Privacy Policy

01. Information We Collect

We collect several categories of personal information to provide and improve our services. The types of data we gather include:

• Personal Identifiers: Full name, email address, postal address, phone number, date of birth, national identification number (where required), and other similar contact information.
• Insurance Data: Policy numbers, coverage details, claims history, premium payment information, and any other data necessary to administer your insurance contracts.
• Technical Information: IP address, browser type and version, device identifiers, operating system, and platform, along with other technical data collected via cookies, web beacons, and similar tracking technologies.
• Usage Data: Information about how you interact with our website, such as pages viewed, time spent on pages, clickstream data, referral URLs, and search queries.
• Communication Data: Records of any correspondence or communication with us, including emails, chat logs, and call recordings (where permitted by law).

We collect this information directly from you when you provide it, automatically through your use of our website, and occasionally from third-party sources (e.g., credit reference agencies or fraud prevention services) as permitted by law.

02. How We Use Your Information

We use your personal data for the following legitimate purposes:

• Service Delivery: To provide, maintain, and improve our insurance products and customer support, including processing applications, underwriting policies, managing claims, and handling renewals.
• Communication: To contact you regarding your policy, claims, or other service-related matters, and to respond to your inquiries or requests.
• Marketing & Promotions: To send you newsletters, promotional offers, and updates about our services that may interest you. You can opt out of these communications at any time.
• Analytics & Improvement: To analyse website usage, monitor trends, and gather statistical data to enhance user experience and optimise our digital platforms.
• Compliance & Legal Obligations: To comply with applicable laws, regulations, and industry standards, and to respond to lawful requests from public authorities.
• Fraud Prevention & Security: To detect, prevent, and address fraud, security incidents, and other malicious activities that may affect our business or our users.

We process your data only when we have a lawful basis, such as your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests (provided they do not override your rights).

03. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons, pixels, and scripts) to enhance your browsing experience, analyse site traffic, and personalise content. Cookies are small text files stored on your device that help us:

• Recognise you when you return to our site and remember your preferences (e.g., language and region).
• Understand how you interact with our content and improve our services based on user behaviour.
• Deliver targeted advertisements relevant to your interests through third-party advertising networks.
• Measure the effectiveness of our marketing campaigns and track conversions.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information, please review our separate Cookie Policy, which explains the types of cookies we use and how to control them.

04. How We Share Your Information

We respect your privacy and do not sell, trade, or rent your personal information to third parties for their own marketing purposes. However, we may share your data in the following circumstances:

• Service Providers: We engage trusted third-party vendors to perform functions on our behalf, such as IT hosting, payment processing, analytics, claims administration, and customer support. These providers are contractually obligated to protect your data and use it solely for the services they provide to us.
• Insurance Partners: To underwrite policies, process claims, or provide quotations, we may share necessary information with partner insurance companies or reinsurers. These entities are also bound by strict confidentiality and data protection obligations.
• Legal and Regulatory Authorities: We may disclose your information if required by law, regulation, legal process, or governmental request, including to meet national security or law enforcement requirements.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of the transaction. We will notify you of any such change in ownership or control.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

All third parties with whom we share data are required to maintain the same level of data protection as we do, and we remain responsible for their compliance with this policy.

05. Data Security & Retention

We implement robust technical and organisational measures to safeguard your personal information from unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of sensitive data during transmission (using TLS/SSL) and at rest.
• Regular vulnerability assessments and penetration testing to identify and remediate potential security gaps.
• Strict access controls, ensuring that only authorised personnel with a legitimate business need can access your data.
• Secure data storage systems with firewalls and intrusion detection mechanisms.
• Employee training on data protection and privacy best practices.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable laws and regulations. When data is no longer needed, we securely delete or anonymise it to prevent identification.

06. Your Data Protection Rights

Depending on your jurisdiction (particularly if you are a resident of the European Economic Area, the UK, or other regions with similar data protection laws), you have the following rights concerning your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You can request correction of any inaccurate or incomplete personal data we hold.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
• Right to Restriction of Processing: You can request that we limit the processing of your data under certain conditions.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format and have it transferred to another controller.
• Right to Object: You can object to our processing of your data for direct marketing purposes or when processing is based on our legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you can withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request within one month, as required by law, and may ask for verification of your identity before proceeding.

You also have the right to lodge a complaint with a data protection supervisory authority if you believe our processing of your data infringes applicable data protection laws.

07. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately. Upon verification, we will take steps to delete such information from our systems in accordance with applicable laws.

08. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date at the top of the policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Your continued use of our services after any modifications indicates your acceptance of the updated policy. If you do not agree with any changes, please discontinue using our services and contact us if you wish to have your data deleted.

09. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are here to assist you.

• Email: privacy@biztositaspont.com
• Phone: +36 1 234 5678
• Postal Address: Budapest, Bartók Béla út 70, 1114 Hungary

Our Data Protection Officer (DPO) is available to address any privacy-related matters. We take your concerns seriously and will respond to all inquiries as promptly as possible, usually within 30 days.