Information clause MINS

Detailed information on the processing of personal data by Medicover Forsakring AB (publ) S.A.- represented by Poland Branch, Al. Jerozolimskie 96, 00-807 Warszawa

1. Personal Data Administrator

The administrator of your personal data will be Medicover Forsakring AB (publ) S.A.- represented by the Poland Branch, Al. Jerozolimskie 96, 00-807 Warsaw (hereinafter: us). You can contact us in the following ways:

- by post at the following address: Customer Service Department, Medicover Forsakring AB (publ) S.A.- represented by the Poland Branch, Al. Jerozolimskie 96, 00-807 Warsaw

- by e-mail: dok@medicover.pl

- by phone: 500 900 500

2. Data Protection Officer

We have appointed a Data Protection Officer. You may contact this person in all matters relating to the processing of personal data and the exercising of rights related to data processing. You can contact the officer in the following ways:

- by post at the address: Data Protection Officer Medicover Forsakring AB (publ) S.A, Al. Jerozolimskie 96, 00-807 Warsaw

- by e-mail: IOD_INS@medicover.pl,

3. The purposes of processing your personal data and the legal basis for processing

 We will process your personal data for the following purposes:

• to conclude and execute a medical insurance contract, including performing an insurance risk assessment - the legal basis for processing is the need to process data in order to conclude and execute the contract, and consent to the processing of health-related data,
• to perform an automated insurance risk assessment as part of customer profiling before concluding a contract - the legal basis for processing is the legal obligation of the administrator, and consent to the processing of health-related data,
• to provide you with marketing materials for the data administrator's own products and services, including conducting analysis and profiling - the legal basis for data processing is the need to process the data in order to fulfil the legitimate interest of the administrator, which is to conduct direct marketing of own services,
• to pursue claims related to the concluded medical insurance contract - the legal basis for data processing is the need to process the data in order to fulfil the legitimate interest of the administrator, which is the right to pursue claims

4. Information on profiling

 Our profiling, which is an automatic assessment of certain personal characteristics pertaining to you, is based on your personal data.

Profiling helps us better choose the materials to communicate and promote the data administrator’s business. Based on your profile, we will select appropriate informational and promotional materials.

We use the following data for profiling purposes: name, surname, age, gender, language, date of birth, city, types of purchased products, and data source. In addition, when profiling, we take into account statistical data on website behaviour, as well as preferences expressed on Medicover Poland's websites and applications.

5. The period of storage of your personal data

We will store the data we process on the basis of the medical insurance contract until the statute of limitations expires, or until the end of the period required by law for storing data, in particular the required period of keeping accounting documents, and in the legitimate interests of the data administrator (marketing, including profiling) until an objection is made.

6. Recipients of your personal data

 We will share your personal data with:

• entities processing data on behalf and on the orders of the data administrator, including IT service providers, entities processing data for debt recovery, marketing agencies, insurance agents - these entities process data on the basis of a contract with the administrator and only according to the administrator's instructions,
• entities authorised by law,
• entities authorised by you.

7. Your rights related to the processing of personal data

You have the following rights related to the processing of personal data:

1. the right to object to the processing of data for marketing purposes - as we process your data for marketing purposes based on a legitimate interest,
2. the right to object to the processing of data due to special circumstances - in cases where we process your data on the basis of our legitimate interest,
3. the right to access your personal data
4. the right to request correction of your personal data,
5. the right to request removal of your personal data, only in situations when we are not required by law to process them
6. the right to request restricted processing of your personal data,
7. the right to transfer your personal data, i.e. the right to obtain your personal data from us, in a structured, commonly used machine-readable computer format. You can send this data to another data administrator or request that we send your data to another administrator. However, we will do this only if such a transfer is technically possible.

In order to exercise the above rights, contact us or our data protection officer (contact details in points 1 and 2 above).

The right to lodge a complaint with the authority

You also have the right to lodge a complaint with the supervisory authority for the protection of personal data, i.e. the President of the Office for Personal Data Protection.

8. The obligation to provide data

Providing personal data in connection with the contract is necessary for concluding and executing the insurance contract, and for perform the insurance risk assessment – conclusion of the insurance contract is not possible without providing personal data. Providing personal data for marketing purposes is voluntary.