NOTIFICATION ON THE PROCESSING OF PERSONAL DATA (physical persons)
IN ACCORDANCE WITH THE LAW ON THE PROTECTION OF PERSONAL DATA ("Official Gazette of RS", No. 87/2018)
In accordance with the provisions of the Law on protection of personal data("Official Gazette of RS", No. 87/2018) Company for intermediation in insurance ACB" doo Belgrade (Stari Grad), Francuska 37 ( hereinafter: Company) provides the following information in in connection with proceedings on this basis, as follows:
1. Company as a data controller
The company, as an insurance intermediary with a valid license of the National Bank of Serbia, in the performance of its registered activity, represents an independent personal data controller, i.e. a joint controller, in situations where, in accordance with Article 43 of the Law, it has concluded an agreement on the regulation of mutual rights and obligations with insurers joint controllers, whereby we deal with personal data exclusively in accordance with applicable regulations, with the application of all measures of administrative and technical protection and security of personal data.
2. The Company collects personal data of policyholders/ insured :
From the policyholder or personally from the insured, on the basis of consent, i.e. contract/authorization for intermediation, when performing insurance intermediation activities.
3. Purpose of data collection, legal basis and retention period
The Company obtains and handles the personal data of the insured directly and/or from the insurance policyholder for the purpose of obtaining offers from insurers and reinsurers, in order to enable the policyholder/insured to conclude an insurance contract, as well as to fulfill the Company's legal obligations as a intermediary in insurance from Article 94 of the Insurance law ( which prescribes the duty to provide the insurance/reinsurance policyholder, i.e. the insured, with explanations and advice on circumstances significant for conclusion and implementation of insurance/reinsurance contracts).
The data received for the stated purpose is stored, in accordance with the law, during the entire duration of the insurance contract in whose intermediation the Company participated and for 10 years after the expiration of the insurance contract.
4. As an obligee under the Law on Prevention of Money Laundering and Financing of Terrorism
In addition, the Company handles personal data obtained from the policyholder/insured/beneficiary, attorney, legal representative and real owner of the policyholder, who is a legal entity, for the purpose of fulfilling the obligations prescribed by this Law , as an obligee of the application of this Law in accordance with Article 4.
Data processed for this purpose are stored, in accordance with regulations, for at least 10 years.
5. Access and Disclosure of Collected Data
The Company exchanges all personal data with its employees. who, by the nature of their work, must have access to that data, insurers and reinsurers, i.e. loss adjustors, in order to fulfill their obligations from the registered activity of insurance mediation, i.e. obtaining an offer for the purpose of concluding an insurance contract , as well as to third parties who by law must have access to it data (National Bank of Serbia, Directorate for the Prevention of Money Laundering and other state bodies, external auditors, courts, etc.).
The Company does not transfer data outside the territory of the Republic of Serbia.
6. Data security
All data handled by the Company is stored in electronic and physical form and is kept as a business secret, with the application of all available technical and organizational data protection measures, in accordance with the law and its internal acts. The building in which the Company's premises are located is secured by video surveillance. The data is located on the employees' computers in the Company's premises. Access to individual computers is provided by a password, which changes every month, and the computers of employees in the Company's sectors do not have the possibility of connecting external memories, except for the Director and Deputy Director of the Company.
The data is available on a shared disk with limited right of access to persons with special authorizations in the Company.
7. Rights of persons whose personal data were collected by the Company
The policyholder, i.e. the insured or the beneficiary, depending on the case, have all legal rights regarding the handling of personal data by the Company, namely: the right to access, correction by the company, addition and deletion of personal data, the right to limit processing, the right to a complaint to the Commissioner and the right of data portability. If the policyholder/ Insured or insurance beneficiary, depending on the case, has given consent to the processing of personal data, that consent can be revoked at any time in accordance with the Law on personal data protection. Revocation of consent will not affect the admissibility of processing based on consent prior to revocation.
If the policyholder or the insured or the insurance user, depending on the case, considers that the handling of personal data has been carried out contrary to the provisions of the Law on personal data protection it is entitled to file a complaint with the Commissioner for Information of Public Importance and for the Protection of Personal Data, on the notification form on the violation of personal data and in the method of notifying the Commissioner for Information of Public Importance and Personal Data Protection ("Official Gazette of RS", No. 40/2019):
Commissioner for Information of Public Importance and Personal Data Protection, address: Bulevar kralja Aleksandra 15, 11000 Belgrade, Tel: +381 11 3408 900.
8. Rights of individuals in relation to personal data collected by the Company
The company is obliged to provide a copy of the data it handled to the person to whom the data refer upon his request. The company may request compensation for the necessary costs for the production of additional copies requested by the person to whom the data refer, and if the request for a copy is submitted electronically, the information is submitted in a commonly used electronic form, unless the person to whom the data refer has requested a different delivery.
10. Contact information regarding the handling of personal data by the Company
For all questions concerning rights related to the handling of personal data or if there is a violation of rights and/or knowledge of an action that would lead to a violation of personal rights, the notification can be sent verbally or in writing to the following:
- Contact person on behalf of the Company for theimplementation of Personal Data Protection Regulations: appointed DPO : Mirko Matijević , Deputy Director
- Company phone : +381.11.7854600
- e-mail :
- if addressed by post: Company for intermediation in insurance ACB doo Belgrade (Stari grad), Francuska37.
In Belgrade, 03.12.2024
Dragan Odžaklijević, director