GDPR

1. Introduction

This page sets out how Transeuropa Insurance Brokers complies with the General Data Protection Regulation (GDPR) when handling the personal data of clients based in the European Economic Area, and how you can exercise your rights under it. It should be read alongside our Privacy Policy, which covers our data practices in more general terms.

2. Data Controller Details

Transeuropa Insurance Brokers is the data controller for the personal data described in this policy. You can reach us about data protection at hello@transeuropabrokers.com.

3. What Personal Data We Process

We process the information needed to quote for, arrange, and administer your insurance, including your contact details, information about what you need covered, and, where relevant to a policy, special category data such as health information (for example, for life or critical illness cover). We only collect what's necessary for the purpose in question.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

Performance of a contract: to arrange and administer your insurance.
Legal obligation: to meet our regulatory duties as an insurance intermediary.
Legitimate interests: for example, to improve our service, provided this doesn't override your own rights and interests.
Consent: for marketing communications, which you can withdraw at any time.

5. Your Rights Under GDPR

You have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data, where we're not required to keep it for legal or regulatory reasons.
Restrict or object to certain processing.
Data portability: receiving your data in a structured, commonly used format.
Withdraw consent at any time, where processing is based on it.

6. International Data Transfers

Where we work with insurers, reinsurers, or service providers outside the European Economic Area, we put appropriate safeguards in place, such as standard contractual clauses, to make sure your data continues to receive an equivalent level of protection.

7. Data Security Measures

We use appropriate technical and organisational measures to protect your data, including access controls, encryption where relevant, and regular review of who has access to what. Staff handling your data are trained on their data protection responsibilities.

8. Exercising Your Rights & Complaints

To exercise any of the rights above, contact us at hello@transeuropabrokers.com or +44 20 1234 5678. We'll respond within the timeframe required by the GDPR, and won't charge a fee for reasonable requests.

If you believe we haven't handled your data correctly, you also have the right to lodge a complaint with your local data protection supervisory authority. We'd always welcome the chance to put things right with you first.

9. Automated Decision-Making & Profiling

We don't use fully automated decision-making that produces legal or similarly significant effects on you without human involvement. Where an insurer uses automated underwriting as part of providing a quote, that processing is carried out by the insurer as a separate data controller, under their own privacy notice.

10. Data Breach Notification

If a breach of your personal data occurs that's likely to result in a risk to your rights and freedoms, we'll notify the relevant supervisory authority within the timeframe required by the GDPR, and will contact you directly where the risk to you is high.

11. Data Protection Impact Assessments

Before introducing any new process or system that could pose a higher risk to your rights (for example, using new technology to process special category data), we carry out a data protection impact assessment to identify and reduce that risk before it goes live.