Information Clause

Detailed information on the processing of personal data by Medicover Forsakring AB (publ) S.A.- represented by its Branch in Poland, 96 Jerozolimskie Avenue, 00-807 Warsaw

1. personal data controller

The administrator of your personal data will be Medicover Forsakring AB (publ) S.A.- represented by its Branch Office in Poland, 96 Jerozolimskie Avenue, 00-807 Warsaw (hereinafter: we). You may contact us as follows:

• by mail to the address: Customer Service Department, Medicover Forsakring AB (publ) S.A , Al. Jerozolimskie 96, 00-807 Warsaw
• Via e-mail: dok@medicover.pl
• By phone: 500 900 500

2 Data Protection Officer

We have appointed a data protection officer. This is the person you can contact on all matters relating to the processing of personal data and the exercise of your rights related to data processing. You can contact the inspector as follows:

• by mail to: Privacy Officer Medicover Forsakring AB (publ) S.A, 96 Jerozolimskie Avenue, 00-807 Warsaw
• Via e-mail: IOD_INS@medicover.pl

3 The purposes of processing your personal data and the legal basis for processing

We will process your personal data to:

• conclude and perform a contract of medical care insurance, including the assessment of insurance risks - the legal basis for processing is the necessity of data processing for the conclusion and performance of the contract and consent to the processing of health data,
• assess insurance risks in an automated manner as part of customer profiling prior to entering into a contract - the legal basis for processing is a legal obligation on the controller and consent to process health data,
• provide you with marketing materials of the administrator's own products and services, including carrying out analysis and profiling - the legal basis for data processing is the necessity of processing for the realization of the administrator's legitimate interest; the administrator's legitimate interest is to conduct direct marketing of its services,
• pursue claims related to the concluded medical insurance contract - the legal basis of data processing is the necessity of processing for the realization of the controller's legitimate interest; the controller's legitimate interest is the possibility of pursuing its claims

4. profiling information

Based on your personal data, we perform profiling, i.e. automatic evaluation of certain personal factors concerning you.

We perform profiling to appropriately select communication and promotional materials for the activities of the data controller. We will select appropriate content for communication and promotional materials based on your profile.

We use the following data for profiling: customer id, first name, last name, age, gender, language, date of birth, city, type of product purchased, source of data acquisition. In addition, when profiling, we take into account statistical data on website behavior and preferences expressed in Medicover Poland's services and applications.

5 Period of storage of your personal data

We will keep the data we process under the medical insurance contract until the statute of limitations for claims or until the obligation to keep data under the law expires, in particular the obligation to keep accounting documents, and in the legitimate interests of the data controller (marketing including profiling) until you object.

6 Period of storage of your personal data

 We will transfer your personal data:

• entities that process data on behalf of and on behalf of the controller, including IT service providers, entities that process data for debt collection, marketing agencies, or insurance agents - with such entities processing data on the basis of a contract with the controller and only in accordance with the controller's instructions,
• To entities authorized by law,
• To entities authorized by you.

7 Period of storage of your personal data

You have the following rights related to the processing of personal data:

1. The right to object to the processing of your data for marketing purposes - as we process your data for marketing purposes on the basis of legitimate interests,
2. The right to object to processing based on your particular situation - in cases where we process your data on the basis of our legitimate interest,
3. The right to access your personal data,
4. The right to request rectification of your personal data,
5. The right to request the deletion of your personal data, only if we are not obliged by law to process them,
6. The right to request restrictions on the processing of your personal data,
7. The right to portability of your personal data, i.e. the right to receive your personal data from us, in a structured, commonly used machine-readable computer format. You can send this data to another data controller or request that we send your data to another controller. However, we will only do this if such a transfer is technically possible.

To exercise the above rights, please contact us or our Data Protection Officer (contact information in 1 and 2 above.

The right to lodge a complaint with the authority

You also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Office for Personal Data Protection.

8 Obligation to provide data

The provision of personal data in connection with the conclusion of the contract is necessary for the conclusion and performance of the insurance contract and for the assessment of insurance risks - without the provision of personal data it is not possible to conclude an insurance contract. Providing personal data for marketing purposes is voluntary.

Healthcare Services, Medicover in Poland