PRIVACY NOTICE
Processing Manager:
THR. GRIGORIADIS & CO GP – INSURANCE BROKERS
24C Papadiamantopoulou St., 11528, ATHENS -GREECE
tel. +302109232312 – Email: info@gbrokers.gr – www.gbrokers.gr
Personal Data Protection Officer (DPO): NATALIA GRIGORIADOU
e-mail: ngrigoriadou@gbrokers.gr tel. +302109232312
The protection of natural persons against the processing of personal data is a fundamental right. In this context, our Company hereby informs you, in accordance with the provisions of the General Data Protection Regulation EU 679/2016 (GDPR), for the correct and lawful use of your personal data which you provide and disclose, in any way, dealing with our Company, through our authorized employees and which data we process exclusively for the following purposes.
Data types
The information collected above, depending on the purpose of your transaction with our Company, may be included in the insurance application or in the application for payment of compensation, in your insurance policy, as well as in the necessary questionnaires, documents and supporting documents that accompany each of your respective applications. Such information may belong to the following categories of data:
a) identification and contact data (e.g. name, occupation, VAT number, AMKA, ID, passport number, date of birth, gender, address, telephone, fixed and mobile, email)
b) payment data (e.g. bank accounts, credit cards, etc.)
c) insurance data, special categories, including sensitive health data, or not, necessary for the assessment and conclusion of insurance and for the management of the insurance contract (e.g. history of insurance coverage, complete medical history, information about financial/property situation, interests, hobbies, lifestyle),
d)data necessary to manage your request, and any relevant supporting document, which may include your personal data, including data for insurance and settlement purposes, necessary to manage a claim for compensation or insurance.
Processing purposes
- Any processing necessary to respond to your relevant request, and for the general servicing of the contractual relationship between us, which includes risk assessment, pre-contractual (e.g. pre-insurance check), or during the validity oftheinsurance contract, the determination ofgeneral and special insurance conditions and the corresponding insurance premium, the management of the insurance contract, and after its expiration, including the assessment, control, settlement of the insurance compensation in the event of the occurrence of the insurance risk or the payment of the stipulated in the terms of the contract amount (insurance), as well as the automated risk profile assessment and decision-making process.
- Compliance of our Company with obligations imposed by the applicable legislative and regulatory framework.
- Legitimate interests of our Company, such as to prevent insurance fraud.
- Commercial communication, informing you about the provision of insurance services and promoting our new insurance products, with your consent, as well as the possibility of communication to update your details.
- Research that the Company may carry out in relation to your other, past or future, insurance applications.
Recipients:
- our Company and its authorized personnel.
- third parties, natural or legal, with whom we generally cooperate in the context of the legal exercise of our activity, and who, as processors on our behalf, are contractually bound by appropriate terms, taking appropriate measures, to protect the data,
- other insurance companies, after submitting a legal request,
- public / judicial authorities.
The Company does not disclose your personal data in any way to third parties, which are not related to the provision of coverage and services linked to your respective application or derived from your insurance policy, unless this is required by law or by a legal request or order of public authority.
Transfer to a third country:
If a transfer to a country outside the EEC is required, the conditions of Articles 44 of the GDPR will be applied, and appropriate guarantees for an adequate level of data protection will be provided.
Retention period:
The required period to satisfy your request or application, your insurance contract, or other contractual relationship between us, and as much as is provided for the Company’s compliance with the provisions of the statute of limitations and other statutory and regulatory requirements.
Subject rights:
According to the GDPR, and regarding your personal data, you have the following rights:
- Right to be informed about how your personal data is being used.
- Right of access, in order to be informed which of your data we are processing, for what reason, and their recipients.
- Right to correct any inaccurate, or complete incomplete, personal information.
- Right to deletion (“right to be forgotten”), if the data is no longer necessary for the processing purposes for which it was collected, subject to the Company’s reservation of non-deletion when its retention is required to comply with its legal obligation, imposed by the law, for the purposes of combating insurance fraud, or for the establishment or rejection of claims, of the Company, the subject or third parties, or also for the purposes of archiving, research, statistics, as long as the data is encrypted.
- Right to limit use, in case of e.g. questioning their accuracy.
- Right to object to the processing, subject to the Company’s reservation as above, when their processing is required to comply with its legal obligation, imposed by law, or by your contract or request, for the purposes of combating insurance fraud, or for the establishing or rejecting claims, of the Company, the subject or third parties.
- Right to portability, in order to receive the data, you have provided yourself in a structured, commonly used format.
- Right to revoke at any time the consent you have provided by signing any form of our Company, without affecting the legality of the processing of your data up to the time you requested the revocation. However, in case of withdrawal of your consent to the processing of data, during the pre-contractual stage or data absolutely necessary for the execution of the insurance contract, we have the right accordingly to refuse to conclude a contract or to terminate an existing contract, respectively, since we will no longer be able to provide our services.
For more information and to exercise your rights, you can contact the above contact details of our Company, or contact the e-mail address of the Data Protection Officer (DPO) of the Company at the email: ngrigoriadou@gbrokers.gr
In case of exercising any of your rights, we will take every possible measure to satisfy it within thirty (30) calendar days of receiving the relevant request, informing in writing about its satisfaction, or the reasons that prevent the exercise.
In order to submit a request to exercise your rights, you can complete and submit the relevant form .
You also have the right to submit a complaint to the Personal Data Protection Authority
(1-3 Kifissias Aven.-11523 Athens – GREECE Tel : +30 2106475600 www.dpa.gr )