1. Data controller
The controller of your personal data is:
BILLBERRY CAPITAL GROUP sp. z o.o.
Tax ID: 584-276-79-63
02-305 Warsaw
Aleje Jerozolimskie 136
For matters related to personal data protection, you may contact us using the details provided in the Contact section.
2. Source of data
As a rule, we obtain personal data directly from you – e.g. via contact forms, e-mail, during phone calls or meetings. In connection with the handling of insurance processes, we may also receive data:
- from your employer or principal – if you are a contact person,
- from other entities within the capital group in which you operate,
- from insurance companies or other intermediaries, to the extent necessary for concluding or servicing contracts,
- from publicly available registers (e.g. business registers) – in respect of company data.
3. Purposes and legal bases for processing
Depending on your relationship with BB Care and the manner of contact, your data may be processed for the following purposes:
- Establishing contact and responding to an enquiry – including presenting information about our services and cooperation possibilities (legal basis: Art. 6(1)(f) GDPR – our legitimate interest in communicating with persons interested in our offer).
- Preparation, conclusion and performance of contracts – relating to brokerage services or other contracts concluded with BB Care (legal basis: Art. 6(1)(b) GDPR – necessity for the conclusion and performance of a contract).
- Fulfilment of legal obligations – arising from generally applicable law, in particular tax, accounting and insurance mediation regulations (legal basis: Art. 6(1)(c) GDPR).
- Establishment, pursuit or defence of claims – to the extent necessary to protect our rights or those of third parties (legal basis: Art. 6(1)(f) GDPR – legitimate interest of the controller).
- Analytical and statistical purposes – related to the operation of the website, service improvement and customer relationship management (legal basis: Art. 6(1)(f) GDPR).
Where processing in a specific respect is based on your consent (e.g. certain categories of cookies), the legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time.
4. Scope of data processed
Depending on the purpose of processing, we may process in particular the following categories of data:
- identification data – first name and surname, position, company or entity name,
- contact data – e-mail address, phone number, postal address,
- data related to insurance contract servicing – information about policies, claims, reported losses, data identifying the policyholder, the insured and beneficiaries,
- business relationship data – contact history, notes from conversations, service scope arrangements,
- technical data related to use of the site – IP address, cookie identifiers, device and browser information, and site activity data.
5. Recipients of data
Your personal data may be transferred to entities with whom we cooperate in pursuit of the purposes described above, in particular:
- insurance companies and other intermediaries, where necessary for preparing offers or servicing policies,
- entities providing IT, hosting and maintenance services on our behalf,
- entities providing legal, advisory, tax and accounting services,
- public administration bodies and other institutions entitled to receive data under applicable law.
Where the use of certain tools whose providers are based outside the European Economic Area results in a transfer of data, we ensure that this takes place on the basis of appropriate legal mechanisms, such as standard contractual clauses or adequacy decisions.
6. Data retention period
We retain personal data for the period necessary to achieve the purpose for which it was collected, and subsequently:
- in the case of data related to the conclusion and performance of a contract – for the duration of the contract and thereafter for the period required by tax and accounting regulations and until the expiry of the claims limitation period,
- in the case of data processed on the basis of our legitimate interest – until an effective objection is raised, but no longer than required for the pursuit of that interest,
- in the case of data processed on the basis of consent – until consent is withdrawn, unless regulations require longer retention.
7. Your data-related rights
In connection with the processing of personal data, you have the following rights:
- right of access – to obtain information on whether we process your data and in what scope, and to receive a copy,
- right to rectification – to correct inaccurate or incomplete data,
- right to erasure ("right to be forgotten") – in the cases provided for under the GDPR,
- right to restriction of processing – e.g. when you contest the accuracy of the data or object to processing,
- right to data portability – in respect of processing based on consent or a contract and carried out by automated means,
- right to object to processing carried out on the basis of our legitimate interest – on grounds relating to your particular situation,
- right to withdraw consent – in respect of processing based on consent, at any time and without affecting the lawfulness of processing before withdrawal,
- right to lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office.
You may exercise the above rights by contacting us using the details available in the Contact section. To verify your identity, we may ask for additional information to confirm unambiguously that the request comes from the right person.
8. Obligation or voluntary nature of providing data
Providing personal data is voluntary; however, in some cases it may be necessary to conclude and perform a contract or to respond to an enquiry. Failure to provide required data may prevent us from, for example, presenting an offer, concluding a contract or conducting effective correspondence.
9. Automated decision-making and profiling
As at the date of preparation of this information, we do not carry out automated decision-making in respect of you, including decisions based on profiling, that would produce legal effects or similarly significantly affect you.