http___www.uredba.com_sluzbenik-za-zastitu-osobnih-podataka-dpo_1.xml
1.1 2.1 3.1 4.1 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 29.2 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 40.2 40.3 41.1 42.1 43.1
Privacy Policy Information on the processing of personal data We refer to articles 13 and 14 of regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as “the Regulation”) In relation to the processing of personal data of the persons concerned, the processor hereby provides the relevant information pursuant to articles 13 and 14 of the Regulation. Controller: Colonnade Insurance S.A., registered seat Rue Jean Piret 1, L-2350 Luxembourg, The Grand Duchy of Luxembourg, company ID No. B 61605, acting through Colonnade Insurance S.A., pobočka poist'ovne z iného členského štátu (Slovak branch), with its registered office Moldavská cesta 8 B, 042 80 Košice – mestská čast' Juh, the Slovak Republic, ID: 500 13 602, VAT ID: SK 4120026471, incorporated under the Trade Register of the District Court of Košice I, Section: Po, File No.: 591/V Controller Contact Details: Postal address: Colonnade Insurance S.A. Rue Jean Piret 1, L-2350 Luxembourg, Luxembourg or Colonnade Insurance S.A., pobočka poist'ovne z iného členského štátu Moldavská cesta 8 B, 042 80 Košice, the Slovak Republic phone contact: + 421 55 6826 222 email contact: info@colonnade.sk Data Protection Officer Contact Details: Postal address: Colonnade Insurance S.A., pobočka poist'ovne z iného členského štátu Moldavská cesta 8 B, 042 80 Košice, the Slovak Republic phone contact: + 421 55 6826 222 email contact: dpo@colonnade.sk Purposes and legal bases of processing: the controller processes the personal data of the data subject – clients and client representatives for the following purposes: - identification of clients and their representatives and preservation of the possibility of future control of this identification, for the purpose of the conclusion of insurance contracts and management of insurance; handling of claims or loss events; the protection and seeking of the rights of the controller; documenting the controller’s activity; supervision of the controller and its activities; to fulfil the obligations and tasks of the controller under the Insurance Act or special regulations; the management of reinsurance contracts between the controller and the reinsurance undertaking, a reinsurance undertaking from another Member State or a foreign reinsurance undertaking; handling of claims from reinsurance contracts and for the purpose of checking indemnities from the insurance contracts for which the reinsurance undertaking, the subsidiary of the reinsurance undertaking from another Member State and the branch of the foreign reinsurance undertaking provides reinsurance – the controller shall, for that purpose, determine, obtain, record, store, use and otherwise process personal data, copy the identity documents, process the birth numbers and other data and documents on the legal basis of compliance with the legal obligation under § 78 of the Insurance Act, - fulfilment of obligations in respect of international sanctions – on the legal basis of compliance with the legal obligation under the law on the implementation of international sanctions, - verification of the identification of a natural person and its occurrence on sanctions lists – on the legal basis of the legitimate interest. The legitimate interest of the controller or its owners for the purpose of verifying the identification of a natural person and its occurrence on sanction lists is the fulfilment of the obligations arising from the laws governing the controller, its owners, or their statutory bodies Categories of personal data concerned: personal data necessary for the identification of a natural person, contact details, personal data to demonstrate the ability to fulfil the obligations of the insurance policy, the provision of such obligations, the rights of representation and other data according to § 78 of the Insurance Act. Categories of recipients of personal data: financial agents, financial advisers, financial intermediaries from another Member State in the insurance or reinsurance sector, experts, physicians preparing opinions and expert opinions, providers of assistance services, reinsurers, companies providing out-of-court debt recovery services, companies providing postal and related services, companies providing services for the administration and storage of documents and data, their shredding and disposal, backup and Data recovery, law enforcement authorities, judicial authorities, National Bank of Slovakia, persons operating a register of selected information on claims or damage incidents, IT service providers. Transfer of personal data to the USA: the processor transfers personal data to the United States of America. The transfer is carried out on the basis of a decision by the European Commission on the adequacy of such transfer of personal data and on the basis of the international Privacy Shield agreement. Retention period of personal data: personal data shall be processed for a period within the meaning of § 78 (9 ) of the Insurance Act. Where a specific regulation provides for a longer period of retention in a particular case, personal data shall be kept during that longer period. Profiling: The processor performs the profiling of the data subjects for the purpose of concluding the insurance contract and calculating the amount of premiums. Rights of the data subject: - The right of access to personal data relating to it; - The right to rectify the incorrect personal data relating to it; - The right of erasure of personal data relating to it; - The right to restrict the processing of personal data; - The right to object to the processing of personal data relating to it; - The right to the portability of personal data; - The right to revoke his consent to the processing of personal data at any time; - The right to lodge a complaint with the supervisory authority. The rights referred to above shall be subject to the data subject, in accordance with Articles 15 to 21 and Article 77 of the Regulation. The data subject may exercise her or his rights verbally, in writing or electronically, through the above mentioned contact details. If the data subject requests the verbal provision of information, the information shall be provided upon proof of her/his identity. Failure to provide the necessary personal data by the data subject may result in non-conclusion of the insurance contract in question, non-payment of insurance claims. Information on the source of personal data: personal data relating to the data subject have been obtained from the following sources: client, client representative, financial agent, financial advisor, financial intermediary from another Member State in the insurance or reinsurance sector, reinsured, Commercial register, law enforcement authorities, judicial authorities. Information on the processing of personal data (pdf)
1.1 2.1 2.2 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 11.2 11.3
Službenik za zaštitu osobnih podataka Službenik za zaštitu osobnih podataka (DPO - Data Protection Officer) mora imati holistički pogled na ukupno poslovanje i biti neovisan od voditelja obrade. Glavni zadatak mu je da potpuno neovisno omogući primjenu odredbi Uredbe u organizaciji/društvu/tijelu javne vlasti. Službenik za zaštitu osobnih podataka mora imati znanje eksperta i praktično iskustvo vezano uz zaštitu osobnih podataka te mora dobro razumjeti Uredbu za zaštitu osobnih podataka. Službenik za zaštitu osobnih podataka ima obvezu: - informirati i savjetovati voditelja obrade/izvršitelja obrade o njihovoj obvezi sukladno novoj Uredbi kao i ostalim odredbama odnosnima na zaštitu osobnih podataka u EU ili državi članici; - nadzirati da postupanje sa osobnim podacima bude u skladu s Uredbom; - dizati razinu svijesti o značaju zaštite osobnih podataka i podučavati osoblje koje je uključeno u obradu osobnih podataka; - pružati savjete vezano uz procjenu rizika na zaštitu osobnih podataka; - nadzirati implementaciju politike upravljanja i upravljanje zbirkama osobnih podataka, - surađivati sa nadzornim tijelom za zaštitu osobnih podataka (Agencijom za zaštitu osobnih podataka). Općom uredbom o zaštiti podataka (GDPR) određeni voditelji obrade i izvršitelji obrade dužni su imenovati službenika za zaštitu podataka. To vrijedi za sva tijela javne vlasti i javna tijela (bez obzira na to koje podatke obrađuju) i za ostale organizacije čija je osnovna djelatnost sustavno i opsežno praćenje pojedinaca ili koje obrađuju posebne kategorije osobnih podataka u velikoj mjeri. Čak i kad se Općom uredbom o zaštiti podataka izričito ne zahtijeva imenovanje službenika za zaštitu podataka, za organizacije može biti korisno dobrovoljno imenovanje službenika za zaštitu podataka.