Protection of personal data

I&G Insurance Brokers Ltd ("I&G", "We") hereby provides information about your personal data that may be processed in connection with the assignment of insurance brokerage (researching the insurance market, obtaining an offer to conclude an insurance contract).

Our privacy notice explains how we collect, use, share and protect your personal data. In case this notice is amended in the future, we will post information about this on our website (http://iandgbrokers.com) in due course, as well as in each of our offices around the country.

I&G processes your personal data lawfully, fairly and transparently. Data is collected for specific, explicit and legitimate purposes. Personal data is stored in accordance with statutory time limits, which are subject to periodic review and, if changed, updated accordingly.

I&G maintains appropriate technical and organizational measures designed to help protect the security and privacy of your personal data and to protect it from accidental or unlawful destruction, accidental loss, unauthorized alteration, disclosure or access, misuse and any other unlawful form of processing.

I&G collects your personal data through its website and offices when you contact us by telephone or email.

The personal data that is usually processed in connection with the research and receipt of an offer to conclude an insurance contract is as follows:

• Name.
• Personal Identification Number
• Contact: Email, address and telephone number
• Address: permanent or current
• Bank information: bank account number
• Information about the subject of the insurance contract - work experience, professional experience, ownership, vehicle details, etc.
• Identity card and other details required for life insurance due diligence in accordance with our obligations to comply with the Measures Against Money Laundering Act
• Videos
• Personal data contained in cookies when using online services in accordance with the stated Cookie Policy

The processing of your data is necessary for researching the insurance market and obtaining an offer for an insurance contract.

I&G may process your health data for the purpose of researching and obtaining an offer for an insurance contract on the basis of your explicit consent.

I&G may process your health data provided for the purposes of proving an insurance claim, establishing, exercising or defending legal claims.

I&G may share your data with insurers on the basis of a signed engagement letter for the purpose of obtaining an individual quote.

In certain cases, we share your data with service providers (experts and subcontractors) on the basis of I&G's legitimate interest in fulfilling its obligations as an insurance intermediary and improving the quality of the services provided.

I&G processes video data on the basis of legitimate interest, taking the necessary measures to protect it from unauthorised access, alteration or dissemination, as well as from other unlawful forms of processing.

I&G processes contact data on the basis of your consent to receive marketing material from us and on the basis of our legitimate interest in sharing the data with software companies for the purpose of maintaining the website.

The personal data you provide will be used for the purposes of administering the insurance relationship, including but not limited to:

• Market research.
• Obtaining an individual insurance quote.
• Assisting in the processing of claims in respect of an insured event and the payment of insurance compensation in the event of a liquidation of a loss.
• Prevention of insurance fraud.
• Risk assessment.
• Compliance with legislative requirements, including the avoidance of conflicts of interest, corrupt practices and obligations under the Measures Against Money Laundering Act.
• Controlling access and security of I&G premises and employees from attacks on life, health, physical integrity and property.
• To provide online services to facilitate the service of our customers, for example to provide quotation and conclusion of insurance contracts, payment of instalments, lodging complaints and enquiries, providing information on the nearest office to you.
• To inform you about the services and products we offer (unless you choose not to receive our marketing materials).

I&G respects and protects the privacy of your personal data. Subject to legal requirements, I&G may disclose your personal data to:

• Insurers: In fulfillment of their contractual obligation under a Letter of Engagement to investigate and/or broker an insurance contract.
• Service providers (consultants, experts, appraisers, attorneys): When we use services related to researching and obtaining a quote for an insurance contract and assisting in the realization of the insurance claim, technical support of information systems and operational support of our business, it is possible that I&G may disclose personal data. Such disclosures will only be made in case there is a valid reason to do so and on the basis of a written agreement by the recipients to provide an adequate level of protection.
• In the performance of its obligations to broker and assist with certain insurance, I&G may disclose your data to subcontractors who provide services on I&G's behalf outside the Republic of Bulgaria.
• Software companies that are responsible for maintaining the website and/or its individual features.

I&G shall keep the individual documents it administers for the purpose of fulfilling obligations under an award contract (award letter) and documents that are provided for the purpose of examining and obtaining an individual offer for conclusion of an insurance contract (award letter, policy, annexes, etc.) for 5 years from the date of expiry of the insurance contract..

For more detailed information about the retention periods of all documents that I&G processes, you can contact I&G and request a copy of the Document Retention Policy.

Your personal data regarding consent obtained for direct marketing is retained until you withdraw your consent to receive marketing materials from us

Subject to Bulgarian law, you have the following rights in relation to your personal data processed by I&G:

• To access and obtain a copy of your personal data processed by I&G.
• To have your personal data rectified if it is inaccurate or incomplete.
• To request that your data be erased where the conditions for that are met. Such is the case where the purpose for which the data was collected has been achieved or you have withdrawn your consent where processing is based on consent and there is no other lawful basis for processing, or your data is being processed unlawfully, and others.
• In the cases specified by law, request that the processing of your personal data be restricted.
• To exercise your right to data portability and request that your data be provided in a structured, commonly used and machine-readable format.
• To withdraw the consent you have given where the processing of your personal data is based on consent.
• To lodge a complaint with the Data Protection Commission where the relevant prerequisites are met.

Detailed information on the terms and conditions under which you can exercise your rights can be found in I&G's Policy on the Exercise of the Rights of Data Subjects on our website (http://iandgbrokers.com) as well as in each of our offices in the country.

You can contact us at the following address. Bulgaria, 1618 Sofia, Bulgaria Blvd. 118 floor 4,  

Abacus Business Center, e-mail: office@iandgbrokers.com

You can also contact our Data Protection Officer at e-mail: dpo@iandgbrokers.com