Privacy Policy
Information on personal data processing
This information is provided by Care International Insurance Broker S.r.l. (breviter "Care"), pursuant to art.13 of EU Regulation 2016/679 (relating to the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data).
The information is provided in relation to the processing of personal data pertaining users of Care website (www.brokercare.com).
Data controller
Care, based in Milan, Italy, Via San Vincenzo 24, 20123 is the data controller, in the person of its legal representative pro tempore.
Data Protection Officer (DPO)
The data protection officer (DPO), appointed by the company, can be contacted at Milan, Italy, Via San Vincenzo 24, 20123. info@brokercare.com; PEC: brokercare@legalmail.it
Types of personal data processed
The Owner processes the following personal data of the users:
1. Browsing data
The IT and software systems used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers used by the users connecting to the site, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user.
For more information on the navigation data relating to users processed through cookies, you can consult the Cookie Policy at the following link.
2. Data communicated by the user
The optional, explicit and voluntary sending of messages to Care's contact addresses through the appropriate form on the site or also through the forwarding of email messages to the addresses indicated by the site itself entails the acquisition of sender's contact data, necessary to provide feedback, as well as all personal data included in communications.
Purpose and legal basis of the processing
Care processes the data mentioned in order to:
- allow the user to browse the site and take advantage of its features (including the possibility of contacting or being contacted by Care);
- fulfill applicable legal obligations, in compliance with national and european legislation;
- provide feedback to requests made by the user by filling out the appropriate form on the site.
Legal basis of the processing is consent, pursuant to art. 6 n.1 lett. a) of the GDPR (consent to the processing of personal data for one or more specific purposes).
Processing methods
The processing of personal data will be carried out with electronic and paper tools, in any case suitable to guarantee safety, protection and confidentiality through the adoption of adequate security measures to prevent unauthorized access, loss, theft and dissemination of personal data.
Recipients of the data
In addition to Care employees and collaborators, the following categories of subjects may be recipients of the data collected:
(a) Insurance Companies, as part of the reinsurance and brokerage activities carried out by Care;
(b) intermediaries with which Care has collaborative relationships;
(c) third party suppliers of assistance and consultancy services for Care, by way of example, in the following sectors: technological, accounting, administrative, legal, insurance;
(d) subjects whose right of access to users' personal data is expressly recognized by law, regulations or provisions issued by the competent authorities.
Transfers of Personal Data abroad and to non-EU countries
Users' personal data may be transferred outside the national territory to countries located in the European Union, as well as to Great Britain.
If the data are transferred to other states, outside the European Union, Care will provide you with the most appropriate methods and with the appropriate guarantees for the purposes of the transfer itself, in compliance with the applicable legislation (articles 45 and 46 GDPR).
Data retention
Users' personal data will be stored for the time necessary to allow navigation on the site and to provide feedback to requests made. Such data will not be kept for a period of time exceeding 10 (ten) years from the conclusion of the management of the user's contact request.
Rights of the interested party
The GDPR recognizes the right to interested parties to:
a) obtain confirmation from Care as to whether or not their personal data are being processed and to be informed about the content and source of the same, the purpose and retention period, verify its accuracy and request its integration, updating or modifying;
b) obtain from Care, without unjustified delay, the rectification of any inaccurate personal data;
c) obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of applicable law;
d) object at any time, for reasons related to your particular situation, to the processing of personal data concerning you pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. In this case, Care will refrain from further processing the personal data unless it demonstrates the existence of compelling legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or the defense of a right in court;
e) revoke, at any time, the consent to the processing of data (in relation to the processing for which such consent is possibly necessary), without this affecting in any way the lawfulness of the processing based on the consent given before the revocation;
f) request the limitation of the processing of your personal data in the event that:
- the interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
- the processing is unlawful and the interested party opposes the deletion of the personal data by requesting instead of limiting its use;
- although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in Court;
- the interested party has objected to the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
g) request the deletion of personal data concerning him without unjustified delay;
h) obtain the portability of personal data concerning him.
Each user can exercise the aforementioned rights by sending an email to the email address:
Right to complain
Interested parties who believe that the processing of personal data relating to them, carried out through this site, occurs in violation of the provisions of the GDPR have the right to lodge a complaint with the Guarantor for the protection of personal data, pursuant to art. 77 of the same Regulation.
The complaint can be submitted via registered letter with return receipt addressed to the Data Protection Authority: Piazza Venezia 11, 00187 Rome or via certified email addressed toprotocol@pec.gpdp.it.