Information on the processing of personal data
MAXIMA pojišt'ovna, a.s., Italská 1583/24, 120 00 Praha 2 - Vinohrady, Czech Republic, ID No.: 61328464, registered in the Commercial Register of the Municipal Court of Prague, Insert No.: B 3314, as the controller (hereinafter referred to as the "Controller" or "MAXIMA"), hereby informs you about the manner and scope of processing of your personal data and at the same time informs you about the rights you have as a data subject in connection with the processing of your personal data by MAXIMA.
You may contact the Data Controller with your suggestions, exercised rights and other requests by email to dpo@Maxima-as.cz or by post to Italská 1583/24, 120 00 Praha 2 - Vinohrady, Czech Republic.
1. Scope of processing of personal data
MAXIMA processes your personal data in accordance with applicable and effective legislation, an overview of which can be found on this page.
The data subjects whose personal data are processed by MAXIMA may include, in particular, clients, potential clients (in particular policyholders and insureds, visitors to MAXIMA's websites and users of other MAXIMA communication and business channels) and their representatives, other parties to the insurance relationship, MAXIMA employees, authorised third parties and, where applicable, other persons.
Personal data is processed to the extent that you, as the data subject, have provided it to MAXIMA in connection with entering into a contractual or other legal relationship with MAXIMA or that MAXIMA has otherwise obtained and processes it in accordance with applicable and effective law or to fulfil its legal obligations. MAXIMA obtains personal data directly from data subjects, third parties and public databases.
2. Categories of personal data processed
The personal data MAXIMA processes about you include basic and extended identification data of the data subject used to uniquely and unmistakably identify the data subject, information about the banking connection, personal data and identification data necessary for the arrangement and performance of insurance products, correspondence and other communications with the data subject, special categories of personal data (in particular information about health), personal data of third parties necessary for the performance of MAXIMA's obligations towards the data subject and such third parties, personal data of MAXIMA's employees.
Basic identification data of data subjects used to uniquely and unmistakably identify data subjects: first name, surname, birth number and/or date of birth, gender, permanent home address and/or other address of the natural person (correspondence address, address for delivery abroad, etc.), postal code, telephone number and/or telephone numbers (mobile phone, fax, landline, etc.), e-mail.
3. Purposes and legal bases for processing personal data
MAXIMA processes your personal data only for the stated purpose, to the extent and for the period necessary to fulfil that stated purpose.
The purpose of the processing of your personal data is the performance of MAXIMA's legal obligations, the performance of a contract and pre-contractual measures between MAXIMA and the data subject, and the protection of the rights and legitimate interests of MAXIMA or third parties.
4. Recipients of personal data
Your personal data is processed directly by MAXIMA or by processors in the Slovak Republic and abroad who provide sufficient and credible guarantees about the technical and organisational measures to ensure adequate security of personal data, which can only be processed in cyber and physically well secured information systems.
Authorised processors and recipients of your personal data include insurance intermediaries and other persons authorised under insurance legislation, providers of IT, communication and related services (e.g. printing and mailing services, long-term physical archiving), providers of assistance and other services, reinsurers. In cases provided for by law, personal data may also be disclosed in the context of information exchange between insurance companies, banks, and also to public authorities.
Data may sometimes be disclosed to a third country, especially when this is necessary for the provision of assistance services or a specific benefit under an insurance policy. In particular, in the case of travel insurance or the use of an international assistance service provider, personal data is transferred to the extent necessary for the smooth provision of services. Under certain conditions, your personal data may be disclosed to state authorities (courts, the Police of the Slovak Republic, notaries, financial administration authorities, etc., in the performance of their legal duties) or may be disclosed directly by MAXIMA to other entities to the extent provided for by a specific law.
Contact details: in particular contact address, telephone number and e-mail address.
Data relating to job performance and evaluation and training: this includes information on education, training received, incentive programmes, previous experience, references, evaluation results, qualifications obtained, professional evaluation, skills, competence and credibility assessments, job evaluations, assessment centre results, etc.
5. Retention period of personal data
MAXIMA retains your personal data for as long as necessary to fulfil the stated purpose. For the purpose of fulfilling the contract, MAXIMA retains the personal data for the duration of the insurance and after the termination of the insurance until the expiry of the limitation period for exercising rights under the insurance contract or for as long as necessary, but at least ten years after the end of the contractual relationship with the data subject.
In the case of insurance contracts that have not been concluded, the Insurance Company processes personal data until the end of the second calendar year following the last communication with the client, unless the insurance has been concluded by that time or you exercise one of your rights before concluding the contract.
The processing of personal data of persons who are not a party to the insurance contract and who have rights and obligations under the insurance contract is necessary for the proper performance of the obligations under the insurance contract. This includes, in particular, insured persons under individual and group insurance, as well as defendants, beneficiaries, victims and other persons whose personal data is necessary for the performance of insurance business. For this purpose, the insurance company is entitled to process this personal data for the period of time specified by the relevant legislation (e.g. Civil Code, Insurance Distribution Act, etc.) and, if after this period of time there are still unresolved claims (even if disputed) between the insured and the insurance company arising in connection with the insurance, until they are settled.
6. Rights of the data subject
MAXIMA processes personal data for insurance purposes without the data subject's consent.
The processing of your personal data in the context of the offer and conclusion of contracts for some of MAXIMA's contractual products (e.g. motor vehicle insurance) may involve automated decision-making, including decisions to conclude an insurance contract or to determine the amount of the insurance premium. The data subject is always specifically informed about this process.
As a data subject, you have the right to obtain confirmation from MAXIMA as to whether it processes personal data concerning you. If MAXIMA processes your personal data, you have the right to access this personal data and other information.
MAXIMA is obliged to provide you with a copy of the personal data processed upon your request.
You have the right to have inaccurate personal data concerning you corrected by MAXIMA without undue delay.
You have the right to object to the processing of your personal data (if the personal data is processed for the purposes of the legitimate interest of MAXIMA or a third party, including related profiling).
You have the right to obtain from MAXIMA the personal data that you have provided to MAXIMA concerning you in a structured, commonly used and machine-readable format, and you have the right to have your personal data transferred directly by MAXIMA to another data controller, if technically feasible. The exercise of the right to the portability of personal data referred to in the preceding paragraphs is without prejudice to the right of the data subject to the erasure of personal data. You have the right to have MAXIMA erase the personal data concerning you without undue delay if there is no legal basis for the processing of such data.
If you have any doubts about compliance with the obligations related to the processing of personal data, you may contact MAXIMA or file a complaint with the supervisory authority, which in Slovakia is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, e-mail: info@pdp.gov.sk, www: https://dataprotection.gov.sk/uoou/.
7. Telephone call records
We process third party telephone call records for the purposes of preventing and detecting insurance fraud and other illegal acts. These recordings may be used as evidence in any legal or administrative proceedings. Another purpose of the processing of telephone call records is to manage the quality of the service provided and customer relations. The legal basis is the legitimate interest of the insurance company.
8. Personal data of persons from CCTV footage
The personal data of persons from the records of CCTV systems located in the client centre at Italská 1583/24 Prague 2 are processed by the insurance company for the purposes of legitimate interests to ensure the safety and security of buildings and premises used by the insurance company, protection of property and persons in these buildings, protection of personal data, safety and interests of employees, clients and third parties, prevention, detection and investigation of criminal activities and evidence in legal proceedings.
Legislation
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)
- Council of Europe Convention 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data, published under No. 49/2001 Coll.
- Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts
- Act No. 277/2009 Coll., on Insurance, in its complete wording
- Act No. 186/2009 Coll. on financial intermediation and financial counselling and on amendment and supplementation of certain acts
- Act No 297/2008 Coll. on the protection against the legalization of proceeds of crime and on the protection against the financing of terrorism and on the amendment and supplementation of certain Acts
- Act No 351/2011 Coll. on electronic communications
- Act No 395/2002 Coll. on archives and registers and on the amendment of certain acts
- Act No 40/1964 Coll., Civil Code
- Act No. 461/2003 Coll. on social insurance and legislation in the field of social security and health insurance
- Legislation on accounting, taxation and control activities
- Implementing legislation
Date: 1 February 2024
! The information in this section is a translation of the original Czech text. In case of lack of comprehensibility or inaccuracy of the translation, the original version in Czech takes precedence.
