当企业或商业客户购买保险时，苏黎世作为保险公司需要处理其公司数据（例如经营地址、营业额、供应链等）。通常，当商业客户从苏黎世购买保险时，我们不会处理任何个人数据。但是，会存在例外情形（例如，联系人信息或查询苏黎世商业客户保单的凭据），该例 https://www.zurich.com.cn/statement.html 。

When corporate or commercial customers purchase insurance, Zurich as insurer needs to process their company data (as e.g. locations of operations, turnovers, supply chains etc.) Normally, no personal data is being processed, when commercial customers purchase insurance from Zurich. However, exceptions can apply and for those particular cases, where personal data is being processed (as e.g. contact data or credentials for accessing Zurich CI’s applications) Zurich’s generally applicable privacy notice with regards to the processing of personal data applies. The privacy notice regarding personal data processing can be found on our internet pages under the following link: https://www.zurich.com.cn/statement.html.

苏黎世理解并接受您共享的公司数据对您的业务很重要，并且其中可能包含对您的企业敏感的信息。因此，我们认为您有必要了解苏黎世如何处理商业和企业客户数据。以下是关于苏黎世如何处理商业保险客户公司和商业数据的信息。

Zurich understands and accepts that the company data you are sharing with us is important to your business, and that it may contain information that is sensitive to your enterprise. We are of the view therefore that you should be informed about how Zurich processes commercial and corporate customer data. What follow is Zurich’s information regarding the processing of corporate and commercial data of Zurich’s Commercial Insurance customers.

构建和承保保险和风险减量方案：

在商业保险中，承保的风险是多样化和分散的。在许多情况下，我们的商业客户的风险敞口遍布多个国家甚至大洲。为了有效地覆盖商业客户不断变化的风险，作为勤勉的保险公司，我们必须收集足够的承保相关信息，例如地点、营业额、业务活动、供应链、员工人数等。只有有了这些信息，我们才能为商业和企业客户构建最充分和最先进的风险管理和保险方案。

Structuring and underwriting insurance and risk mitigation solutions:

In commercial insurance, the insured risks are diverse and fragmented. In many cases, the exposures of our commercial customers are spread across a multitude of countries or even continents. To efficiently cover the ever varying risk of commercial customers, as a diligent insurer we must collect an adequate number of underwriting-relevant information, as e.g. locations, turn-overs, business activities, supply-chains, numbers of employees etc. It is only with such information that we can structure the most adequate and state-of-the-art risk management and insurance solutions for commercial and corporate customers.

让数据发挥作用：

我们的目标是进一步为我们的商业客户提供与其跨国和国内需求相契合的风险和保险方案，并尽可能根据其确切需求进行结构调整及精确定价。为此，当前数据的潜力使我们能够将尖端的分析、计量和其他工具投入使用，这有助于我们在最新技术的支持下优化产品和价格，使客户受益。为了实现这一目标，我们将处理您与我们分享的数据，并在必要时使用最新的计量和分析工具以及技术对数据进行匿名化处理。

Putting data to work:

It is our goal to further provide our commercial customers with risk and insurance solutions that are as tailored to their multinational and domestic requirements and as sharply structured and precisely priced as ever possible to their exact needs. To that end, the current digital potential allows us to put cutting edge analytics, benchmarking and other tools to work, which help us optimize products and price to our customer’s benefit with the support of the most up to date technology. To achieve such goal, we process and, where need be, anonymize the data you share with us in adequate and the most up to date benchmarking and analytics tools and technology.

严格遵守“需要知道”原则的基础上共享数据：

我们严格执行仅在需要时共享商业和企业被保险人的数据。这表示，只有那些基于构建保险方案和风险管理，履行与客户达成的协议之目的，确有必要访问这些数据的人才能看到这些数据。在跨国保险中，这意味着数据是跨境共享的。此外，如果商业客户由经纪人代表，苏黎世有权与中介机构共享数据。如果苏黎世与共保人、承保超额保险的保险公司或再保险公司合作为其所覆盖的风险投保，或者苏黎世与服务提供商合作提供例如风险工程、可持续或其他服务，则可能需要与相应的第三方共享数据。

Strict commitment to share data on a “need-to-know” basis:

We do limit the sharing of data of commercial and corporate insureds solely where needed. This means in effect that only those persons can see the data, who need to have access to them so that Zurich can structure the insurance and risk management deal and can execute on what we have agreed with the customer. In multinational insurance covers this means that data is shared across borders. Also, where the commercial customer is represented by a broker, Zurich has the right to share the data with the intermediary and where Zurich works with co-insurers, excess insurers or re-insurers in insuring the risk that it covers, or where Zurich works with service providers to provide e.g. risk engineering, resilience- or other services, data sharing with the respective third-parties may be required.

分析、计量和其他产品改进工具：

这些应用程序原则上以匿名方式运行数据，并且它们大部分是对内的，因为苏黎世在拥有专有权利的基础上使用和开发这些应用程序。在某些情况下，有些数据集会与第三方专家共享，以从数据中获取最极致的有效信息。如果发生这种情况，数据交换将适用严格的法律关于保密的规定，并以最先进的技术保护数据。

Analytics, benchmarking and other product improving tools:

These applications run the data on anonymized basis in principle and they are internal for the most part, as Zurich uses and develops these applications on a proprietary basis. In some cases, certain data sets can be shared with expert third parties that are helping generate utmost insight from the data. Where this happens, the data exchange is governed by strict legal confidentiality protection provisions and state of the art technology securing the data.

为了能够执行我们对相关客户的风险管理或保险承诺，与在需要知道的基础上进行处理一样，我们仅在必要的时间内保留商业和企业客户数据。此外，我们还受到适用于各个司法管辖区的数据存储或删除要求的约束，在这些司法管辖区中，作为国际交易结构的一部分，苏黎世与商业客户签订了保险或服务合同。数据将在法定保留期限届满后删除，除非任何法院或任何监管机构、税务或其他主管机构要求予以保留。

As with the processing on a need to know basis, we keep commercial and corporate customer data solely for as long as required, in order to be capable to execute on our risk management or insurance promise to such customers. Also, we are subject to the data storage or deletion requirements applicable in the various jurisdictions, where Zurich entered into insurance or service contracts as part of the international deal structure with commercial customers and data is not retained and deleted as soon as such legal retention periods expire, unless any legal hold requested by any court or any regulatory-, tax- or other competent authority is requested.