About us
Products
Our Services
in connection with the conclusion of an insurance contract and the settlement of claims for payment of insurance indemnities
In pursuance of the General Data Protection Regulation, we provide you with the following information on your personal data that are being processed in connection with the conclusion and the implementation of an insurance contract and the settlement of claims for payment of insurance indemnities.
Data controller: Bulgaria Insurance АD (the Company), company registration number: 131233651, having its seat and registered office at: 110 - B Bulgaria Blvd., Sofia City, represented jointly by Nikolay Logofetov and Svetla Saveva–Koleva in their capacity as Executive Directors.
What kind of your personal data do we process?
1. Name: first name, middle name and surname;
2. PIN;
3. Contacts: e-mail, address, and phone number;
4. Address: permanent or current, address of insured property;
5. Bank information: bank account number;
6. Data specifying the subject matter of the insurance contract: property, age, gender, place of work, position, employer, length of service, work experience, etc., without which the subject matter of the insurance, or the circumstances that are essential for estimating the insurance risk, cannot be defined;
7. Health data: information about your health status (previous diseases, operations, availability of permanent incapacity, hereditary burdens, blood type, genetic data, medicines prescribed, completed examinations, hospitalisation, operations and manipulations) that you submit for us with respect to concluding health insurance, insurance concerning any accident, disease, travel assistance, etc., without which the subject matter of the insurance, the circumstances that are essential for estimating the insurance risk, filing a claim for paying indemnity and the payment thereof cannot be defined.
On what basis do we process your personal data?
The processing of your personal data in your capacity as an insuring party, insured person or third-party beneficiary is necessary for:
1. complying with the statutory and contractual obligations of the data controller.
2. settling a claim for compensation.
3. protecting the Company rights judicially or for claiming the rights of recourse of the data controller.
What is the purpose of using your data?
We use the personal data provided by you to control the insurance legal relation and the consequences thereof, including for:
1. Preparing an individual or group insurance proposal;
2. Concluding an insurance contract and paying the insurance premium due.
3. Fulfilling rights and obligations undertaken with the insurance contract.
4. Processing filed claims due to an occurred event and paying or rejecting a payment of an indemnity.
5. Preventing insurance frauds;
6. Assessment of the insurance risk;
7. Fulfilling statutory obligations and requirements including prevention of a conflict of interest, measures against money laundering, avoidance of practices involving corruption.
8. Marketing or statistical goals of the controller.
9. Providing information and offering new insurance products and services that take your personal preferences and needs into consideration – if your previous and express consent is available.
Profiling
Please note that when preparing your specific insurance offer (proposal for insurance), your personal data may be subject to profiling through information processing systems. Depending on the specifics of the particular type of insurance, our Company may use information systems to calculate the probability of an occurrence of an insured event. The information systems work on the basis of defined criteria developed by expert actuaries.
Profiling is performed on the basis of the Company's statutory duties to assess the risk and to undertake contractual obligations based on performed risk assessment. You may object to the profiling of your data keeping in mind that it may cause inability to assess the risk, to prepare an offer and to conclude an insurance contract in specific cases.
Who do we share your personal data with?
We respect and we keep the confidentiality of your personal information. However, in compliance with the legal requirements and in order to fulfil our contractual obligations, we may disclose your personal data with the following entities:
1. Medical facilities with which the Company has concluded contracts for the provision of medical care to persons insured by it, service providers (subcontractors, consultants, lawyers, appraisers, companies that maintain information systems and data bases, archives, etc.) based on its legal interest to fulfil their contractual obligations and to possibly provide the best service. Your data could be shared with reinsurers, reinsurance brokers, assisting companies or partners that we jointly provide services or products with, including those who are located outside the territory of Bulgaria. Such disclosure of data shall be effected only upon availability of a legitimate interest and in compliance with the Regulation requirements for a written contract in order to provide an appropriate level of data protection.
2. Insurance Agents and Brokers: most often you personally provide insurance agents and brokers with your data. If your insurance is concluded by the mediation of an insurance broker, your personal data related to the settlement of а claim may be provided to the broker chosen by you.
3. Third parties may be provided with your personal data in order to fulfil statutory obligations of the controller, implement its rights of recourse or any other statutory rights. Data recipients could be the Financial Supervision Commission, the National Revenue Agency, the Ministry of the Interior, the courts and other public and municipal authorities, or other authorities specially incorporated by law; other insurers in Bulgaria and abroad.
How long do we store your personal data?
The Company keeps the individual documents that it administers for the purpose of fulfilling obligations under insurance contracts and claims as follows:
1. Insurance contracts and documents, which are an integral part thereof (proposal for concluding an insurance contract, questionnaire, policy, annexes, etc.) – a maximum term of 10 years from the date of conclusion of the insurance contract, and the term shall depend on the type of insurance and shall take the legislation in force, which governs the statute of limitations rules, into consideration.
2. Notifications pertaining to an insured event and claims for paying indemnity – a maximum term of 10 years as of the date of submitting the document, the term shall depend of the type of insurance and shall be consistent with the legislation in force that governs the statute of limitations rules.
3. Documents related to a claim for paying indemnity, filed with a court – a maximum term of 10 years as of the effective date of the court decision/ruling for terminating the court proceedings.
Your rights with respect to your personal data:
In compliance with the Bulgarian legislation, you have the following rights with respect to your personal data processed by the Company:
1. To get access and/or a copy of your personal data that the Company processes.
2. To request that we implement a correction upon ascertained incompleteness or inaccuracy.
3. To request that your data be deleted if the prerequisites thereof are available; the goal, for which the data have been collected, has been achieved; you have withdrawn your consent when processing is based thereon and there are no statutory grounds for processing; your data are being processed unlawfully, etc.
4. To request that the processing of your personal data be limited if any statutory grounds are available in this respect.
5. To object to processing your data if such processing is performed on the basis of a legitimate interest.
6. To exercise your data portability rights and request that your data be provided in a structured and machine-readable format to any other organisation.
7. To withdraw your consent when processing your personal data is based thereon.
8. The above rights may be effected by filing an application in any wording by post, electronic means or at the Company’s address specified hereunder. Our response shall be submitted to you within one month.
9. To file a complaint with the Commission for Personal Data Protection (CPDP) when the relevant prerequisites are in place.
How to contact us?
You can contact us at the following address: 110 - B Bulgaria Boulevard, 2nd fl., 1404 Sofia, Bulgaria, e-mail: dpo@bulgariainsurance.bg
You can contact our Data Protection Officer via e-mail: dpo@bulgariainsurance.bg
You can find more information in the Policy on exercising the rights of data subjects on our website (www.bulgariainsurance.bg), and in our offices.
