Privacy Policy

NOTICE ON PERSONAL DATA PROCESSING (NATURAL PERSONS)

In accordance with the Law on Personal Data Protection (“Official Gazette of RS”, No. 87/2018) and the General Data Protection Regulation (GDPR), the Insurance Brokerage Company “Eurosolutions” doo Beograd, Požeška 67a, local 4.06, Belgrade – Čukarica, PIB: 106280667, MB: 20569620 (hereinafter: the Company), provides the following information regarding the processing of personal data:

1. What data we collect and from whom

The Company collects personal data from the insurance policyholder/insured person based on legal obligations, brokerage obligations, contractual relationships, and/or the user’s consent.

1.1. Types of data

Identification data: First name, middle name, last name, date of birth, JMBG (Unique Personal ID number), ID card number and place of issuance, passport number and place of issuance.
Contact information: Permanent address and correspondence address; phone number and email address.
Risk-related data:
Travel health insurance with or without Covid coverage, accident insurance (disability and death), travel insurance with ski-risk coverage – Ski Travel.
Travel information: Destination, start and end dates of the trip, number of days abroad, purpose of travel, sports activities and other relevant information.
Trip cancellation insurance.
Family or group member data (if a family or group policy is being issued).
Financial data: Insurance premium, insured sum and sum of coverage.
Insurance history.
Data from claim documentation.

1.2. Data related to payment processing and policy issuance

Data on completed payment (amount, transaction number, payment method).
(Note: The Company does not store payment card details.)
Information on issued policies and their status.

1.3. Data collected in accordance with the Law on Prevention of Money Laundering and Terrorism Financing

Identity data of the policyholder/insured person.
Data on the beneficial owner.
Data from documentation submitted for identity verification.

1.4. Technical data collected during use of the website/application

IP address.
Log files and session data (including encrypted authentication tokens and selected language).
Device and browser information.

Data is collected directly from the user or, in certain cases, from the insurer when additional documentation is required during the term of the insurance contract.

2. Purpose of processing

Obtaining insurance offers.
Intermediation in concluding insurance contracts.
Assessment of client needs.
Conclusion, execution, and maintenance of insurance contracts.
Communication with users (sending policies, notifications, requesting additional documentation).
Compliance with legal obligations.
Fraud prevention.

3. Use of Cookies

The website uses so-called “cookies” (hereinafter: cookies). Cookies are text files that are stored on your device when you visit the website. We use cookies exclusively to enable better interaction with the website, for the purposes of insurance intermediation, selecting the most favorable insurance offer, and fulfilling contractual obligations toward the insurance company with which the insurance contract is concluded.

4. Legal basis

Execution of a contract, legal obligations (including obligations under the Law on Prevention of Money Laundering and Terrorism Financing), legitimate interest, consent.

5. Recipients

Insurance companies, reinsurance companies, call center, medical evaluators – court experts, IT service providers, state authorities.

6. Data retention period

During the insurance intermediation process and within legally prescribed deadlines.

7. Rights of the data subject

The policyholder/insured person has the right to:

access their data;
correction or amendment of inaccurate or incomplete data;
deletion of data (“right to be forgotten”), except when a legal obligation to retain data exists;
restriction of data processing;
data portability;
objection to the Company and the Insurer;
objection to the National Bank of Serbia;
objection to the Commissioner for Information of Public Importance and Personal Data Protection;
withdraw consent at any time, without affecting the lawfulness of the processing prior to withdrawal.

8. How the user can request deletion or restriction of processing

A request to delete data, restrict processing, or withdraw consent may be submitted:

by email to: info@eurosolutions.rs
by post to the Company’s address
in person at the Company’s premises

The Company must respond to the request within 30 days, in accordance with the law.

If legal regulations require the Company to retain certain data for a specific period (e.g., policies and AML records), the user will be informed of this, as well as the date when the data can be deleted.

9. Complaint to the supervisory authority

If the data subject believes that their rights have been violated, they may submit a complaint to the Commissioner for Information of Public Importance and Personal Data Protection:

Bulevar kralja Aleksandra 15,
11000 Belgrade
Tel: +381 11 3408 900.