Security Policy

Information on Personal Data Subjects

This document is about informing Personal Data Subjects about the processing of their data, based on EU Regulation 2016/679 and the relevant Greek legislation.

1. Identity and contact details of the Company

The companies Star Insurance Agents & Coordinators of Insurance Agents SA and Star Insurance Brokers EE, both with the distinctive title, Star Group Insurance Services (hereinafter "Company"), will use your personal data in its capacity as Responsible Data Processor (Data Controller).

As a Data Processor it collects, controls, maintains, transmits and uses personal data in paper or electronic form.

If you have any questions regarding the processing of your Personal Data, if you wish to exercise any of your rights, or submit a complaint, you can contact the Data Protection Officer at the details listed below.

Star Group Insurance Services
1 Perikli Stavrou, 115 24 Athens
Phone 210 69 29 160
Fax 210 69 18 960
email info@star-group.gr

2. What data do we collect?

The Company informs you,i.e. natural persons, in accordance with the provisions of the existing legislation on the protection of personal data that it collects and processes personal data - sensitive or not - concerning you, which is required for the preparation of an insurance offer, conclusion of an insurance contract and management of claims. Such data are:

Identification data: full name, father’s name, ID number, Tax number, Social Security No. (AMKA), date of birth, nationality, etc.
Contact data: postal and e-mail address, landline and mobile phone number, etc.
Payment data: numbers of bank accounts, debit/credit and other bank cards, etc., either for the payment of insurance premiums or other financial obligations to the Company through them, or for the crediting of insurance compensation due to them or other payables to you amounts.
• Data necessary for the eventual conclusion and execution of the contract, depending on its subject matter and the risks covered. In this context, property status data (monthly earnings, total income, bank statement, etc.) or assets or investment or savings goals or special data, such as health data or treatment or medication data (medical history, copies of medical books, AMKA).
Data necessary for the determination of insurance compensation and/or the settlement of insurance compensation and/or the acquisition of insurance rights.

3. Where is the data collected from?

The personal data, including any special data collected for the evaluation of the insurance request, as well as during the operation of the contract, if concluded, are provided through written or oral requests:

either by the Applicant-Data Owner, directly or through another insurance intermediary,
either by the policyholder or the insured, in the case of insurance in favor of a third party,
or they are notified to the Company by another insurance mediation company or an insurance company with which the Data Owner holds an insurance contract with the aim of concluding a new insurance contract through the Company following authorization by the latter for the relevant transmission,
or sent to the Company by cooperating service providers, such as e.g. hospitals or medical diagnostic centers where the Data Subject underwent examinations or was treated, following his authorization for the relevant transmission, or by the company in which the Data Subject works, if it is a group insurance policy, or by the company in which the Subject addressed for the restoration of the upcoming material damage, etc., as the case may be.

4. Why do we collect the data and how do we process them?

The personal data collected by the Company with the insurance request, as well as those collected during the operation of the contract (or contracts) to be drawn up, will be processed by the Company and/or by third parties performing the processing by order and on its behalf, for the following purposes:

The examination of the Application, your identification, your inclusion in a homogeneous risk category, the assessment of the risk, the investigation of the conclusion of an insurance contract and the calculation of your insurance premium. As part of the risk assessment, automated means or methods may be used to make a decision at the stage of risk assumption.
The fulfillment of the Company's obligations, deriving from the insurance contract that will be concluded with you, its smooth operation and the upgrading of the services provided.
The Company's compliance with obligations imposed by the current legislative and regulatory framework and the prevention and combating of the offense of fraud against the Company and its affiliated insurance companies.
To prevent fraud, automated means or methods of processing personal data may be used.
Informing you about other products and services of the Company or its affiliated companies or third parties and their promotion, provided you give your consent.
Sending you satisfaction and evaluation questionnaires for the Company's products and services.
The provision of a high level of specialized service, ensuring immediacy and quality in the management of your requests.
The non-personalized processing of your data for statistical purposes.

5. Provision of Consent

For the Company to collect your sensitive personal data, your express consent is necessary, which will be requested during the process of your insurance.

Failure to provide consent or the required information, as well as any withdrawal of your consent in the future or the finding of inaccurate or untrue pre-contractual statements (such as, for example, when filling out the health questionnaire), will make it objectively impossible for the Company to provide its services to you.

In any case, we remind you that you have the right to withdraw your consent at any time, without prejudice to the legality of the processing that was based on the consent before its withdrawal. Withdrawing your consent will make it objectively impossible to continue providing our services to you.

The Company may process personal data of a minor on the basis of consent, if it has received the express consent of their parent or guardian.

6. How long do we keep your data?

In case of concluding an insurance contract, the Company will keep your personal data for a period of up to twenty (20) years from the end of the insurance contract, in any way (general statute of limitations). In the event of not concluding an insurance contract, personal data will be kept for five (5) years from the rejection of the relevant insurance application.

If the law or regulatory acts oblige the Company to keep personal data for a period longer than the aforementioned, the retention periods will be extended accordingly. Finally, if by the end of this time legal actions are in progress with the Company, which directly or indirectly concern you, the above-mentioned time for keeping the data kept by it is extended until the issuance of an irrevocable court decision.

The documents bearing the signature(s) of the Subjects, in which personal data have been registered, may, after five years, be kept in electronic digital form.

After the above intervals, the files with your personal data will be destroyed.

7. Who are the recipients of your personal data?

The management and employees of the Company, who are responsible for the management and operation of the insurance contract(s).

External partners of the Company whose object is the promotion of insurance products of the companies with which the Company cooperates and under the condition, in any case, of maintaining confidentiality.

In the case of car damage, personal data may be transmitted to interested insurance companies, garages, experts, roadside assistance.

In special cases, either to defend the Company's rights, or when provided for by law provisions or decisions, judicial authorities, the Personal Data Protection Authority or other Independent Authorities, your data may be transferred to debtor information companies of Law 3758/2009 (as applicable from time to time), lawyers, bailiffs, judicial and prosecutorial authorities, public services, State institutionsbodies, as well as their officials, as well as any other third parties. Any, according to the above, access to the data is done to the extent necessary to achieve the intended purpose.

Finally, we may share your personal data in the event of a corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or part of the business or its assets.

8. How do we protect your data?

The Company implements policies and procedures in order to provide the appropriate protection of your data.

In addition to this, modern means of technology are used as protection measures, physical guarding measures, as well as appropriate organizational measures.

9. What are your rights and how can you exercise them?

You have the right to know which personal data concerning you we hold and process, as well as its origin.
You have the right to request their correction and/or completion, so that they are complete and accurate, by providing any necessary document from which the need for completion or correction arises.
You have the right to request the restriction of the processing of your data or to refuse any further processing thereof, but the satisfaction of such requests, as long as they relate to data that is necessary for the drawing up or operation of an insurance contract, regardless of whether they were granted by you or anyone third, it implies the automatic termination by you of the respective contract or contracts, in accordance with the relevant conditions.
You have the right to request the deletion of data concerning you, as long as either the above-mentioned retention period has expired, or it is data that does not relate to the drawing up and operation of an insurance contract, nor to the proof or establishment or documentation of rights or obligations that directly or indirectly stem from it.
In addition, you have the right to request that the data you have provided to us be transferred to another company.
You also have the right to file a complaint with the Personal Data Protection Authority (www.dpa.gr), if you believe that you and your rights are being violated in any way.
The communication for the exercise of your above rights can be made on the phone 210 69 29 160 or by sending an e-mail to the address: info@star-group.gr.
The Company will take every possible measure to satisfy your requests and will respond to you within thirty (30) days and, only if this is not possible, the Company will inform you of the necessary extension of the above deadline, which however will not exceed sixty (60) additional days. Exercising the rights is free and there may be a charge only in cases of proven abuse of the right, which entails costs on the part of the Company.

10. Special Cases of Processing

Processing in case of concluding an insurance contract in favor of a third party: the signatory of the relevant Application and of this Declaration, declares that the signor has received the consent of the third party for the processing of the data or of the one with parental care in case of providing data of a minor.

Processing in the case of group insurance policies: the insurance taker has an obligation to inform the insured about the content of this policy, as well as to obtain their consent for the processing of their personal data, in accordance with this policy, both before the conclusion of the relevant contract, and during its operation.

11. Transmission of information to a third country

The Company, in the context of its compliance with the rules of the automatic exchange of information in the tax sector, as they derive from the country's international obligations sanctioned by Greek law, may proceed with the transmission of your personal data to competent national authorities, in order to be forwarded to the respective authorities of third countries.

Also, the Company transmits personal data - sensitive or not - to insurance / reinsurance companies, organizations and insurance brokers of third countries with whom it has a contract and which serve the purpose of insurance mediation.

We will not disclose your personal data to natural or legal persons who are not authorized to process it.

12. Changes to Policy

We may revise this privacy policy from time to time.