Owner and Data Controller

Abu Dhabi , UAE

Owner contact email: [email protected]


Privacy notice

This Privacy Notice describes how Gras Savoye Gulf Insurance Broker LLC collects and processes Personal Information when it provides transactional and advisory services (such as insurance broking, risk advisory, claims management, and other forms of insurance brokerage services) (“Services“) to our clients.

Gras Savoye Gulf Insurance Broker LLC operates in the Emirates of Abu Dhabi and Dubai in the United Arb of Emirates.

Where we say “we,” “us,” or “our” in this Privacy Notice we mean Gras Savoye Gulf Insurance Broker LLC that processes your data in connection with the Services.

Insurance involves the use and disclosure of Personal Information by various insurance market participants such as intermediaries, insurers and reinsurers.

However, you should read this Privacy Notice for specific information regarding how we process Personal Information in relation to the Services.

In providing the Services, we may be required to process Personal Information of individuals named in an insurance policy, or individuals that are beneficiaries of, or have made claims under, an insurance policy, or individuals who are involved in an incident giving rise to an insurance claim. We also process Personal Information of individuals who are shareholders, directors, employees, contractors, consultants and representatives of our clients. This privacy notice applies to any individual whose Personal Information we process in the course of providing the Services (each a “data subject” or “you“).

  1. Scope of this privacy notice

This privacy notice applies when we collect your Personal Information in the course of offering or administering our Services, and it applies to all Personal Information we collect or process about you in relation to this Service.

  1. Personal information

In this section we describe the types of Personal Information we collect in providing the Services, what we use it for and what our lawful basis is for doing so under applicable data protection legislation.

(A) Personal information we collect

Personal Information” is any information that identifies you as an individual or relates to an identifiable individual.

We may collect your Personal Information in the following ways:

  • You may provide us your Personal Information directly if you are our client or if you are involved in a claim that we are handling for a client.
  • We may collect your Personal Information from publicly available sources such as information available on social media platforms, information about your registered property or assets and information about claims and convictions on public records.

The Personal Information we may collect about you from our clients (or directly from you) will depend on the type of Service we are providing and the relationship between us, or between you and our client, but may include:

  • name and contact information;
  • demographic information (such as gender, age, date of birth, marital status, nationality, education/work histories, academic/professional qualifications, employment details, hobbies, family composition, and dependents);
  • information related to the provision of the Services, such as policy information, claims information, and information relating to incidents giving rise to claims and related losses;
  • information about your property and assets;
  • statements made by or about you;
  • records of communications

Some of the categories of information that we collect are special categories of Personal Information (“Sensitive Personal Information“). These include your health records (such as your medical history and reports on medical diagnoses, injuries and treatment); information about your personal characteristics and circumstances of a sensitive nature such as your racial or ethnic origin, sex life, mental and physical health and genetic information; and criminal records.

(B) How we may use your personal information

We use your Personal Information:

  • to provide the Services and fulfil our contractual obligations to our client;
  • to conduct data analysis;
  • for fraud monitoring and prevention;
  • to help develop new services and to enhance, improve or modify our Services;
  • to operate and expand our business activities;
  • to carry out background checks and conduct due diligence in accordance with the applicable laws and regulations governing our business activities;
  • to perform administrative activities in connection with our Services;
  • to exercise, defend or protect our legal rights or the rights of our clients or third parties; and
  • to comply with legal and regulatory obligations and to cooperate with regulatory bodies.

The way we analyse Personal Information for the purposes of risk assessment, fraud prevention and detection, and to report to our clients as part of the Services may involve profiling, which means that we may process your personal information using software that is able to evaluate your personal aspects and predict risks or outcomes.

We may also aggregate or anonymise information about you. Aggregated or anonymised data is not capable of being used to identify individuals and is not treated as Personal Information under this privacy notice.

(C) Legal bases for processing personal information

We must have a legal basis to process your Personal Information in accordance with applicable data protection legislation in the United Arab Emirates. This will be for at least one of the following purposes:

  • where it is necessary to enter into a contract with us / in order to perform the Services to you;
  • where it is necessary to comply with our legal obligations such as due diligence and reporting obligations, for example know-your-customer checks to prevent money laundering and fraudulent activities;
  • where you have provided your consent, for example if you have agreed to receive marketing communications from us. You may withdraw your consent at any time by contacting us using the details at the end of this privacy notice;
  • where it is necessary for our legitimate interests, or those of a third party, for example to ensure that the Services we provide are appropriate for our clients’ requirements, to improve our Services, manage our risks, maintain accurate transaction records, and manage our business in an efficient way. These circumstances shall only apply where such legitimate interests are not overridden by your interests or fundamental rights and freedoms.

We only process Sensitive Personal Information in limited circumstances:

  • where applicable under local data protection laws, the processing is necessary for our insurance brokerage services (i.e. for advising, arranging, underwriting or administering an insurance contract or handling claims);
  • where we have your explicit consent, (in which case our client will obtain your explicit consent to collect and use the data for the purposes described in this privacy notice). You may withdraw your consent at any time by contacting us using the details at the end of this privacy notice; or
  • to establish, exercise or defend legal claims involving you.
  1. Disclosure of your personal information

We share your Personal Information with third parties under the following circumstances:

  • to our  intermediaries, advisers and business partners for the purposes of fulfilling our contractual obligations to clients, for example to deliver our Services and to arrange insurance products for clients;
  • if we are obliged to disclose your Personal Information under applicable law or regulation, which may include laws outside your country of residence; and
  • to the acquiring or successor entity along with its affiliates and subsidiaries.

We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your Personal Information.

  1. Security and retention

Gras Savoye Gulf Insurance Broker LLC maintains appropriate technical and organizational security measures to protect the security of your data against loss, misuse, unauthorized access, disclosure or alteration. These measures are aimed at ensuring the ongoing integrity and confidentiality of Personal Information. We evaluate these measures on a regular basis to ensure the security of the processing.

We will retain your Personal Information for as long as is necessary for the provision of Services to our clients. When we no longer need your Personal Information in connection with the Services, we will then retain your Personal Information for a period of time that reasonably allows us to comply with our regulatory obligations and to commence or defend legal claims. We may retain aggregated or anonymised data (which is not treated as Personal Information under this privacy notice) for longer.

  1. Choices and access

Gras Savoye Gulf Insurance Broker LLC is the controller responsible for the Personal Information we collect and process.

To exercise any of your rights, which are set out below, you may contact us by sending us an email at [email protected]..

  1. Right to rectify and complete Personal Information: you can request the rectification of inaccurate data and the completion of incomplete data. We will inform relevant third parties to whom we have transferred your data about the rectification and completion if we are legally obliged to do so.
  2. Right to erasure (right to be forgotten): You have the right to obtain from us the erasure of Personal Information concerning you in limited circumstances where:
    • it is no longer needed for the purposes for which it was collected; or
    • you have withdrawn your consent (where the data processing was based on consent); or
    • following a successful right to object; or
    • it has been processed unlawfully; or
    • the data has to be erased in order to comply with a legal obligation to which Gras Savoye Gulf Insurance Broker LLC is subject.

We are not required to comply with your request to erase Personal Information if the processing of your Personal Information is necessary for:

    • compliance with a legal obligation; or
    • the establishment, exercise or defence of legal claims.
  1. Right to restriction of processing: You have the right to obtain from us restriction of processing your Personal Information. In this case, the respective data will be marked and only be processed by us for certain purposes. This right can only be exercised where:
    • the accuracy of your Personal Information is contested, to allow us to verify its accuracy; or
    • the processing is unlawful, but you do not want the Personal Information erased; or
    • it is no longer needed for the purposes for which it was collected, but you still need it to establish, exercise or defend legal claims; or
    • you have exercised the right to object, and verification of overriding grounds is pending.

We can continue to use your Personal Information following a request for restriction, where:

    • we have your consent; or
    • to establish, exercise or defend legal claims; or
    • to protect the rights of another natural or legal person.
  1. Right to data portability: You have the right to receive the Personal Information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another entity without hindrance from us, but in each case only where:
    • the processing is based on your consent or on the performance of a contract with you; and
    • the processing is carried out by automated means.
  1. Right to object: You have the right to object at any time to any processing of your Personal Information which has our legitimate interests as its legal basis. You may exercise this right without incurring any costs.
    If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
    The right to object does not exist, in particular, if the processing of your Personal Information is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
  2. Right to object to how we use your Personal Information for direct marketing purposes: You can request that we change the manner in which we contact you for marketing purposes. You can request that we not transfer your Personal Information to unaffiliated third parties for the purposes of direct marketing or any other purposes.
  3. Right to withdraw consent: if you have given us your consent for the processing of your Personal Information, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  4. Right to obtain a copy of Personal Information safeguards for transfers outside your jurisdiction: You can ask to obtain a copy of, or reference to, the safeguards under which your Personal Information is transferred outside the EU/EEA. We may redact data transfer agreements to protect commercial terms.
  5. Right to lodge a complaint with the local supervisory authority: You have a right to lodge a complaint with the local supervisory authority if you have concerns about how we are processing your Personal Information.
    We ask that you please attempt to resolve any issue with us first, although you have a right to contact your supervisory authority at any time.

Please note that the aforementioned rights might be limited under the applicable national data protection law. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the Personal Information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.

Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the regulator in your jurisdiction.

  1. Contact & comments

If you have any questions or comments regarding this Privacy Notice or would like to exercise your rights as a data subject, please contact us via Contact Us  or by ending an email to [email protected] .

  1. Introduction

Our website, https://grassavoye.ae (hereinafter: “the website”) uses cookies and other related technologies (for convenience all technologies are referred to as “cookies”). Cookies are also placed by third parties we have engaged. In the document below we inform you about the use of cookies on our website.

  1. What are cookies?

A cookie is a small simple file that is sent along with pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit.

  1. What are scripts?

A script is a piece of program code that is used to make our website function properly and interactively. This code is executed on our server or on your device.

  1. What is a web beacon?

A web beacon (or a pixel tag) is a small, invisible piece of text or image on a website that is used to monitor traffic on a website. In order to do this, various data about you is stored using web beacons.

  1. Cookies

5.1 Technical or functional cookies

Some cookies ensure that certain parts of the website work properly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. This way, you do not need to repeatedly enter the same information when visiting our website.

5.2 Statistics cookies

We use statistics cookies to optimize the website experience for our users. With these statistics cookies we get insights in the usage of our website. We ask your permission to place statistics cookies.

5.3 Marketing/Tracking cookies

Marketing/Tracking cookies are cookies or any other form of local storage, used to create user profiles to display advertising or to track the user on this website or across several websites for similar marketing purposes.

5.4 Social media

On our website, we have included content from LinkedIn to promote web pages (e.g. “like”, “pin”) or share (e.g. “tweet”) on social networks like LinkedIn. This content is embedded with code derived from LinkedIn and places cookies. This content might store and process certain information for personalized advertising.

Please read the privacy statement of these social networks (which can change regularly) to read what they do with your (personal) data which they process using these cookies. The data that is retrieved is anonymized as much as possible. LinkedIn is located in the United States.

  1. Placed cookies

Google reCAPTCHA


Consent to service google-recaptcha

Google Maps


Consent to service google-maps


Functional, Marketing, Statistics, Preferences

Consent to service linkedin

  1. Consent

When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. As soon as you click on “Save preferences”, you consent to us using the categories of cookies and plug-ins you selected in the pop-up, as described in this Cookie Policy. You can disable the use of cookies via your browser, but please note that our website may no longer work properly.

7.1 Manage your consent settings

[object Object]

  1. Enabling/disabling and deleting cookies

You can use your internet browser to automatically or manually delete cookies. You can also specify that certain cookies may not be placed. Another option is to change the settings of your internet browser so that you receive a message each time a cookie is placed. For more information about these options, please refer to the instructions in the Help section of your browser.

Please note that our website may not work properly if all cookies are disabled. If you do delete the cookies in your browser, they will be placed again after your consent when you visit our website again.

  1. Your rights with respect to personal data

You have the following rights with respect to your personal data:

  1. You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  2. Right of access: You have the right to access your personal data that is known to us.
  3. Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  4. If you give us your consent to process your data, you have the right to revoke that consent at any time and to have your personal data deleted.
  5. Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  6. Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

To exercise these rights, please contact us. Please refer to the contact details at the bottom of this Cookie Policy. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to submit a complaint to the supervisory authority (the Data Protection Authority).

  1. Contact details

For questions and/or comments about our Cookie Policy and this statement, please contact us by using the following contact details:

Gras Savoye Gulf Insurance Broker LLC
Abu Dhabi, UAE
United Arab Emirates
Website: https://grassavoye.ae


Since its establishment in 1912, the desire to innovate has constantly supported and stimulated the growth of Gras Savoye. It has allowed our group to grow from a simple intermediary, a historical foundation of the brokerage business, to global risk management, guaranteeing clients the most suitable protection of their tangible and intangible assets.

This has allowed Gras Savoye to build a powerful regional and international network, with around 30 offices in France, 5 offices or subsidiaries overseas and 43 offices abroad. Gras Savoye also works with its partners in their international network over 120 countries

Need Any Help? Or Looking For an Insurance

Working Hours : Monday-Sunday, 08am-5pm
© 2024 Gras Savoye Gulf Insurance Broker LLC. CBUAE Reg no 243.