrome, Microsoft Edge, Mozilla Firefox), which automatically delete cookies. All common browsers allow you to block the storage of cookies in general or the storage of cookies from third-party providers.

What are cookies?

Cookies are small text files that are stored on your end device (PC/laptop, tablet or smartphone). These text files are downloaded by your browser when you visit our website for the first time. When you visit this website again with the same end device or browser, the cookie and the information stored in it is either sent back to the respective website that created it (first party cookie) or sent to another website to which it belongs (third party cookie). As a result, the website "recognises" that it is the same user and adapts the presentation of the website content. Cookies therefore "remember" your preferences, communicate how you use a page and customise the offers displayed in some cases. Cookies can also be used for various purposes, e.g. to ensure the functionality, security and convenience of online offers and to create analyses of visitor flows and the functions of an online offer. Cookies cannot access, read or change any other data on your computer.
Many cookies on our website are temporary cookies, so-called session cookies. They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer depending on the time specified in the cookies for automatic deletion or until you delete them manually in your browser. We use such persistent cookies to recognise you the next time you visit our website. This cookie data can be used for statistical, marketing and personalisation purposes.

You can agree to the setting of all cookies or make a selective choice. You can change cookie settings at any time.

The permissibility of cookies in Austria is regulated in § 96 para. 3 of the Telecommunications Act 2003 (TKG 2003).

Notes on consent: We use cookies in accordance with the statutory provisions and, if necessary, ask for your consent before processing. You have the right to withdraw your consent at any time.

What happens if I do not accept cookies?

You can also block or delete cookies if they have already been stored on your computer. If you would like to know more about how to take these steps, please use the "Help" function in your browser. For the most user-friendly handling possible, we sometimes also use a so-called "cookie management tool" (Commanders Act Trustmanager from our processor Fjord Technologies (France) as a consent management service), with which you can manage the setting of cookies even more easily. To manage your settings, please use your privacy settings.

Please note that blocking or deleting cookies may affect your online experience and prevent you from taking full advantage of our online offers and services.

Use of cookies and other tracking tools

We use cookies and other tracking tools for the following purposes:

to provide our website, smartphone/web applications and to provide basic functions of the online offers (order processing, orders, online forms, language settings, etc.), e.g. to save your cookie settings or for security reasons, such as test data (see "Functionally necessary cookies" for details);
for anonymised analysis of website use ("web statistics"), error analysis, investigation of user behaviour and optimisation of content (for more details, see "Performance cookies")
for the professional presentation of the content of our website, e.g. by integrating externally provided content, such as map material from Google Maps and video services such as YouTube etc. (see "Other service cookies" for more details);
to personalise our offers, e.g. to display personalised content including advertising on the end device used, for extended analysis of website use or reach measurement, so that we can continuously improve our offer and better tailor it to the needs and interests of website visitors, provided you have given us your consent to do so (see "Marketing cookies" for more details);

By consenting to the use of cookies and other technologies (scripts, WebSQL, LocalStorage, session storage), you help us to improve the services and functions of our online offerings (websites and smartphone/web applications) in order to provide you with an optimal user experience. For this purpose, we and our partners store personal technical data on devices, interests and user behaviour for marketing, analysis, and optimisation purposes.

Please note that the providers of these services sometimes place their own cookies on your device. This information may also be combined with information from other sources. This applies in particular if you yourself have an account with the service provider and are logged in there at the time of the session.

Note on data processing in non-EU countries:

The transfer of data to companies in non-EU or third countries is permitted if this country has been confirmed by the European Commission as having an adequate level of data protection or other suitable guarantees are in place. For providers in the USA, the adequacy of the level of data protection was confirmed by the EU-U.S. Data Privacy Framework (DPF) in 2023, provided that a provider submits to the requirements of this agreement.

We use cookies in which data is also transmitted to providers from third countries. If you have given your express consent within the meaning of Art. 49 para. 1 lit a GDPR in conjunction with Art. 6 para. 1 lit a GDPR, data will be transferred to the respective third country. Details on the providers based in the USA can be found in the respective section.

The cookies requiring consent are played out by the Commanders Act TagCommander service from the French company Fjord Technologies. Therefore, if you agree to the setting of cookies, you also agree to them being played via this Tag Manager.

Affected data:

Usage data (e.g. access times, websites clicked on, online services used)
Communication data (e.g. information about the device used, IP address)

Affected Individuals: Users of our online services (websites and smartphone/web applications)

Purpose of processing: Displaying our websites, offering content and applications, improving our online services, communication and marketing, ensuring the operation of our websites and smartphone/web applications

Legal basis:

Legitimate interest, Art. 6 para. 1 lit. f GDPR
If we do not obtain your consent to the setting of cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular the content and functions. You can use the security settings of your browser to object to the use of cookies set by us within the scope of our legitimate interest. There you can specify whether you do not accept cookies from the outset or only accept them on request, or whether you want cookies to be deleted every time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Consent, Art. 6 para. 1 lit. a, or in accordance with § 165 para. 3 TKG 2021
If we ask you to allow us to place certain cookies on your device before you visit our online services (websites, smartphone/web applications) and you consent to this, the legal basis is to be seen in the consent you have given. As part of your consent, we will inform you which service providers we use in detail. If you do not give this consent, only the so-called technically necessary cookies that are required for the proper operation of our website and its display in your browser will be set. If you have consented to the setting of cookies, you have the option of revoking the consent you have given us at any time.

Web hosting

Web hosting enables websites to be displayed by the browser that connects to a web server. Data, including the full URL, browser type and version, operating system, referrer URL, host name, IP address and time of access, are automatically stored.

Purposes of data processing:

to provide the online services and to further improve and develop them
professional hosting and operational security
maintaining operational and IT security in order to recognise, prevent and investigate attacks
creation of anonymous usage statistics of the online services
anonymous evaluation of access behaviour to optimise the offer and, if necessary, for criminal prosecution

We host our website with our processor nexxar GmbH, Felberstraße 80/II/4, 1150 Vienna, Austria. The main tasks of nexxar GmbH are the provision and maintenance of the virtual infrastructure of our website. All our data centres are located in the European Union.

Connection data is processed for the purpose of providing and delivering the website. For the sole purpose of delivering and providing the website, the data is not stored beyond the call. However, the connection data is stored by our processor for security purposes. The duration of processing for security purposes is variable and ends when the security measures become necessary. In addition, our processor anonymises the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to troubleshoot our website.

The legal basis for data processing is the absolute technical necessity for the provision and delivery of the "website" service you have expressly requested by calling it up in accordance with Section 165 (3) TKG 2021.

Server log files

Connection data is processed for the purpose of monitoring the technical function and increasing the operational security of our web host. The duration of processing is limited to 30 days.

The legal basis for data processing is the absolute technical necessity of a server log file as a basic database for error analysis and for security measures as part of the "website" service expressly requested by you in accordance with Section 165 (3) TKG 2021.

Commanders Act Tagmanager

If you give your consent, we process your personal data with the service Commanders Act TagCommander, Fjord Technologies, 3 bis Rue Taylor 75010 Paris France, as joint controllers for the purpose of triggering, controlling and managing other services on our website. In this specific case, the services listed on this page are to be controlled via TagCommander. Failure to give consent therefore has exactly the same effect as described for the services listed. You can revoke any consent you have already given by changing the privacy settings.

We enable TagCommander to collect connection data and data from your web browser. This data is used by Fjord Technologies to further develop the service.

Below you will find details of the cookies and services used for the individual purposes.

Functionally necessary cookies

When using essential cookies and plugins, we process your personal data in order to provide basic functions of our websites and the services you have requested (system cookies) and to temporarily save your cookie settings. Without the use of system cookies, there would be functional restrictions.

The specific purpose of the individual cookies can be found in the table below ("Data types, storage duration, recipients").

The legal basis for the processing of your data when using functional cookies is our legitimate interest in the provision of fully functional websites, smartphone/web applications and the services you have requested and in the temporary storage of your cookie settings (Art. 6 para. 1 lit. f GDPR, § 165 para. 3 TKG 2021).

Types of Data, Storage Period, Recipients

The following functionally necessary cookies are used on our websites:

Cookie: TC_PRIVACY_CENTER
Speicherdauer: 12 Monate
Applikation: Commanders Act

Cookie: TC_PRIVACY
Storage : 12 months
Application: Commanders Act

Cookie: WID
Data: ID
Storage : Session, automatically deleted on closing the browser
Application: Commanders Act

Cookie: TCD
Data: ID
Storage : 12 Monate
Application: Commanders Act

Cookie: TCPID
Data: ID
Storage : 12 months
Application: Commanders Act

Cookie: hideCookieMessage
Data: Ja/Nein
Purpose: Controls display for "Cookie Management Tool"
Storage : 8 months
Application: Commanders Act

Online forms

On our website, you have the option of contacting us using various online forms (e.g. contact form, etc.). After submitting the form, the personal data entered by you will be processed by the controller for the purpose of processing your enquiry on the basis of the consent given by you by submitting the form in accordance with Art. 6 para. 1 lit. a GDPR. There is no legal or contractual obligation to provide the personal data. The only consequence of not providing this data is that you will not be able to submit your enquiry and we will not be able to process it directly.

Performance cookies

The Performance Cookies from these tools allow us to monitor and analyse the use and performance of our website. This data tells us how many users use our website, which content is most popular and how the website is used. We use it to improve the performance, functionality and troubleshooting of our website and smartphone/web applications (e.g. online forms, calculators, etc.) and to collect company-related information.

Not granting consent has no direct effect on the function of the website, but without statistical data it will be more difficult for us to further develop the website. You can revoke any consent you have already given by changing the privacy settings.

Google Analytics

We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analysis software and store data on your end device. The service anonymises the collected data immediately after collection and makes the anonymous data available to us in the form of statistics for evaluation. The data on your end device is stored for a period of up to two years.

The legal basis for data processing is your consent in accordance with § 165 para. 3 TKG 2021. The legal basis for data transmission to Google is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR. This may also involve the transfer of personal data to a third country outside the European Union. Information about the DPF membership of Google LLC

Further information on Google's privacy policy and terms of use can be found at the following link: Privacy Policy and Terms of Use

Other services cookies

The cookies from these tools are set by service providers that we use on the website so that you can use, for example, online magazine content, information videos, video advice, advertising videos, interactive financial market data.

These cookies are able to track your browser across other websites and create a profile of your interests. If you do not allow these cookies, you may not be able to use or view these tools and content.

We would like to point out that we have no control over the processing of personal data by these services and do not have full knowledge of the scope, purpose and storage period.

The only consequence of not granting consent is that the services will not be made available to you. You can revoke any consent you have already given by changing the privacy settings.

Integration of the spam protection Google reCAPTCHA

If you give your consent, we process your personal data with the service Google reCAPTCHA, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controllers for the purpose of preventing non-human and automated input as protection for online forms (e.g. contact form).

We enable the service to analyse behaviour based on various characteristics, to collect connection data, to collect data from your web browser and to place an advertising cookie. By placing advertising cookies, Google is able to calculate an individual user ID for all users. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Google.

Google uses the information obtained in this way, among other things, to digitise books and other printed materials and to optimise services such as Google Street View and Google Maps (e.g. house number and street name recognition).

The IP address transmitted as part of reCAPTCHA will not be merged with other Google data unless you are logged into your Google account at the time you use the reCAPTCHA plug-in. If you want to prevent this transmission and storage of data about you and your behaviour on our website by Google, you must log out of Google before you visit our site or use the reCAPTCHA plug-in.

The use of the information obtained by the reCAPTCHA service is in accordance with the Google Terms of Use.

Insofar as Google carries out further independent processing of the data, in particular within the Google advertising network, Google is solely responsible for this. Details can be found in Google's privacy policy.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021. Google transfers your personal data to the USA (third country). The legal basis for the transfer of data to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR. Information about the DPF membership of Google Ireland Limited

Integration of the Google YouTube video service

If you give your consent, we process your personal data with the service YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controllers for the purpose of playing videos on our website in the interest of an appealing presentation of our online offers.

We enable the service to collect connection data, to collect data from your web browser and to place an advertising cookie. By placing advertising cookies, Google is able to calculate an individual user ID for all users. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Google.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google advertising network regardless of whether you watch a video.

After starting a YouTube video, the YouTube server is informed which page you have viewed. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. To prevent this, you can log out of your YouTube account. Furthermore, YouTube may use various recognition technologies (e.g. cookies, device fingerprinting, etc.). In this way, YouTube may receive information in order to collect video statistics, improve user-friendliness and prevent fraud attempts, among other things, and other data processing operations may be triggered over which we have no influence.

Integration of social media content Walls.io

If you give your consent, we process your personal data with the service Walls.io, Walls.io GmbH, Schönbrunner Straße 213/215, 3rd Floor 1120 Vienna, Austria as joint controllers for the purpose of providing social media services on our website.

We enable the service to collect connection data, to collect data from your web browser and to place advertising cookies. By placing advertising cookies, Walls.io is able to calculate an individual user ID for users. This personal data, which is suitable for unique identification, is then processed within the framework of the advertising network operated by Walls.io.

Insofar as Walls.io carries out further independent processing of the data, in particular within the framework of the Walls.io advertising network, Walls.io is solely responsible for this. Details can be found in Walls.io's privacy policy.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021.

Integration of financial market data Euroland IR

If you give your consent, we process your personal data with the service Euroland IR, Eurolandcom AB, Kronhusgatan 2D, 411 13 Gothenburg, Sweden ("EurolandIR") as a processor for the transmission and display of financial market data.
Cookies set when retrieving the data are required for functionality and are deleted when the browser window is closed. Some of the transmitted data is retrieved from servers in the USA, which means that the IP address of your end device must be transmitted to these servers for technical reasons.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021. EurolandIR may also transfer your personal data to data centres in non-EU countries. The legal basis for the transfer of data to non-EU countries is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR.

Further information on EurolandIR data protection: https://tools.eurolandir.com/legal/privacy/

Integration of infographics 23degrees

If you give your consent, we process your personal data with the service 23degrees.io, 23degrees GmbH, Tigergasse 3/5, 1080 Vienna, Austria ("23degrees") as joint controllers for the transmission and display of interactive infographics.
In some areas of our website (e.g. "Investor Relations"), interactive infographics from 23degrees are integrated into the website via the embedding function.

23degrees uses a technically necessary cookie from Cloudflare (third-party provider) to ensure security and prevent DDoS attacks (hacker attacks).

We enable the service to collect connection data and data from your web browser. Insofar as 23degrees carries out further independent processing of the data, in particular in the context of marketing by 23degrees, 23degrees is solely responsible for this.

Further information can be found in the privacy policy of 23degrees.

Marketing cookies

If you have given us your consent, we use cookies for the evaluation and optimisation of Vienna Insurance Group online and direct marketing campaigns and advertising measures on other channels (e.g. social media such as Facebook, Instagram, X, LinkedIn or ad servers such as Google Ads).

These technologies are used by advertising partners to display ads that are relevant to your interests and to optimise marketing activities.

For example, an advert will not be displayed again if you have already engaged with a service offer. This enables us to place adverts in a more targeted manner. These adverts are not only displayed on our website, but also on other advertising partner sites. It is not possible to draw direct conclusions about a person. If you do not allow these cookies, you will not experience our targeted advertising on other websites.

We would like to point out that we have no influence over the processing of personal data by these services and do not have full knowledge of the scope, purpose and storage period.

Not granting consent has no direct effect on the function of the website, but without extended statistical data it will be more difficult for us to further develop the website and optimise and measure the success of campaigns. You can revoke any consent you have already given by changing the privacy settings.

Google Analytics with Google Signals

If you give your consent, we process your personal data with the service Google Analytics, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controllers for the purpose of error analysis, investigation of user behaviour, analysis of the effect of online marketing measures and the statistical evaluation of our website, as well as the placement of personalised online advertising on other channels, including consideration of demographic characteristics and the cross-device measurement of our advertising success.

If you give your consent, we will activate Google Signals, an add-on service to Google Analytics. This feature sends aggregated (non-personal) data such as interests or demographics of Google users to Google Analytics. The data is used by us for remarketing purposes. In addition, cross-device usage behaviour can be measured. However, this only happens if the visitors have logged into a Google service when visiting the website and the "personalised advertising" option has been activated in the Google account settings.

Further information on Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=de.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021. The legal basis for data transmission to Google is your consent in accordance with Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. This may also involve the transfer of personal data to a third country outside the European Union. Information about the DPF membership of Google LLC

Further information on Google's privacy policy and terms of use can be found at the following link: Privacy Policy and Terms of Use

Google Dynamic Remarketing

If you have given your consent, we also use Google Ads Conversion Tracking to measure the success of our Google Ads advertising measures. After certain target achievements on our website ("conversions") - such as the completion of an enquiry - this target achievement is recorded by Google. Google can thus measure the number of target achievements. In addition, Google will use previously set cookies to allocate which adverts were previously clicked on and were therefore decisive for the target achievement.

We use Google's remarketing or "similar target groups" function. This allows us to show you personalised advertising on suitable advertising spaces on other websites based on the interests you have shown on our website.

For this purpose, Google stores the number of visits to the website as well as anonymised data on the use of the website. No personal data of the website user is stored. If you subsequently visit another website in the Google Display Network, you will be shown adverts that are highly likely to take into account previously accessed product and information areas. According to its own statements, Google does not merge the data collected as part of remarketing with your personal data.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021. The Google Group transfers your personal data to the USA (third country). The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR. Information about the DPF membership of Google Ireland Limited

Further information about Google Remarketing and Google's privacy policy can be found at: www.google.com/privacy/ads/

LinkedIn Ads

If you give your consent, we process your personal data with the LinkedIn Pixel service, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland as joint controllers for the purpose of displaying personalised advertising and measuring our advertising success.

We enable the service to collect connection data, data from your web browser and data about the content accessed. We also enable the service to run tracking and recognition software and to store data on your end device. The tracking and recognition software then enables the service to enrich its advertising network and to recognise you when you visit third-party websites or to display personalised advertising. We also use the data collected to measure the success of our advertising. The data on your end device is stored for a period of up to two years.

The legal basis for data processing is your consent in accordance with Section 165 (3) TKG 2021. The LinkedIn Group transfers your personal data to the USA (third country). The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR. Information about the DPF membership of LinkedIn Ireland Unlimited

Further information on LinkedIn's privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy