INFORMATION CLAUSE

In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we would like to inform you that we have taken the necessary steps to adapt our internal procedures to the requirements of the new law. Below you will find information that will allow you to familiarize yourself with the personal data protection rules implemented in our Company.

 

WHO IS THE DATA ADMINISTRATOR?

We would like to inform you that the administrator of your personal data contained in the documentation relating to the performance of insurance brokerage activities is STBU Brokerzy Ubezpieczeniowi spółka z ograniczoną odpowiedzialnością, with its registered office in Sopot 81-855,
ul. Rzemieślnicza 33 (hereinafter: “STBU”), registered in the Register of Entrepreneurs kept by the District Court in Gdańsk, 8th Commercial Division of the National Court Register, under number 0000090358; NIP: 585-13-40-951, REGON: 191640955;

 

FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE USE THE DATA?

We will use your personal data for the following purposes:

• to conclude and perform the insurance brokerage service ordered by you from the controller, including the assessment of insurance risk – the legal basis for processing is the necessity of data processing for the conclusion and performance of the contract, including ensuring the correct quality of services provided (legal basis – Article 6(1)(b) of the GDPR) – “performance of the contract,”
• storage of documentation related to the performance of insurance brokerage activities and for purposes related to representing you in accordance with the power of attorney granted to the Insurance Company (Article 32(3)(4) of the Act of December 15, 2017, on insurance distribution, Journal of Laws 2017, item 2486).
• fulfilling the legal obligations incumbent on our company, resulting in particular from the Act of December 15, 2017, on insurance distribution (legal basis – Article 6(1)(c) of the GDPR) – “legal obligation,”
• to pursue claims arising from insurance contracts concluded by you through the controller (legal basis – Article 6(1)(f) of the GDPR) – “legitimate interest of the administrator,”
• marketing of own services during the term of the contract (legal basis – Article 6(1)(f) of the GDPR) – “legitimate interest,”
• marketing, if you consent to the use of your data for this purpose (legal basis – Article 6(1)(a) of the GDPR) – “consent.”

Your data will not be processed in an automated manner, including in the form of profiling.

 

HOW LONG WILL WE USE YOUR DATA?

We will use the data for the period necessary to achieve the purposes described above.
Depending on the legal basis, this will be, respectively:

• the duration of the contract,
• the time of performing legal obligations and the time during which we are required by law to store data, e.g., tax regulations,
• the time after which claims arising from the contract expire,
• the time until consent is withdrawn.

WHAT ARE YOUR RIGHTS?

You have the right to:

1. access your personal data and receive a copy of the personal data being processed;
   rectify your incorrect data;
2. request the erasure of data in the circumstances provided for in Article 17 of the GDPR;
3. request the restriction of data processing in the cases specified in Article 18 of the GDPR;
4. object to data processing in the cases specified in Article 21 of the GDPR;
5. transfer the data provided, processed in an automated manner;
6. withdraw consent at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.

Regardless of the rights listed above, if you believe that your personal data is being processed unlawfully, you may lodge a complaint with a supervisory authority at any time.

Consent given for the processing of personal data for marketing purposes may be withdrawn at any time.

 

WHO DO WE SHARE YOUR DATA WITH?

While maintaining all data security guarantees, we may share your data—apart from persons authorized by the Data Administrator —with other entities, including entities processing it on our behalf, which provide us with accounting, legal, IT, and brokerage services, entities providing us with claims settlement services, our subcontractors or associates who directly perform activities for the purpose of performing the contract on your behalf, as well as entities with which the Company cooperates in the field of claims settlement, our subcontractors or associates who directly perform activities for the purpose of performing the contract on your behalf, as well as entities with which the Company cooperates in the field of claims settlement, our subcontractors or associates who directly perform activities for the purpose of performing the contract on your behalf, as well as entities with which the Company cooperates in the field of claims settlement, our subcontractors or associates brokerage, and claims settlement services, to our subcontractors or associates who directly perform activities for the purpose of performing the contract on your behalf, as well as to entities with which the Company cooperates within the framework of organizational and capital links in order to optimize the services and products offered to you. In addition, STBU will disclose your personal data to other recipients if such an obligation arises from legal provisions, e.g. to your insurer.

The administrator does not intend to transfer your data to a third country or to international organizations.

 

OTHER INFORMATION

In matters related to the protection of personal data, you can contact the Data Protection Officer by e-mail: iod@stbu.pl or in writing to the address of the Controller’s registered office.