Who are we
We, ARA Broker Ltd. Insurance Broker, process your personal data in compliance with all requirements for confidentiality, security and protection, taking the necessary measures to prevent unauthorized access, loss or use of your data. It is important for us to ensure that your data is collected and processed in full compliance with the requirements of the Bulgarian and European legislation.
What personal information we store and process
Three names
Personal data required for personal identification.
Unique alien civilian / personal number
Personal data required for personal identification.
Phone number
Data for communication with you.
Data for communication with you.
Permanent and / or current address, correspondence address
The data we need to issue an insurance quote and insurance contract. The address can also be used for sending consignments, the same being provided to courier companies.
Bank account details
Details of the subject matter of the insurance contract
Profession, position, place of employment, citizenship, financial information, gender, age, documents proving ownership of real estate and movable property, work experience, professional experience and others.
Tax and financial information
Health data
Information on your health and information relating to your physical or mental health, as well as medical records provided for the purpose of insurance and claim.
For what purposes we process your personal data and what is the reason for their submission and processing
We process the personal data you provide for the purposes of administering the insurance brokerage process to respond in certain cases to your request, application or other request to us, to assist you in the use of services under the insurance contract or when making insurance claims, to protect the Broker’s legal interest in the event of a dispute, to fulfill our legal requirements, including the avoidance of conflicts of interest, corruption and practices and obligations under the Measures against Money Laundering, as well as marketing communications and direct marketing purposes and statistical processing of data based on your explicit consent.
We process your personal information above, either individually or in combination.
We process your personal data in compliance with the regulatory requirements of the Personal Data Protection Act, Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation or the CPD) and all Bulgarian and European legislation in force in this field.
We process your personal information on the basis of the Broker’s legitimate interest in fulfilling his obligations as an insurance intermediary, in fulfilling regulatory obligations, or in the legitimate interests of a third party.
We process your personal data and based on your consent.
The periods for which we store your personal data are the statutory time limits in the Insurance Code (having regard to the statutory limitation periods for different types of insurance), the Accountancy Act, the Tax and Social Insurance Procedure Code.
Who we can share your personal information with
We protect the privacy of your personal information. We do not disclose your information to third parties until we are sure that they have taken the necessary technical and organizational measures to protect that data and at the necessary level to ensure their security.
For the reasons mentioned above for data processing, we share your personal data with our contractual partners – insurance companies.
Subject to legal requirements, we may disclose your personal information to the following categories of recipients – state and municipal institutions, in fulfillment of our legal obligations, service providers related to the mediation activities in concluding an insurance contract and settling an insurance claim, technical support of internal information systems and operational support of our business, auditors.
Such disclosure shall be made only on reasonable grounds and on the basis of a written agreement by the recipients to provide an adequate level of protection.
What are your rights regarding personal data
In compliance with the Bulgarian legislation, you have the following rights with respect to your personal data processed by us:
Right of access – You have the right to ask us to access and receive a copy of your personal data.
Right to Withdraw Your Consent – You have the right, in the event that your data are processed based on your consent, to withdraw your consent at any time, without such withdrawal affecting the lawfulness of processing based on your consent before it is withdrawn.
Right of correction and right of erasure – You have the right, at any time, to incomplete or inaccurate data that we process, to correct it. Also, if the purpose for which the data was collected is achieved, or you have withdrawn your consent when the processing is consent-based and there is no other legal basis for the processing, or your personal data have been illegally processed, request their deletion.
Right of Objection – You have the right, at legal basis, to object to the processing of your personal data at any time.
Right to Restrict Processing – You have the right, in the cases provided for by law, to require the processing of your personal data to be restricted, e.g. but not only if you dispute the accuracy of the data for a period that allows us to verify their accuracy, or if the processing of the data is improper, but you do not want them to be deleted, etc.
Data Transfer Right – You have the right to request us to provide the personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to complain – You have the right, when there are appropriate prerequisites for doing so, if you have reason to believe that there has been any violation on our part to contact us. However, in any case, you have the right to file a complaint with the Data Protection Commission.