PRIVACY POLICY OF PERSONAL DATA

(PRIVACY POLICY)

Introduction

As administrators of this website (hereinafter referred to as “the Website”), we would like to inform you that CONTRACT INSURANCE BROKER Ltd., under the trade name CONTRACT Ltd., a member of CONTRACT NETWORK, is committed to protecting and respecting the privacy of your personal information, by taking all necessary technical and organizational measures for this purpose.

This Privacy Policy applies to the services provided through our website https://www.contract-insurance.com and sets out the basis on which we will process the personal data we collect from you or that you provide to us.

We kindly ask you to read the following carefully to understand our views and practices regarding the lawful processing of your personal data. If you use this Website, you automatically accept and agree to this Privacy Policy, as well as to the Terms and Conditions of Use of the Website published therein.

What is Personal Data

Personal data is information that directly or indirectly identifies you. “Indirectly” means “in relation to other information,” such as your name, postal address, email address, telephone number, or a unique device identification number.

The information voluntarily provided by you, the users of our Website, is used by CONTRACT Ltd. to enable direct and effective communication with our company, to answer any questions you ask us, and ultimately to serve and fulfill your requests.

CONTRACT Ltd. does not distribute to any organization or partner not related to the handling of insurance contracts any email address or other information concerning its users and clients, except to its direct partners in the process of servicing insurance agreements.

For the purposes of the General Data Protection Regulation (GDPR), as well as the broader legal framework around the protection of personal data, we state the following:

  • Regarding the personal data of visitors/users of our Website, the Data Controller is CONTRACT Ltd.

  • Regarding the personal data of a visitor to our Website who submits a request for more information regarding our services, CONTRACT Ltd. will process his/her personal data as a Data Controller.

  • In the event you apply to become a client of CONTRACT Ltd., then the Privacy Policy and Security Policy applicable to our clients will lawfully apply through the processing of your personal data/information.

Where Our Privacy Policy Applies

This Privacy Policy applies only to this Website and does not apply to information collected through any other website or to corporate practices we do not control.

This Website may contain links to other websites. CONTRACT Ltd. is not responsible for the privacy practices of other websites and recommends that you familiarize yourself with the privacy policy of any website you visit.

Information / Data We Collect

Information You Provide Directly

CONTRACT Ltd. has designed its Website so that users may visit it without being required to disclose their identity unless they wish to.

You are not required to provide us with information directly in order to browse this Website.

However, when you use certain features of the Website, such as completing an application/form, we may ask you to provide us with additional information.

This information is provided by you by filling out the appropriate contact form on our Website, which includes only contact information (e.g. name, email address, postal address, phone number, and mobile number).

In addition to the above:

  • We may ask you for information when you report a problem with our Website.

  • If you contact us, we may keep a record of that correspondence/communication.

  • We may ask you to complete questionnaires or surveys that we use for research/statistical purposes, although you are not obliged to respond.

  • We may collect details of your activities through our Website, as well as details of your visits to our Website, including traffic data, location data, logs, and other communication data, the site that referred you to our Website, and the resources you access.

Information Collected Automatically During Your Visit and Interaction with Our Website

When you visit and interact with this Website, certain information may be collected automatically, such as:

  • The IP address of your computer.

  • Your browser type.

  • Your operating system type.

  • The websites you visited immediately before and after visiting our Website.

  • Your connection speed.

  • Information about the server connection.

  • Information collected through cookies, web beacons, and other similar technologies.

How We Use the Information We Collect

If you provide us with information during your visit/use of our Website, the legal basis on which we rely for the collection and processing of the absolutely necessary personal data is the execution of the action or service you requested from us.

In addition, the information you provide when you visit/use our Website may be used for the following purposes:

  • To ensure that our content is presented in the most effective way for you and your computer.

  • To provide information about products or services you request from us, or which we believe may be of interest to you now or in the future. To fulfill our obligations arising from any contracts concluded between our clients and our company.

  • To provide information about our services for marketing purposes.

Email Communication

With your consent, we may use the information we collect to send you email communications such as updates and promotional messages about our products and services.

Statistical Analysis

To learn more about how our Website is used, we may aggregate and analyze the data we collect in order to improve its functionality and content according to the needs of our visitors.

Enforcement

We may also use and disclose the information we collect to prevent illegal activities, enforce the Terms of Use of the Website, and in any way protect our rights and the rights of our visitors/users.

Disclosure of Information

We may disclose your personal information only to insurance companies with which we cooperate, following a lawful request, as well as to service providers who cooperate with the company, within and outside the EU, in the context of the lawful execution of the insurance contract (e.g. insurance intermediaries, investigators or experts, etc.), and in accordance with the applicable data protection legislation.

We may disclose your personal information to a third party in the following cases:

  • In the event of the sale or purchase of another company or its assets, we may disclose your personal information to the prospective seller or buyer of such company or assets.

  • If we or almost all of our assets are acquired by a third party, in that case the personal data held by us about our clients will be one of the transferred assets.

  • If we are required to disclose or share your personal data in order to comply with any legal obligation or to enforce the Terms and Conditions of Use of our Website.

  • To protect the rights, property, or safety of the Website, our visitors/users, and any third party with whom we interact in order to provide the services of the Website.

Transfer of Information

Our company respects your privacy and shares the information of its visitors/users only under certain circumstances.

We provide information to other companies, applications, or individuals in the following cases:

  • We may disclose aggregated information or information that does not directly identify you to a third party in order to develop the content of our Website and the services provided by it.

  • We may use other providers to provide services related to the Website, such as maintenance, details, advertising, marketing, etc. This third party will have access to the information only to perform the above tasks on our behalf.

  • We may disclose information about you to investigate, prevent, or take action regarding illegal activities, suspected fraud, circumstances involving potential threats to the physical safety or other rights and interests of individuals, in case of violation of the Terms of Use of the Website, or if required by law, as well as in other cases where we believe in good faith that disclosure of the information is necessary.

  • We may disclose information about you to respond to subpoenas, search warrants, litigation, court orders, legal proceedings, or other law enforcement measures by any competent authority, wherever located, as well as to secure and enforce our legal rights or defend against claims against us.

Apart from the above cases, we may use the information we collect for any other purposes that will be disclosed to you at the time of collection of the information or after your consent. By using our Website, you give your explicit consent to all of the above cases of disclosure of information.

Security of Your Personal Data

We take all appropriate technical and organizational measures to ensure and safeguard the preservation of all personal data, including security measures to prevent accidental loss of personal data, as well as any unauthorized use or access during the use of our Services.

We restrict access to your personal data only to those who have legitimate reasons and a real need to know. Accordingly, those who process your information do so only in an authorized manner and are subject to a duty of confidentiality.

We have also established all necessary and lawful procedures to deal with any data security breaches. Unfortunately, the transmission and flow of information over the Internet is not completely secure and, although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through the Website.

Updating Personal Data

If changes occur regarding your personal information/data, you may update them and add the changes by contacting us through the contact details below. If you wish to change your personal data, we will attempt to update it within thirty (30) days of providing any new or updated personal data, to ensure that the personal data we hold about you is as accurate and up to date as possible.

Retention of Personal Data

The data we collect from you and process to perform the action or service you requested from us is stored by our Company, in accordance with the provisions of the applicable legal framework, for up to twenty (20) years after the expiration of the insurance contract, and up to five (5) years in case the insurance contract is not concluded. They are lawfully processed by our company’s employees. By submitting your personal data you agree to their transfer, storage, or processing.

Retention Period of Your Personal Data

We retain all personal data for as long as we are obligated under applicable laws and regulations.

Your personal information will be deleted if you submit a written request for deletion of your personal information.

What Are Your Rights

Under the General Data Protection Regulation, already in force, as well as under any new applicable national or European legislation in force from now on, you have a number of important rights, free of charge.

You have the right of access, correction, modification, supplementation, updating, transfer, freezing, or even deletion of your personal data, after contacting us at dpo@contractbg.com.

Under applicable laws and regulations, you must submit an identity document with your request, and you will receive a response within thirty (30) days of receiving your request.

Your rights may be summarized as follows:

  • Access to your personal data and other additional information you voluntarily provided to us.

  • The right to request the deletion of your personal data, in cases where this is possible.

  • The right to request the receipt of your personal data, which you have already provided to us, in a structured, commonly used, and machine-readable format, and the right to transmit this data to a third party in certain cases.

  • The right to object at any time to the processing of personal data relating to you in cases of direct marketing.

  • The right to object to decisions made by automated means that result in legal consequences and implications for you or affect you.

  • The right to object in certain cases after the processing of your personal data, otherwise the right to restrict the processing of your personal data in certain cases.

  • The right to claim compensation for any damage caused by violation of data protection provisions.

If you wish to exercise any of the above rights, please contact us using our contact details described below.

Privacy and Security

We restrict access to your contact information only to employees or service providers whom we reasonably believe need to know this information in order to provide you with products or services or to perform their work. We have also adopted technical, physical, and administrative procedures appropriate to protect information concerning you from loss, misuse, and alteration of your personal data.

Minors Under 14 Years of Age

We do not knowingly collect personal information from minors under 14 years of age. If we find that we have collected any personal information from a minor under the age of 14 without verified parental consent, we will delete the information from our database as quickly as possible.

If you believe that we may have collected information from a minor under the age of 14, please contact us at dpo@contractbg.com.

IP Addresses and Cookies

We may collect information about your computer, including your IP address, operating system, and browser type, for system administration, customer support, and collection of comprehensive information for internal purposes.

In addition, we must inform you that our Website may use cookies. Cookies are small files of information that a website stores on your computer or mobile device when you visit it. In this way it remembers your actions and preferences for a certain period of time, so you do not need to enter this information every time you visit us.

Our cookies serve the following purposes:

  • To recognize and evaluate the number of our visitors, as well as to understand how visitors navigate our Website when they use it. This helps us improve the way our Website works.

  • To identify and verify the user across different pages of our Website, when necessary.

  • To restore stored user data.

  • The data we send related to cookies (user-ID, advertising-ID) are automatically deleted after 14 months.

How to Express Possible Complaints or Claims

The General Data Protection Regulation gives you the right to lodge a complaint with the Supervisory Authority, in this case in the EU (or EEA) Member State in which you work, permanently reside, or where the alleged infringement has occurred according to the data protection laws and regulations.

Supervisory Authority in Bulgaria

Commission for Personal Data Protection (CPDP)
Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Email: kzld@cpdp.bg
Website: www.cpdp.bg
For inquiries regarding complaints, reports, and questions: 02/91-53-519
For consultations on the application of Regulation (EU) 2016/679 and national data protection legislation: 02/91-53-555

Changes to the Data Protection Policy and Privacy Policy

We inform you that we reserve the right to change this Privacy Policy at any time, as we have the right to update it whenever we deem necessary, so that it reflects any changes in our practices as well as the services we offer. After any change to this Policy, a “last updated” date will be set.

In any case, if you continue to use our Services and the Website, it is considered that you have accepted our Privacy Policy.

Questions / Communication

If you have any questions regarding our Data Protection Policy and our Privacy Policy, please contact our Data Protection Department by email: dpo@contractbg.com.

Finally, we inform you of the details of the Data Protection Officer of our company:

Data Protection Officer:
Name: Mirto Hambaki
Address: Damyan Gruev 42, Krasno Selo, PC 1606, Sofia, Bulgaria
Contact email: dpo@contractbg.com

Last Revision Date: 08/11/2021