Make sure you are healthy!

Data protection policy

NOTICE OF INFORMATION

Regarding personal data processing and the rights associated to this operation

 

SIGNAL IDUNA ASIGURARE REASIGURARE S.A.

Bucharest, 60 Calea Floreasca, 6th, 7th and 8th floor

Registration no.: 23545104

Trade Register no.: J40/5098/19.03.2008

SIGNAL IDUNA ASIGURARE REASIGURARE S.A., as personal data operator, collects and processes personal data in accordance with the provisions of Law no 677 from 21.11.2001, and starting with 25.05.2018 in accordance with the provisions of EU Regulation no 679 from 27.04.2016 concerning the protection of individuals with regard to personal data processing and the freedom of circulation for this data.

The purpose of this document is to inform you, specifically and free of any ambiguity, regarding the purposes of processing, the legal basis for processing, the duration of processing, the recipients of the collected personal data, the ways through which the individuals may exercise their rights as well as information regarding the secondary scope of processing, if the data will be processed for another purpose than the one for which they have been collected by affiliated operators.

During the data processing operation, SIGNAL IDUNA ASIGURARE REASIGURARE S.A., takes into account the legal regulations in force for this subject, respects and applies the principles underlying the protection of personal data and assures the confidentiality and security of data through adequate technical and organizational measures which are transposed into internal procedures, conduct rules and continuous trainings regarding awareness and the responsible demeanor of its employees.

PERSONAL DATA PROCESSING PRINCIPLES

Personal data will be:

It is important for you to pay attention to this notice of information so that you know all the aspects mentioned in its contents and inform the persons whose personal data are provided by you in such a manner that the information herein is properly transmitted. The present document is not a consent concerning subsequent data processing and it does not concern the legality of previous data processing.   

PURPOSES OF PERSONAL DATA COLLECTION

Your personal data and the personal data of the persons for which an insurance contract is agreed are collected for the purposes of providing insurance services, respectively: for the purpose of issuing the insurance proposal and the insurance contract (including for the renewal/extension of the contract); the purpose of administration and execution of the insurance contract (including co-insurance and reinsurance, claims handling – appraisal, acknowledgement, payment; satisfaction questionnaires; debt collection; regress actions; detecting and preventing potential fraud); statistical evaluation of the insurance portfolio in order to identify risks and to adapt the insurance activity to real market conditions, for actuarial calculations; the purpose of fulfillment of legal obligations (including the fight against money-laundering / financing terrorism, applying international sanctions, preventing and identifying fraud and other legitimate purposes, archiving); conducting direct mailing actions for bills corresponding to the concluded policy, as well as for information in your interest concerning the contractual relationship; the purpose of marketing, advertising and publicity (for your information concerning eligibility and granting of loyalty benefits, permanent improvement of the quality of services and products offered, product promotion).  

LEGAL BASIS

The collection and processing of personal data for the purposes mentioned above is based on:

SIGNAL IDUNA ASIGURARE REASIGURARE S.A. uses the personal identification number (CNP) as a way to unequivocally identify the client, in such a way that no substitution is possible, in order to limit errors while performing operations, to keep a speedy communication with you during usual verifications and also during communications with third parties.

Concerning data that regards your health status, your health history and other special data categories, they may be used and stored only with your consent or with the consent of the persons for which you apply for insurance.  SIGNAL IDUNA ASIGURARE REASIGURARE S.A uses this data in order to finalize and manage insurance contracts regarding health and life, especially given that during the performance of its insurance activities, the processing of the medical data of the insured persons is indispensable to the execution of the contracted insurance policies. In the event of the absence of such sensitive information this activity could not be performed.

COLLECTED PERSONAL DATA:

 

SIGNAL IDUNA ASIGURARE REASIGURARE S.A. collects the above mentioned information from its potential clients either directly or through the intermediary of third parties (agents, brokers).

The refusal to supply personal data to SIGNAL IDUNA ASIGURARE REASIGURARE S.A. leads to the impossibility of providing and concluding the insurance contract with you because this information is absolutely necessary to the analysis process and to the execution of the insurance contract.

Personal data processing duration

Personal data processing duration concerning insurance/reinsurance contracts is specific to each type of processing, taking into account the reasons mentioned above as well as fulfilling legal obligations in insurance or any other type of legal obligations (fiscal, archiving etc.).

In order to limit the processing of personal data, SIGNAL IDUNA ASIGURARE REASIGURARE S.A. will periodically review the necessity of data processing in order to limit as much as possible the scope of data which is submitted to processing.

Recipients of personal data

Personal data will be disclosed to our employees/proxies for the purposes of the performance of their activities related to the execution of the concluded insurance contract only for the management of concluded insurance contracts and for claims handling excepting the following situations:

Taking into account the type of processing, personal data may be also processed by:

The proxies mentioned previously are legal entities with their headquarters in Romania or in one of the EU member states or in states whose legislation provides a protection level which is at least equal to the one offered by the Romanian law.

If it is necessary for your personal data to be transferred and processed in a state outside of the European Union, SIGNAL IDUNA ASIGURARE REASIGURARE S.A. will make sure that personal data processing is performed according to the security requirements in force within the European Union, part of which is the respect of EU standards concerning personal data handling, insuring thus the fulfillment of the requirements put forth in the legislation concerning personal data protection.

For non-standard cases, SIGNAL IDUNA ASIGURARE REASIGURARE S.A. will request from the National Authority for the Supervision of the Processing of Personal Data the permission to send personal data to countries whose legislation does not provide for a protection level at least equal to the one offered by Romanian law.

The rights of the data subject and the ways of exercising them:

1. The right of access to the database and the right of information

1.1. The data subjects have the right to receive, on demand and free of charge, data referring to the data processing that concern them, made by SIGNAL IDUNA ASIGURARE REASIGURARE S.A, as well as the right to receive information regarding the purpose of the data processing, the categories of data being processed, the recipients of personal data, the period for which the data is stored and the rights that are available according to the legal provisions concerning this matter.

1.2. The request for information will be made in writing and sent either online or at the email address: dataprotection@signal-iduna.ro and it will contain the individual’s option for the receipt of the answer, either via hard copy or digital means.

1.3. The answer to these requests will be communicated within 30 days since the date of receipt of the request.

1.4. In the case in which the requests made by the data subject are manifestly unfounded or excessive, especially due to their repetitive manner, SIGNAL IDUNA ASIGURARE REASIGURARE S.A is entitled to either charge a reasonable fee taking into account the administrative expenses incurred for the sending of information or to refuse to process the request.

2. The right of intervention on data

2.1. The data subjects have the right, on demand and free of charge, to rectify, to update, to block or to erase data that is not processed according to the law, especially in the case of inexact data, of data that is no longer necessary for the fulfillment of the purposes for which it has been collected or when the individual in cause withdraws the consent on the basis of which the processing is performed.

2.2. In the case of inexact or incomplete information that regard the individual in cause, he/she may request and obtain the completion or rectification including through making available a supplementary statement.

2.3. In the case in which the individual in cause obtains the restriction of data processing, he/she will be informed by the operator prior to the lifting of the processing restriction.

2.4. The request will be made in writing and sent either online or at the email address: dataprotection@signal-iduna.ro and it will contain the data subject’s option for the receipt of the answer, either via hard copy or digital means.

2.5. The answer to these requests will be communicated within 30 days since the date of receipt of the request.

3. The right of opposition

3.1. The data subjects have the right to oppose at any moment, for well-founded and legitimate reasons concerning their particular situation, the fact that data is object to any type of processing. At the same time they have the right at any moment, free of charge and without providing a justification, to oppose the processing of their data for the purposes of direct marketing by SIGNAL IDUNA ASIGURARE REASIGURARE S.A. or by a third party to whom the personal data of the data subject have been communicated.

3.2. The request will be made in writing and sent either online or at the email address: dataprotection@signal-iduna.ro and it will contain the individual’s option for the receipt of the answer, either via hard copy or digital means.

3.3. The answer to these requests will be communicated within 30 days since the date of receipt of the request.

3.4. In case the data subject opposes to data processing, SIGNAL IDUNA ASIGURARE REASIGURARE S.A. will no longer process personal data, excepting the case in which it demonstrates that it has legitimate and imperious reasons that justify the data processing and that prevails over the interests, rights and freedoms of the data subject.

4. The right to data portability

4.1. The data subject have the right to receive the personal data that concern them and that they have provided to the operator and to send them to another operator, including the right to directly send them from one operator to the other, if this operation is feasible from a technical point of view.

5. The other rights guaranteed by the legal provisions concerning this matter are:

  • The right to not be submitted to an individual decision, based exclusively on automatic processing including the creation of profiles;
  • The right to appeal to the justice system for the defense of any rights guaranteed by the law;
  • The right to request the deletion of data if they are no longer necessary for the purpose and if there are no other legal requirements to execute a contract or any legitimate interest that may be invoked;
  • The right to be notified by SIGNAL IDUNA ASIGURARE REASIGURARE S.A. concerning security breaches that have or may have impact on the data of the individuals in cause.

Besides the situations mentioned above, the individuals in cause may also address a complaint against the way in which data is being processed directly to SIGNAL IDUNA ASIGURARE REASIGURARE S.A., in which they will state the matter, the reason for their dissatisfaction and/or the rights that they consider to have been infringed.

The request, made in writing, will be sent to the headquarters of SIGNAL IDUNA ASIGURARE REASIGURARE S.A. or via email, at the address: dataprotection@signal-iduna.ro, the individual in cause will receive an answer within 30 days since the date of receipt of the request.

Beside the aforementioned way of settling any eventual disputes, the data subjects have the possibility to submit (directly or via proxy) a complaint to the National Authority for the Supervision of the Processing of Personal Data (www.dataprotection.ro) but no earlier than 30 days since the submission of a complaint to the Insurers.

For any question regarding the way in which the data of the data subject is used or if any further information is necessary regarding any aspect that concerns data processing, the requests may be addressed to the data protection officer  via email at dataprotection@signal-iduna.ro, via mail at the address SIGNAL IDUNA ASIGURARE REASIGURARE S.A., 60 Calea Floreasca, 6th, 7th and 8th floor, Bucharest, Sector 1, or by lodging personally a signed notification at any of the branches of SIGNAL IDUNA ASIGURARE REASIGURARE S.A. countrywide.