Notification regarding the personal data processing
Medihelp International Broker de Asigurare S.R.L is a dynamic company, undertaking a continuous process of updating the services and goods it offers its customers, dedicated to offering you safety of the highest standards. We wish to keep you updated regarding the technical changes we need to undertake in order to comply with the legal requirements on personal data processing.
The company complies to the GDPR requirements by maintaining data updated, through its secured method of storing and destroying data, by collecting the minimum personal data necessary for processing and by protecting the said data against loss, inapropriate manipulation, disclosure or unauthorized access. The company implements appropriate technical measures in order to protect personal data.
The company permanently reviews and updates its technical and organizational measures in order to ensure the highest standard in personal data processing.
This notification on Personal Data Processing describes the categories of you personal data that we process, the methods in and the purposes for which we collect them, the situations in which we transfer personal data, as well as the rights you have in the matter. At the same time, the present Notification on Personal Data Processing details the manner in which personal data processing affects the management of our relationship with our clients, mostly for us to be able to keep you updated on the newest evolutions or events in your area of interest.
FOR WHICH PURPOSES ARE WE PROCESSING YOUR PERSONAL DATA?
Medihelp International Broker de Asigurare S.R.L. (“Medihelp”) is registered at the ANSPDCP as personal data processer under no. 18944 and it processes personal data supplied in compliance with the provisions of the EU Regulation 679/2016 for the following purposes („Allowed Purposes”):
- With the purpose of providing insurance intermediation services (offers, managing insurance contracts, processing damages and general long term assistance granted to our client as well as for other purposes, in order to fulfill our contractual obligations) as well as for fulfilling certain legal obligations and requirements of the ASF or of other authorities.
- Managing the security and access in our headquarters, managing the use the IT systems used by Medihelp (e.g. internet page, data management platforms, communication systems used), including the prevention and detection of security threats, frauds or other unauthorized or malicious activities;
- With the purpose of observing court decisions and for exercising and/or defending our rights and interests;
- Analyzing and improving our services and communications towards you, including (since we have a legitimate interest for continuously improving our services) the performance of surveys among our clients, with regard to the level of satisfaction experienced by our clients in relation with Medihelp services and
- With any other purpose corresponding and/or auxiliary to any of the above, or for any other purpose for which your personal data has been supplied to us, while observing the applicable legislation.
CATEGORIES OF PROCESSED PERSONAL DATA. The following information is included in the category of personal data we are processing:
- Contact data: name, surname, address of residence, postal address, mail address, profession/job, professional address, telephone numbers (mobile and fixed), e-mail address;
- Issued instructions, payments performed, information on any medical matter
- Information on physical and mental health
- Details regarding the manner in which you interact with Medihelp
- Information regarding your visits in our offices/headquarters
Once you have registered or/and sent your personal data then you have agreed the usage of the data according to this Notification regarding the personal data processing.
The processing of your personal data is performed based on:
- The mandate you have concluded with Medihelp International Broker de Asigurare S.R.L.
- The insurance contract
- Your express consent, for marketing and advertising activities.
- Legal requirements
Your personal data can be transferred towards: insurance and reinsurance companies, state authorities (including courts of law, fiscal authorities), service suppliers (premiums calculation services suppliers, repair units, clinics, consultants, experts, IT services developers, archiving companies) consultants or experts involved in the cases we are managing and in the services we are supplying, public authorities, courts of law and / or arbitrary courts, entities indicated by you or by other entities within the supply of Medihelp services (such as the recipients expressly empowered by Medihelp International Broker de Asigurare S.R.L., in compliance with the provisions of the applicable law regarding the protection of personal data and with the purpose of processing. Your personal data
HOW MUCH TIME DO WE KEEP YOUR PERSONAL DATA
Your personal data collected for issuing offers, the conclusion of the insurance contract, for its execution, and for granting compensations, inclusively, shall be registered in the database of Medihelp International Broker de Asigurare S.R.L., for the offer issuing phase, for a maximum period of 30 days from the date of signing the insurance offer, respectively from the date the offer was issued and, after the conclusion of the contract, throughout the period during which you are, a Client, beneficiary of a compensation (third party in the contract inclusively, provided that the effects of the contract affect you), to which we shall add the period of time for which the data are necessary so that Medihelp International Broker de Asigurare S.R.L. exercises its rights resulting from the insurance contract(s) and for the fulfillment of all obligations resulting from legal regulations on storage.
SECURITY AND INTEGRITY OF PERSONAL DATA
Medihelp has implemented reasonable security policies and procedures in order to protect personal data against loss, inappropriate use, or their unauthorized modification or destruction. However, despite Medihelp’s bests efforts, a complete security against all risks cannot be guaranteed. As far as possible, access to your personal data is limited only to those persons that need to be aware of them. Persons who have access to such data need to maintain their confidentiality. Also, we are making reasonable efforts to maintain personal data only as long as necessary in order to comply to the request of a person or until that person requests their removal.
Please, if, in relation with the conclusion or execution of an insurance contract, you provide us with the personal data of another person inform the respective person of the present notification and acquire his/her Agreement, if applicable. In case that the personal data communicated belong to a minor, the parent or legal guardian will be the one informed for the minor child.
THE TRANSFER OF YOUR PERSONAL DATA ABROAD
We can transfer your personal data to European States or to other states recognised by the European Commission as to be able to assure the protection of personal data, if this transfer is necessary for proccesing the above mentioned allowed purposes. Anyway we will make every effort to assure that these personal data transferes are done according to protection measures in accordance with the Data Protection General Regulation 2016/679
RIGHTSRIGHTS RELATED TO PERSONAL DATA PROCESSING
In compliance with the provisions of EU Regulation 679/2016, sub rezerva anumitor conditii legale, we mention that you can benefit of the following rights related to personal data processing: (i) the right to be informed, (ii) the right to have access to data, (iii) the right of intervention on data (rectify, delete), (iv) the right to restrict the processing, (v) the right of not being subjected to an individual decision and (vi) the right to portability, (vii) the right of being notified in case the security of data is being breached, (vii) the right of filling a complain to the National Authority for the Supervision of Personal Data Processing.
We are informing you that the withdrawal of your consent shall not affect the legality of the data processing performed based on the consent you have expressed before such withdrawal.
With regard to your right to oppose, we mention that it can be exercised at any moment, in case of legitimate reasons related to your particular situation, excepting the case in which there are legal provisions providing the contrary.
In case that you would like to exercise such rights, you can submit a written request at the following address: firstname.lastname@example.org
Regarding the marketing articles you are receiving from us you can anytime withdraw your consent by accesing the link "Unsubscribe".
If you are not satisfied about our answer to any of your requests, then you have the right to address a complaint to National Authority of Supervision for Processing Personal Data from 28-30 Gheorghe Magheru Blvd., Bucharest, Romania.
LINKS TO OTHER WEBSITES
We would like to inform you that the Medihelp website might include links to other websites, which are not governed by this Notification on Personal Data Processing, but by other confidentiality statements which might be different. We recommend our users to analyze the confidentiality policy of each website before disclosing personal data.
Wherever, in the website, terms such as “Medihelp” “we,” “our,” and “to us/ours” are used, they refer to Medihelp International Broker de Asigurare S.R.L. (“Medihelp”), a Romanian company and/or any other companies affiliated in the Medihelp network.
Thank you for the trust you have granted us and we assure you that we shall continue to offer your services at the standards you want,
Team Medihelp International Broker de Asigurare S.R.L.