Personal Data Protection Information
This document was drafted by ZAD Armeec AD (the Company) to provide more information regarding your personal data which can be processed following the conclusion of insurance agreements and the performance of the obligations under them.
1. Personal Data We Process:
The personal data that is typically processed with regard to the conclusion of insurance agreements and the performance of the obligations under them are as follows:
а) Name: First name, middle name, last name;
b) PIN for Bulgarian citizens;
c) Foreign-National ID No.;
d) Contact information: e-mail, address, tel.;
e) Address: permanent and/or current;
f) Banking information: bank account number;
g) Information related to the subject of the insurance agreement such as ownership, profession, professional experience, etc.;
h) Health information: information regarding your health (diagnosis, history, other health-related documents) which you have submitted in order to get a tailor-made insurance proposal for placing new insurance or for filing an insurance claim.
2. Why do We Process Your Data:
We process your data to conclude and perform the insurance agreements under which you are an insuring party, the insured, or a third-party beneficiary. ZAD Armeec AD can process your personal data (including your health information) for the purpose of drafting insurance agreement proposals pursuant to your express permission.
The Company can process Your Personal Data (including your health information) which you have provided in filing insurance compensation claims, to substantiate your claims or to ascertain, exercise, and protect your legal rights.
Your data can be shared by ZAD Armeec with other service providers (experts and subcontractors) based on ZAD Armeec AD’s legitimate interest in performing its insurance agreement obligations and improving the quality of the services offered. We can share your data with other companies of Cheimimport Gropup and CCB Group AD for internal administrative purposes and to provide information on services and promotions offered.
ZAD Armeec may also share your data with state authorities pursuant to its legal information sharing obligations.
3. What is your personal data used for:
The personal data you have submitted will be used for the management of the insurance agreements including but not limited to the following:
a) Drafting an individual insurance proposal;
b) Concluding an insurance agreement and the annexes and appendices thereto;
c) Issuing documents proving insurance premium payment;
d) Filing and processing claims for damages caused by the inset of insurance events, paying our insurance compensations or insurance amounts;
e) Actions and measures to avoid insurance fraud;
f) Risk assessment;
g) Legal compliance including the avoidance of conflicts of interest, corruption, adherence with the provisions of the Anti-Money-Laundering Act and compliance with the company’s obligations to share information with state authorities.
When drafting your tailor-made insurance proposal for a particular insurance product, it is possible for your Personal Data to be used for profiling in our data processing systems. ZAD Armeec AD may use information systems for risk assessment based on pre-formulated criteria. In such cases your Personal Data will be profiled pursuant to ZAD Armeec AD’s legitimate interest in correctly assessing the risks before assuming any contractual obligations based on the assessment. You have the right to object to having your personal data used for profiling. For more information on the terms and conditions for filing such objections, please read ZAD Armeec AD’s Personal Data Protection Policy (which can be found at http://www.armeec.bg/ or any of our branch offices across the country).
5. Confidentiality of Personal Data and Information Sharing
ZAD Armeec AD respects and maintains the confidentiality of your personal data. Pursuant to the provisions of the law ZAD Armeec AD may share or disclose your personal data to the individuals and entities listed below only when there are legal grounds to do so or when there is a good reason to do it in conjunction with the conclusion or performance of an insurance agreement:
a) Service providers and subcontractors (consultants, experts, appraisers, etc.), where ZAD Armeec uses the services of such parties with regard to the conclusion or performance of insurance agreements, processing insurance claims and insurance compensation payments, and maintaining and developing information systems. In cases such as these ZAD Armeec will share personal data only if the service provider in question has undertaken in written agreement to ensure an adequate level of protection for the personal data shared with him in such manner.
b) Subcontractors offering services on behalf of ZAD Armeec AD, including outside of the Republic of Bulgaria, in order to ensure the performance of the obligations assumed by ZAD Armeec under its insurance agreements. In instances like this personal data will be disclosed only in accordance with the provisions of the applicable Bulgarian and European law.
c) Reinsurers – reinsurance brokers or their representatives for the purpose of acquiring reinsurance protection for the Company’s insurance portfolio or in connection with the performance of the reinsurance agreements. . In instances like this personal data will be disclosed only in accordance with the provisions of the applicable Bulgarian and European law.
d) Insurance intermediaries – insurance agents, insurance brokers or dealers providing insurance intermediary services as an additional business only in conjunction with concluding and performing insurance agreements. Typically your personal data is shared with the intermediary directly by you. In its agreements with insurance intermediaries, ZAD Armeec requires of all of them to ensure an adequate level of protection for the data shared.
6. Personal Data Retention Period
ZAD Armeec AD will store and manage documents containing your personal data for the purpose of concluding and performing insurance agreements, registering and processing compensation payment claims as follows:
a) Insurance agreements and documents integral to such agreements (insurance proposals, insurance agreement questionnaires, copies of ownership documents or other documents collected in the agreement conclusion process, insurance policies and certificates, annexes, addendums, debit notices, receipts, bank documents evidencing the payment of insurance premiums and so forth) will be stored for a period of no more than 10 years as of the expiration date of the insurance agreement to which they pertain (the retention period depends on the type of the insurance agreement). If a compensation claim has been filed under an insurance agreement, the retention period will commence on the day on which the last claim filed under the agreement lapsed;
b) Documents filed in conjunction with insurance claims (insurance claim form, traffic accident forms, documents proving ownership of the insured asset, health-related documents, etc.) – the maximum retention period for such documents is 10 years as of the day on which the last claim filed under the agreement lapsed;
c) Litigation documents from legal cases related to insurance agreements – the maximum retention period for such documents is 10 years as of the day on which the court of the highest instance issued its ruling on the case.
7. Your Rights Regarding Your Personal Data
You have the following rights with regard to your personal data that is being processed by ZAD Armeec AD pursuant to the Bulgarian and EU law:
a) To have access to your personal data which the Company is processing and get a copy of them;
b) To request corrections to be made to the personal data being processed by the Company, if you have found them to be incomplete or incorrect;
c) To request to have your data deleted where there are grounds for such request. This can happen when the data has served the purposes for which it was collected, when you have withdrawn your consent for them to be gathered and processed, provided collection and processing is based only on consent and there are no other legal grounds, when you data is being processed illegally, and in certain other cases;
d) To request a restriction in the scope in which your data is being processed to the extent allowed by law;
e) To exercise your data portability right and to request that your data is presented to you in a structured, widely used, machine-readable format;
f) To withdraw your consent where processing is based on consent.
8. Contact us
For more information on the terms and conditions regulating the exercise of your rights, please read ZAD Armeec AD’s Personal Data Protection Policy which can be found at www.armeec.bg or at any one of our branch offices across the country.
If you have any questions regarding the protection of your personal data, please contact us at the following address: 2 Stefan Karadzha St., Sofia, Bulgaria, e-mail: email@example.com
Or contact our Personal Data Protection Officer, Ivo Hristov at: firstname.lastname@example.org
You have the right to lodge a complaint with the Prsonal Data Protection Commission, if you feel your rights regarding the collection, processing and storage of your personal data have been infringed upon and you have grounds to complain.