Privacy Policy. Information Clause
In accordance with the provisions of:
PIB GROUP IBERIA CORREDURÍA DE SEGUROS Y REASEGUROS, S.A.U. (hereinafter “PIB Group Iberia” o “the Company This privacy policy has been drawn up with the intention of informing you that your personal data will be processed within the meaning of, among others, Article 4.2 of the aforementioned GDPR. Data processing is understood as any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making accessible, matching or interconnection, restriction, erasure or destruction.
Furthermore, the Company will update the privacy policy on this website in line with legal and jurisprudential developments in this area.
Data Controller and contact details
The controller of your data is PIB GROUP IBERIA CORREDURÍA DE SEGUROS Y REASEGUROS, S.A.U., with tax identification number A58564816 and registered office at C/ Aribau nº 200, 3ª Pl, 08036 Barcelona; a company which forms part of the company PIB Group Limited, registered in England and Wales, No. 09900466, with its registered office at Rossington’s Business Park, West Carr Road, Retford, Nottinghamshire, DN22 7SW.
In order to preserve the privacy of your personal data and guarantee its appropriate processing, the Company has appointed a Data Protection Officer, whose responsibility is to supervise the implementation of personal data protection policies. Therefore, you can contact the controller's Customer Service Department by calling the toll-free number 933.065.353 or via the following email address: [email protected] whenever your query relates to privacy in the processing of your personal data.
Purposes and legal bases for the processing of personal data
In accordance with the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, the GDPR (EU 679/2016), and RDL 3/2020, we inform you that your personal data will be processed by PIB Group Iberia in its capacity as Data Controller.
PURPOSES OF TREATMENT | LEGITIMISING BASES FOR PROCESSING |
Full performance of the insurance contract and the insurance intermediary contract, maintenance of the relationship established between PIB Group Iberia and you, advice and information on the conditions of insurance contracts and financial products, and assistance in the event of a claim. | The execution of the contract to which you are a party. |
Recording your voice when necessary for: 1. The correct execution of the contract, 2. Maintain the quality of service. 3. Fraud prevention, investigation, and detection. | The legal bases for the described purposes are: 1. The execution of the contract to which you are a party, 2. The legitimate interest of the Data Controller in maintaining and guaranteeing the quality of the service. 3. Compliance with the Mediation Firm's legal obligations, in accordance with current and applicable regulations at all times. |
Prevention, investigation and discovery of fraud and the obtaining and communication of information to the competent regulatory authorities in legally established cases. | Compliance with the Brokerage's legal obligations, in accordance with current and applicable regulations at all times. |
Envío de comunicaciones comerciales por cualquier vía, incluidas las comunicaciones electrónicas o equivalente, sobre productos de seguros y/o financieros intermediados por PIB Group Iberia, incluso durante los doce (12) meses posteriores a la cesación de la relación contractual con la Compañía. | The Data Controller's legitimate interest in promoting the hiring of products similar to those that may be contracted at the time. We remind you of your right to object to this data processing. |
Profiling of interested parties' personal data for the sending of personalised commercial communications based on the interested party's characteristics, preferences, needs and trends. | The express consent of the data subject. |
Sending customer satisfaction surveys about services offered by the brokerage. | The Brokerage's legitimate interest in knowing customer satisfaction regarding the services provided by it, and with the aim of improving it. |
Dispatch of commercial communications, by any means, by any of the PIB Group Iberia companies. | The express consent of the data subject. |
Communication of the data subject's personal data to companies that are part of PIB Group Iberia, for internal administrative purposes, including the processing of personal data of customers and employees. | The Data Controller's legitimate interest for internal administrative purposes. We remind you of your right to object to this data processing. |
Comunicación de los datos personales del interesado a proveedores de servicios de PIB Group Iberia, incluyendo el tratamiento de datos personales de clientes y empleados. | Consentimiento expreso del interesado. |
Communication of your data to collaborating companies of PIB Group Iberia (such as insurance entities), should you, as a client of the Data Controller, contract any of the products and/or services marketed by PIB Group Iberia. | The correct execution of the contract. |
Failure to provide the required information means that the contract cannot be subscribed to or fulfilled. If you provide us with personal data of third parties, you must ensure, prior to communicating it to the Brokerage, that you have complied with the data protection obligations in force at all times.
We have obtained your personal data (or that of the policyholder), and the categories of data they belong to are: identification and contact details; voice data, banking details; health data (if necessary); and any data that is necessary for assessing the insurable risk, as well as for achieving the aforementioned purposes.
Transfer of personal data.
In accordance with Article 99.1 of Law 20/2015 on the Organisation, Supervision and Solvency of Insurance and Reinsurance Entities, PIB Group Iberia may transfer your personal data to the insurer selected by you for the purpose of guaranteeing the full development of the insurance contract and compliance with legal obligations. Your data may also be transferred to entities, bodies or persons legitimately authorised for the settlement and processing of claims; to entities involved in the coverage of your policy (legal and health services); and to courts, tribunals or public administrations if required.
Asimismo, la Compañía podrá comunicar sus datos personales a:
1.- Empresas que formen parte de PIB Group Iberia, con fines administrativos internos, incluyendo el tratamiento de datos personales de clientes y empleados, con la finalidad de gestionar internamente el servicio prestado y el mantenimiento de la relación contractual. Esta cesión se encuentra amparada en el interés legítimo (en virtud de lo recogido en el considerando 48 del RGPD, por lo que no será necesario recabar su consentimiento expreso para esta operación.
2.- Empresas que sean proveedores de servicios de PIB Group Iberia, incluyendo el tratamiento de datos personales de clientes y empleados con la finalidad de gestionar el ofrecimiento de servicios de terceros. Esta cesión se encuentra amparada en el consentimiento expreso.
Le recordamos su posibilidad de oponerse a estos tratamientos de datos.
International data transfers
PIB Group Iberia, as part of the PIB Group Limited group of companies, is an organisation that operates in different countries and may transfer certain personal information about you internationally solely for the purpose of fulfilling the signed contract. In particular, PIB Group Iberia may carry out such transfers to administer and manage the services provided to you and to improve the efficiency of business operations. The Company will take appropriate measures to ensure that transfers comply with all applicable data protection regulations.
In the case of transfers of personal data to countries outside the European Economic Area for the purposes of processing, such transfers will preferably be made both to countries that the European Commission considers to offer adequate data protection safeguards («transfers based on an adequacy decision»). In particular, your data may be transferred to the USA and the UK, territories where the funds controlling PIB Group Limited and the Lexis Nexis platform, which we use to verify data for fraud prevention and money laundering prevention purposes, are based. In this regard, please note that both territories have an adequacy decision from the European Commission. In other instances, where your data is transferred to territories without an adequacy decision or to entities not adhering to the EU-US Data Privacy Framework, we will adopt appropriate safeguards («transfers based on the provision of adequate safeguards»), in particular by entering into standard contractual clauses, in accordance with art. 46 of the General Data Protection Regulation («GDPR»).
In cases where there is no adequacy decision or no adequate safeguards are provided, in accordance with Art. 49 of the GDPR, we may transfer your personal data to a third country or international organisation where: (i) we have your explicit consent to the proposed transfer; (ii) the transfer is necessary for the performance of the contract we have in force with you or for the performance of pre-contractual measures you have requested from us; (iii) the transfer is necessary for the conclusion or performance of a contract between PIB Group Iberia and another natural or legal person, in your interest; (iv) it is necessary for the performance of a contract between PIB Group Iberia and another natural or legal person, in your interest; or (v) it is necessary for the performance of a contract between PIB Group Iberia and another natural or legal person, in your interest, (iii) the transfer is necessary for the conclusion or performance of a contract between PIB Group Iberia and another natural or legal person, in your interest; (iv) the transfer is necessary for important reasons of public interest or for the protection of your vital interests, or those of other persons, provided that you are physically or legally incapable of exercising your rights in relation to your personal data; (v) the transfer is necessary for the protection of your vital interests, or those of other persons, provided that you are physically or legally incapable of exercising your rights in relation to your personal data; or (vi) the transfer is necessary for the protection of your vital interests. (v) the transfer is necessary for the establishment, exercise or defence of claims; (vi) we are faced with situations where the transfer is made from a public register which, under Union or Member State law, is intended to provide information to the public and is open to inspection by the general public or by any person who can demonstrate a legitimate interest, provided that the conditions set out in Union or Member State law for inspection are met.
If you wish to obtain more information about the processing of your personal data, you can contact us via the email address provided. [email protected]
Conservation, cancellation and suppression of personal data
We inform you that the personal data you provide us will be retained for as long as the stated purpose subsists and until the expiry of the statute of limitations for actions that may arise from the fulfilment of the insurance contract, once it has expired for any reason and/or when open claims are closed, and will be blocked when they are no longer relevant for the fulfilment of said purpose. We remind you that you have the right to obtain confirmation as to whether we process your personal data.
When the erasure results from the exercise of the right to object under Article 21.2 of the GDPR, the Controller may retain the data subject’s identifying data for the purpose of preventing future processing for direct marketing purposes.
Due diligence in personal data management
The Company complies with legal personal data protection security measures, having adopted all reasonably exigible measures according to current technical knowledge to prevent the loss, misuse, alteration, illegitimate intrusion, and theft of the personal data provided. In any case, you should be aware that the internet is not a completely secure and/or impregnable medium.
Rights you can exercise relating to the processing of your personal data
You have the right to withdraw your consent at any time, provided that the processing is not necessary for the performance of the insurance contract. However, the withdrawal of such consent does not affect the lawfulness of the processing based on prior contractual consent.
You may exercise the following data protection rights:
Accessthe right to contact the data controller to find out if their personal data is being processed and to obtain information about it.
RectificationThe rectification of your personal data that is inaccurate or incomplete is to be obtained.
Of suppression or “to oblivion”Interested parties may request that the Company delete their personal data when: (i) the personal data is no longer necessary in relation to the purposes for which it was originally collected, (ii) when you withdraw your consent (if data processing is based on consent), (iii) you have successfully exercised your right to object, (iv) when your personal data has been unlawfully processed, and (v) when the Company has to comply with a legal obligation.
Limitation You may request the restriction of the processing of your personal data by the controller when the following conditions are met: (i) when you contest the accuracy of your personal data, within a period that allows the controller to verify it, (ii) when you have objected to the processing that the controller carries out on your personal data based on legitimate or public interest, while the alleged grounds are being verified. (iv) When the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims.
Right to portability: Derecho a recibir información sobre el tratamiento automatizado que se realiza de tus datos personales, en un formato estructurado, de uso común, de lectura mecánica e interoperable, pudiendo transmitirlos a otro responsable del tratamiento, siempre que el tratamiento se legitime en base al consentimiento o en el marco de la ejecución de un contrato.
This right shall not apply where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Dichos derechos, así como la presentación de reclamaciones, se podrán ejercer a través de la siguiente dirección de correo electrónico, [email protected], o en C/ Aribau, 200, 3º, 08036 Barcelona, debiendo identificarse indicando su nombre y apellidos completos así como número de DNI (o documento de identificación personal válido), así como cualquier otro dato personal que lo identifique inequívocamente como cliente de PIB Group Iberia, tales como dirección de correo electrónico, dirección postal, etc., junto a la solicitud del derecho de que se trate.
Asimismo, informarle que la Compañía, antes de ofrecerle información o facilitarle el ejercicio de sus derechos, puede realizar diferentes tareas a efectos de verificar su identidad u otros detalles necesarios para poder responder adecuadamente a su solicitud. Nos pondremos en contacto con usted en un periodo máximo de 30 días a partir de la fecha de su solicitud.
Ultimately, and in the event of disagreement with the exercise of your rights, you may request information and/or lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), located at Calle Jorge Juan, no. 6, 28001 Madrid.”
By using this website, you accept that we may place cookies on your device, as described in the “Cookie Policy” section.
