Information on the Processing of Personal Data

PURPOSE AND LEGAL BASIS OF COLLECTION AND PROCESSING OF PERSONAL DATA

The insurer collects and processes personal data for the purpose of concluding and fulfillment of rights and obligations from the insurance contract.

Collection and processing of personal data is necessary for the conclusion and execution of an insurance contract concluded with the data subject relate or to take action at the request of the data subject relations, before concluding the insurance contract.

The collection and processing of personal data is essential for compliance purposes legal obligations of the Insurer.

Concluding an insurance contract involves processing your data as the Insurer would consider your offer and assess whether the risk is that assumes eligible for insurance and under what conditions, for the purpose of determining the amount of insurance premium, sum insured and all elements of insurance, taking into account all relevant circumstances.

Fulfilling an insurance contract requires the processing of your data in order the rights and obligations of the contracting parties arising from that have been realized contract, which includes:

• assessment of whether the insurance contract can be changed and under what conditions
• resolving the claim for damages, which includes the assessment and liquidation of the damage
• deciding on the existence of the right to the payment of the insured amount
• administration of insurance contracts
• exercising our rights under the insurance contract which includes collection of insurance premiums and recourse claims
• ensuring the accuracy and timeliness of your data

Fulfillment of our legal obligations

We will process your data in order to comply with our legal requirements obligations which include:

• risk allocation through reinsurance or co-insurance to protect the interests of our clients and fulfill our obligations
• complaint resolution and out-of-court dispute resolution
• obligations prescribed by tax regulations, such as the Law on accounting
• fulfillment of obligations prescribed for the purpose of exercising authority supervisory bodies of the Republic of Serbia (Ministry of the Interior, competent state prosecutor's office, tax administration, etc.) and affairs from competencies of insurance regulators (National Bank of Serbia)
• Statutory audit obligations

Processing of your data based on the legitimate interest of the Insurer subject to special rules that allow you to in each you immediately file an objection to such processing and creation of the profile that is on based on it. In that case, we will no longer process your data on basis of legitimate interest unless we prove that there are legitimate reasons for processing that outweigh your interests, rights and freedoms. If they exist special rules regarding your right to object, we will take them separately to state. Based on a legitimate interest, the Insurer will process yours data for the purpose of:

• prevention and detection of insurance fraud as well as fraud and embezzlement in general
• in case of objections to the processing of data for this purpose we consider that legitimate reasons for protecting the interests of the Insurer, our clients and legal order outweighs your interests, rights and freedoms
• setting, exercising or defending legal claims independently yes whether they are in judicial or administrative proceedings or any extrajudicial procedure
• in case of objections to the processing of data for this purpose we consider that legitimate reasons for protecting the interests of the Insurer and our clients go beyond your interests, rights and freedoms.
• Legitimate interest of third parties

Your data may also be processed for the purpose of preventing fraud insurance as well as fraud and embezzlement in general, and on the basis of legitimate interests of other insurance companies with which we exchange for that purpose data

Your consent to processing (consent)

Submission of personal data based on your consent to processing in purposes of informing about informative-promotional activities related to by the work of the Insurer as well as to examine your satisfaction with the work of the Insurer is not a contractual obligation and a condition necessary for the conclusion or fulfillment of the contract. If you refuse to provide certain information for these purposes this will not affect the process of concluding or fulfilling the contract. Your consent you can withdraw at any time, and withdrawal of consent is not affected the lawfulness of the processing based on your consent to it moment.

Processing of personal data based on the legal basis of the undertaking actions at your request before concluding an insurance contract, fulfillment insurance contracts, fulfillment of our legal obligations, legitimate fraud prevention and detection interests (including legitimate interest third parties) represent a legal and contractual obligation necessary for concluding or fulfilling a contract. If you refuse to give individual data The insurer will not be able to fulfill its legal or contractual obligations that will result in the impossibility of conclusion or fulfillment obligations under the insurance contract.

TYPES OF PERSONAL DATA THAT WE PROCESS AND THE WAY COLLECTIONS

The personal data we collect depends on the purpose of processing and the type of contract about the insurance you take out or intend to take out, or in connection with request for exercising insurance rights.

Primarily these are data without which we cannot conclude or fulfill insurance contract, and include:

• basic personal data (name and surname, address of residence, contact details, JMBG, date of birth, gender, identification document when prescribed)
• data on the subject of insurance (identification numbers, properties, locations, etc.)
• data on the harmful event (circumstances of occurrence of the insured case as a result of an event caused by the insured risk)
• data required to carry out actions in accordance with our legal obligations (party analysis, accounting, tax reporting, accounts with commercial banks, etc.)

We collect personal data with defined functionalities of ours information system, in the manner described by the processes of the Insurer as well as using business documentation (forms, requests, etc.).

Depending on the purpose of processing and the type of insurance contract collection can implement:

• by your declaration
• by inspecting your identification documents or your documentation as well as documents or documentation of the subject insurance
• by taking a copy of your identification documents or yours documentation as well as documents or case documentation insurance when so prescribed by law or our internal rules.

We primarily collect personal information directly from you, via submitting a bid for concluding an insurance contract, based on the very conclusion of the contract, via forms, by phone or electronically communication.

For the purposes prescribed by law, we may also obtain information about you from authorized persons such as insurance agents, intermediaries in insurance, state bodies, other insurance companies and associations, appraisers, lawyers or financial institutions.

TO WHOM YOUR PERSONAL DATA WILL BE DISCLOSED

The Company, as the Personal Data Handler, makes special efforts to ensure that your personal data is collected and processed in the way that it is in accordance with the aforementioned purposes.

Employees of the Company process personal data exclusively for the purposes they are listed in this document, based on the law and in accordance with procedures that ensure an adequate level of security and privacy data.

When it is necessary to achieve that purpose, they can have personal data access to a certain category of third parties authorized to process for the above purposes. Depending on the type of processing, they can be data processors or joint controllers.

Third parties belong to the so-called insurance chain. These are people who are different basically provide services arising from insurance contracts (e.g. insurance intermediaries, insurance agents, banks, co - insurers and reinsurers, lawyers and court experts, technical and professional consultants, Serbian Association of Insurers, leasing companies, car services and everything else external companies that provide IT services as external associates, audit services and financial statement certification services, as well as companies specializing in service quality testing.)

Also, the competent state bodies in accordance with legal obligations Companies can be third parties, ie the National Bank of Serbia, the Ministry RS, Tax Administration, judicial and other state bodies or audit firms.

EXPRESSION OF PERSONAL DATA OUTSIDE THE BORDERS OF THE REPUBLIC OF SERBIA

We process your data in the Republic of Serbia. In case of eventual the need to transfer personal data outside national borders, such a transfer will take place only if permitted by law or if that country meets the appropriate level of data protection or if any appropriate protection measures in accordance with the Law (eg binding business rules, standard contractual clauses).

PERIOD OF STORAGE OF PERSONAL DATA

The insurer ensures that the data is stored in a form that allows Your identification within the deadlines set for the purpose of processing, legal regulations that define the time period of data storage, an applicable regulation that defines the statute of limitations for claims as and internal acts prescribing deadlines for keeping data for the purpose protection of the rights and interests of interested parties from the insurance contract or the rights and interests of the Insurer, and taking into account the application of appropriate technical and organizational measures to protect your rights and freedoms.

WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA

In the prescribed cases, in relation to your data, you can achieve the following rights:

• the right to information whether the Insurer processes your data, access to data if processed and processing information
• right to delete data (if applicable)
• the right to correct and supplement data
• the right to limit processing if, e.g. you dispute the accuracy of the data or the legal basis for processing until the data have been corrected or legal established basis of processing
• the right to object in the case of the processing we carry out on the basis of our legitimate interests and the legitimate interests of third parties or for a purpose public interest
• right to data portability (if applicable)
• the right to withdraw consent or consent to the processing of your personal data in cases where such data are collected and processed solely on the basis of your consent or consent.

You can exercise your rights by sending a request in writing to e-mail: zastitapodataka@globos.co.rs or at the address: Milutina Milankovića 23, 11 070 New Belgrade or by submitting a request in any branches of the Insurer.

AUTOMATED DATA PROCESSING AND PROFILING

The Company does not perform automated data processing, ie not in the Company there is automated decision making, and accordingly, decision-making does not include the development of profiles from Article 38 of the Law on Protection personal data.

In the event of an insured event in the type of insurance where it is necessary, the Company collects information on the cause and circumstances of its occurrence insured case on the basis of medical documentation and documentation of the competent state bodies in which the same was stated. This data is used to assess the circumstances under which it arose the insured event and what was the health condition of the insured at the time occurrence of the insured event, and thus the validity of the request for payment of insurance compensation, all in accordance with the contractual provisions.

DATA SECURITY

The insurer in an appropriate manner, in accordance with the domestic positive regulations, internationally recognized standards and internal acts protection of personal data from destruction, loss, unauthorized changes or access. The insurer undertakes all necessary technical, personnel and organizational data protection measures, in accordance with the established standards and procedures, which are necessary to protect data from loss, destruction, unauthorized access, alteration, disclosure and any other form of illegal processing.

Filing a complaint to the Commissioner for Information of Public Importance i protection of personal data

If you believe that there has been a breach of your personal data or a breach You have your rights regarding the data that the Company collects and processes the right to contact the competent authority and the right to submit a complaint about the Company's actions or omissions to the Information Commissioner of public importance and personal data protection, with the address Bulevar kralja Aleksandra 15, 11120 Belgrade, email: office@poverenik.rs, phone: +381 11 3408 900, fax: +381 11 3343 379.

UPDATING INFORMATION

Information on the processing of personal data is regularly reviewed by the operator checks that they reflect the way in which the Insurer processes data on personalities. The current version is always available on the Insurer's website www.globos.rs