The controller of your personal data is the Real Estate and Insurance Office “A & Z GORTADT” Zbigniew Gortadt located in Mielec, Jagiellończyka 13/16, 39-300 Mielec, Poland, hereinafter referred to as BPiU.

BPiU can be contacted via e-mail at: zg@az.mielec.pl, by phone at +48 17 5853366 or in writing at the registered office address. A Data Protection Officer has not been appointed at BPiU.

Your personal data will be processed for the following purposes:

1. Concluding and performing an insurance contract, including the assessment of insurance risk – the legal basis is the necessity of processing data to conclude and perform the contract.

2. Automated assessment of insurance risk, including customer profiling before concluding the contract – the legal basis is the necessity of processing data to conclude and perform the contract.

3. Direct marketing of the administrator's own products and services, including analytical purposes and profiling – the legal basis is the legitimate interest of the administrator consisting in marketing its services.

4. Marketing purposes also after the termination of the insurance contract – the legal basis for processing is your consent.

5. Activities related to the prevention of insurance crimes – the legal basis is the legitimate interest of the administrator.

6. Handling complaints in accordance with financial market complaint regulations (Article 6(1)(c) GDPR).

7. Archival purposes (evidence) constituting the legitimate interest of the administrator (Article 6(1)(f) GDPR).

8. Establishing, pursuing or defending claims (Article 6(1)(f) GDPR).

Your personal data will be stored for a period of 10 years in order to document the subject of insurance, the insurance period and the insurance company with which the insurance contract was concluded. BPiU will stop processing data used for direct marketing purposes, including profiling and analytical purposes, if you object or withdraw your consent.

Your data may be transferred to entities processing personal data on behalf of BPiU, including IT service providers. Such entities process data only on the basis of an agreement with the controller and strictly according to its instructions. Data may also be made available to other entities when required by law.

In accordance with GDPR you have the right to:

a) access your personal data and obtain a copy;
b) rectify (correct) your data;
c) erase data or restrict processing;
d) object to data processing;
e) data portability;
f) lodge a complaint with the supervisory authority;
g) withdraw consent for data processing.

Providing personal data in connection with the insurance contract is voluntary, however it is necessary to conclude and perform the insurance contract and to assess the insurance risk. Failure to provide personal data makes it impossible to conclude the insurance contract.