PRIVACY POLICY

Qualis Protectus, Ljudevita Posavskog 36B, Zagreb, OIB; 26917743473, an authorized trade for insurance and reinsurance brokerage, in the performance of its registered activity collects and processes personal data of users of its services in accordance with applicable laws and regulations on the protection of personal data, taking care of their accuracy, completeness and security.

MANAGER AND PERFORMER OF DATA PROCESSING

Qualis Protectus is the manager and executor of data processing in accordance with applicable laws and regulations on the protection of personal data, and as the manager of data processing determines the purpose and means of personal data processing.

Contact information:

Qualis Protectus

Ljudevita Posavskog 36B, Zagreb

e-mail: db@qualis-protectus.hr

PURPOSE AND TYPE OF DATA PROCESSING

We collect and process your personal data for the purpose of distributing insurance and reinsurance, i.e. performing proposal work, consulting and other preparatory actions for concluding an insurance contract, solving compensation claims for you as our client, as well as when performing other brokerage work. The data we collect refers to your identification data (name and surname, address, social security number), as well as data on occupation, date of birth, and data on identification documents and other documents. We collect and process particularly sensitive data, i.e. data about your health, racial or ethnic origin, if necessary, when it represents our legal obligation or with your express consent.

We collect certain data due to the fulfillment of our obligations and services, legal obligations or on the basis of legitimate interest, and depending on the reason for collection, the types of personal data we collect are:

Basic personal data
Personal data for risk assessment
Information on the subject of insurance
Information about the adverse event
Financial data in accordance with legal obligations
Other data and public documents for the purpose of performing mediation activities

We collect personal data directly from you, during negotiations regarding the conclusion of a contract, the conclusion and execution of a contract, through forms, telephone or electronic communication. Also, we may collect your data from publicly available sources or documents, from third parties such as our business partners, insurance distributors, insurance companies and associations, government bodies, lawyers or financial institutions.

USE AND BASIS OF PROCESSING AND COLLECTION OF PERSONAL DATA

We collect and process personal data for the purposes of entering into and fulfilling contractual relationships, fulfilling legal obligations and on the basis of our legitimate interest, except when your interests and rights that require the protection of personal data take precedence over these interests. On the basis of legitimate interest, personal data of clients, except for the purpose of commercial interests to improve business processes, can also be collected for the purpose of preventing money and financing of terrorism and detecting fraud in insurance and fraud in general.

When we collect and process your data in order to fulfill our legal or contractual obligations, the transfer of such data is mandatory. If you withhold some of the information that is necessary for the fulfillment of legal and contractual obligations, we will not be able to fulfill them and therefore not even conclude a contract with you.

In certain cases, we will collect and process your data with your express consent. This primarily refers to the use of your data for marketing purposes, in which case we will ask for your consent, which you can withdraw at any time via the aforementioned contact details without any consequences. The denial of further data processing does not affect the legality of data processing that was processed based on your consent until the moment when you withdrew the given consent.

WHO HAS ACCESS TO YOUR PERSONAL DATA

We collect and process your personal data for the purposes listed above, and if it is necessary to achieve that purpose, third parties may have access to your data. A limited number of our employees have access to your data according to the instructions provided and to the extent necessary for the performance of their work tasks.

Workers are obliged to comply with the obligation of data confidentiality and act in accordance with the measures prescribed for data protection. Competent authorities may also have access to the data when this is determined by law or to protect our legitimate interests, and all in accordance with current legal regulations.

We may disclose your data to third parties, including service providers for administrative, technical and professional support, business partners and other bodies for the purpose of executing contractual relations with you and insurance companies, all for the purpose of performing our mediation services in insurance and reinsurance. Also, if necessary, we can provide your data to external collaborators, such as lawyers, accountants or auditors.

The transfer and processing of your data is carried out with measures to protect confidentiality, and we select third parties with due care, making sure that they act in accordance with our instructions.

As a processor, we process your data in compliance with the obligations prescribed by law for processors.

AREA OF COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA

Your personal data is processed and stored within the European Economic Area. In the event that your data must be transferred or stored outside this area, this is possible based on the decision of the European Commission, if there are appropriate protection measures in accordance with the applicable law, i.e. in the manner and in accordance with the exceptions allowed by the provisions of the General Data Protection Regulation or other regulations on data protection.

STORAGE PERIOD OF PERSONAL DATA

Your data is stored for the period necessary to achieve the aforementioned purpose, i.e. as long as it is prescribed by the provisions of the law. If we collect and process personal data based on your consent, we will collect, process and store them during the period for which you have given your consent.

YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

Your rights regarding data processing are as follows:

The right to access your personal data
The right to correct or supplement your personal data so that they are always correct
The right to withdraw consent at any time
The right to delete your data when they are no longer needed for the stated purposes
Right to data transfer
The right to data restriction (e.g. when you dispute the accuracy of the data, and while we determine its accuracy)
The right to object to data processing

To exercise your rights, especially the right to object or withdraw your consent, you can contact us via the contact information provided in the introductory part, and upon receipt of the request, we will not process your personal data further. In order to act on your request, we have the right to ask you for additional information to confirm your identity. The aforementioned rights may be limited in the event that data processing is necessary or permitted by law.

THE RIGHT TO SUBMIT AN OBJECT TO THE SUPERVISORY AUTHORITY

You can submit an objection to the processing of your data at any time to the supervisory authority, the Agency for the Protection of Personal Data, Martićeva 14 Zagreb, azop@azop.hr, www.azop.hr.

In application from February 22, 2022.

In case of significant changes and additions to this Notice, you will be informed about them in a timely manner in written form as well as on the website www.qualis-protectus.hr