Data Privacy Policy www.gescobert.es

In this document you will find information of interest regarding how Grupo Concentra processes your personal data and the rights you have under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

 1. Identity and contact details of the Controller

 The company affected by this Privacy Policy is listed below:

SOCIETYNIFHOME
GESCOBERT INSURANCE BROKERAGE SLB59191296Carrer de Veneçuela nº 105, block. 1.2. 2º 1ª, 08019, Barcelona

You can contact GESCOBERT CORREDURIA DE SEGUROS SL through the following channels:

  • In person or by postal mail addressed to the entity’s address.
  • By email to  rgpd@concentragrupo.com or by contacting the Data Protection Officer through the same channel enabled for this purpose.

1.1 Entities of the Concentra Group

The entities that make up the Concentra Group are the following:

  • SARTORIO INSURANCE AGENCY, SLU
  • COBERGEST GRUPO CONCENTRA, SLU
  • UBL BROKERS GRUPO CONCENTRA, SAU
  • GESCOBERT INSURANCE BROKERAGE, SLU
  • CONCENTRATES WARRANTIES, SLU
  • HISPANIA GLOBAL UNDERWRITING, SL
  • HISPANIA RISK BROKER, S.A.
  • HISPANIA CAPITAL INVESTMENT, SL
  • CONCENTRA INVESTMENTS SLU

2. Processing of personal data

2.1 Staff selection

GESCOBERT CORREDURIA DE SEGUROS SL will process the data relating to the candidates for the purpose of managing the selection processes for jobs at GESCOBERT CORREDURIA DE SEGUROS SL or the Concentra Group.

Legal basis: The basis that legitimizes the processing is the consent of the interested party in the case of the presentation of self-candidacies when there is no open selection process or in the application of pre-contractual measures when their data comes from a platform or selection company.

Retention period: The data provided will be kept for a period of 1 year. Once this period has elapsed or you request deletion or revoke the consent given to participate in this process, your personal data will be deleted:

Recipients: The data may be communicated to the companies of the group for the management of vacancies in application of CD 48 of the GDPR. You can obtain more information about the entities belonging to the Concentra Group by consulting the “Companies that Make Up the Concentra Group” section at www.concentragrupo.com . Outside of this case, data will not be transferred to third parties unless legally required to do so.

2.2 Budget management

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to prepare and present you with the quote for the selected insurance policy. If you do not provide the data, we will not be able to make said calculation.

Legal basis: The basis that legitimizes the treatment is the application of pre-contractual in relation to the preparation of the budget and compliance with legal obligations in relation to Royal Decree-Law 3/2020, Law 50/1980, of October 8, on Insurance Contracts; as well as with Law 10/2010 on the Prevention of Money Laundering and the Financing of Terrorism and the legitimate interest to prevent fraud and avoid anomalous practices that could cause economic or reputational damages.

Retention period: The data provided will be retained for the time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are hereby informed that your data will need to be communicated to the corresponding insurance companies for the issuance of the quote and to other companies in the Concentra group in application of the legitimate interest in accordance with the provisions of CD 48 of the GDPR. You can obtain more information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that Make Up the Concentra Group” section at www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.3 Brokerage client management 

GESCOBERT CORREDURIA DE SEGUROS SL will process the data of interested parties who contact us through the online questionnaire, or in the communications we may have by telephone, chat, WhatsApp or any other means of communication, in order to:

  • Analyze profiles and evaluate which of our products or services are most suitable.
  • Provide insurance brokerage services and manage the relationship with the USER.
  • Formalize the contracting of the corresponding insurance policy; manage the information that must be provided to the policyholder, insured and beneficiary of the insurance, and provide assistance and advice if necessary.
  • Inform you about news, products, offers and services similar to those previously contracted.
  • Fighting fraud in procurement.

Legal basis: The basis that legitimizes the treatment is the fulfillment of the contractual obligations in relation to the subscription of the corresponding policy and the fulfillment of the legal obligations in relation to Royal Decree-Law 3/2020. Regarding communications about products or services similar to those previously contracted, legitimate interest will apply. In this sense, the Law on the Information Services Society (hereinafter, the “LSSI”) allows the provider to send commercial communications regarding products or services of its own company that are similar to those that were initially contracted with the client.

  • You may object to the processing of your data for this purpose at any time, free of charge, and in each electronic communication made, you may unsubscribe to stop receiving this type of communication. Likewise, the “Rights” section of this Policy describes how to request to unsubscribe from this type of communication.
  • The legitimate interest in preventing fraud and avoiding anomalous practices that could cause economic or reputational damage.

Storage period: The data provided will be kept for 6 years from the end of the corresponding contract and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities. In the case of Life insurance, the period will be as indicated by Law. Regarding the personal data necessary to carry out commercial communications, they will be kept until the interested party objects through the mechanisms enabled to process the cancellation of the sending of commercial communications.

Recipients: You are hereby informed that your data will need to be communicated to the relevant insurance companies in order to formalise the corresponding contract. Your data will also be communicated to banking entities for the management of collection and to other companies in the Concentra group in application of the legitimate interest pursuant to the provisions of CD 48 of the GDPR. You can obtain further information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that make up the Concentra Group” section at www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.4 Supplier management

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to manage the contracted services

Legal basis: The basis that legitimizes the treatment will be the execution of the contract itself and legitimate interest in application of article 19 LOPDGDD.

Retention period: Your data will be retained for the duration of the contractual relationship and will subsequently be blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are hereby informed that your data may be communicated to other companies in the Concentra Group in accordance with the provisions of CD 48 of the GDPR. You can obtain further information about the entities belonging to the Concentra Group by consulting the “Companies that Make Up the Concentra Group” section at www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.5 Management of contact data and contact forms

GESCOBERT CORREDURÍA DE SEGUROS SL will process your data in order to maintain commercial, financial and business relationships.

Legal basis: The basis that legitimises the processing of data by individual entrepreneurs and liberal professionals is the legitimate interest in application of article 19 LOPDGDD. As for the contact form, the basis that legitimises the processing is the legitimate interest since your identification and contact details are suitable to respond to your request for information, necessary to contact you and resolve your queries and proportional in the sense that the minimum data is processed to fulfil the intended purpose.

Retention period: Your data will be retained for the duration of the contractual relationship and will subsequently be blocked for the period of time necessary to address any potential legal liabilities. Regarding the contact form, your data will be retained for the time necessary to process your request.

Recipients: You are hereby informed that your data may be communicated to other companies in the Concentra Group in accordance with the provisions of CD 48 of the GDPR. You can obtain further information about those belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that make up the Concentra Group” section at www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.6 Sending commercial communications

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to send you commercial communications about our products or services that may be of interest to you.

Legal basis: The basis that legitimizes the processing is the consent previously granted or in application of the legitimate interest provided for in article 21.2 of the LSSI in the event that you are a client and the service offered is similar to one previously contracted. Likewise, and in the event that you have given your consent, the entities belonging to Grupo Concentra may send you information about products or services that may be of interest to you. You can obtain more information about those belonging to Grupo Concentra by consulting point 1.1 of this policy and in the “Companies that Make Up Grupo Concentra” section at www.concentragrupo.com .

For this reason, like many other companies do, when you visit other websites we target ads to www.polizamedica.es, using various technologies such as pixels, advertising tags, cookies and identifiers from mobile phones, among others, as well as through some specific tools offered to us by certain websites, such as Facebook’s custom audience service. You can find more information in our cookie policy.

Retention period: Your data will be retained indefinitely until you revoke your consent, object to the processing or request the deletion of your data. In each communication, the user may object to receiving this type of information through the specific mechanisms for processing the cancellation, as well as request, where appropriate, their right to revoke consent, object or delete it.

Recipients: Your data may be communicated to other Grupo Concentra entities if you have authorized the sending of commercial communications by said entities. Outside of this case, your data will not be communicated to third parties unless legally required.

Rights: You may withdraw your consent and exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.7 Conduct satisfaction surveys and analyze the improvement of the user experience and our service

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to send satisfaction surveys to our clients to evaluate the quality of our services and those of third parties that may participate in your contracting process (such as the insurance companies with which you ultimately contract).

Legal basis: The basis that legitimizes the processing of the data is the consent of the interested party when completing the survey and the legitimate interest to control the quality of the services and evaluate the satisfaction of its customers. GESTCOBERT may contact you, by any means or channel that you have authorized us, to request your assessment of the products and services offered and/or purchased and to carry out an analysis of this information to improve the services.

This treatment responds to the need to adapt its operations and the products and services offered to your preferences and expectations with the commitment to improve the quality of the service provided, for which it is necessary to know your opinion.

At any time, you may refuse to provide your feedback, as well as communicate your opposition to being contacted for this purpose.

Retention period: Your data will be retained for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.8 Internal information system

Each entity belonging to GRUPO CONCENTRA and in this case, GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to receive and decide on the admission for processing of the communication received; carry out the appropriate investigations of the reported facts and, where appropriate, adopt the corresponding corrective measures and keep the complainant or informant informed about the admission or non-admission of the communication, as well as the progress and results of the investigation process.

Legal basis: The basis that legitimizes the treatment is the application of Law 2/2023 of February 20 regulating the protection of persons who report regulatory violations and the fight against corruption in the case of a company obliged in accordance with the provisions of article 10 or the fulfillment of a mission carried out in the public interest or exercise of public powers conferred on the data controller in the case of a company not obliged.

Conservation period: the personal data will be processed within a maximum period of three months from receipt of the communication or, if no acknowledgement of receipt was sent to the informant, three months from the expiry of the seven calendar days available to acknowledge receipt of the communication. The aforementioned period may be extended by three more months in cases of particular complexity. After the aforementioned period has elapsed without investigation actions having been initiated, the data will be deleted from the communication system, except for the purpose of maintaining evidence of the system’s operation and in an anonymous form.

Recipients: You are informed that your data may be communicated to public bodies or institutions, judges and courts when necessary for the adoption of disciplinary measures, for the processing of judicial proceedings that may be appropriate or in those cases in which it is legally required and to the Public Prosecutor’s Office, when the procedure is within its jurisdiction.

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.9 Complaints and claims

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to address any complaints or claims, understand what has happened and be able to provide a solution to the problem.

Legal basis: The basis that legitimizes the processing is legitimate interest since your identification and contact data are suitable and necessary to contact you and resolve your complaint or claim.

Retention period: Your data will be retained for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are hereby informed that your data may be communicated to other companies in the Concentra Group in accordance with the provisions of CD 48 of the GDPR. You can obtain further information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that make up the Concentra Group” section at  www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

2.10 Compliance with legal obligations

GESCOBERT CORREDURIA DE SEGUROS SL will process your data in order to comply with the laws that apply to us, and in particular, as insurance brokers, we must comply with obligations to prevent money laundering in the Life branches.

Legal basis: The basis that legitimizes the treatment is compliance with the legal obligations in relation to the subscription of the corresponding policy and compliance with the legal obligations in relation to the obligations regarding the prevention of money laundering, as a subject obliged by Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism, for which reason it will verify the personal data and communicate them to the competent bodies, in compliance with the provisions of this regulation.

Additionally, in relation to the previous basis, GESTCOBERT is protected by the legitimate interest to prevent money laundering, as well as to avoid anomalous practices that may cause economic or reputational damages.

Retention period: Your data will be retained for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are hereby informed that your data may be communicated to the competent authorities in compliance with legal obligations. You are hereby informed that your data may be communicated to other companies in the Concentra Group in accordance with the provisions of CD 48 of the GDPR. You can obtain further information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that make up the Concentra Group” section at www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

Likewise, GESCOBERT CORREDURIA DE SEGUROS SL carries out other types of processing related to the management of human resources, the management of data related to the directors and/or representatives, shareholders or partners of the Company that are not detailed in this Privacy Policy.

2.11 Creating Profiles

Gescobert will process your data to create a profile about you for analytical purposes, as well as to create targeting audiences, related to Gescobert’s business processes based on the information provided within the framework of the insurance project. This process allows us to know your browsing behavior, after accepting the Cookies Policy, to communicate to you, based on your user profile, the offers that may best suit you, as well as, to have new pricing variables that could be inferred from your purchasing and consumption habits to inform you of new services or coverage linked to the product subscribed by you, including, for this last purpose, data and information provided by third parties.

Legal Basis: The basis of legitimacy for the creation of a profile about you for analytical purposes is the consent given by you, allowing Gescobert to proceed with the creation of your profile based on your personal characteristics, information about your browsing, the information obtained regarding your needs or preferences expressed by you in the acquisition of the products and information obtained from third parties, according to your consumption habits.

  • The basis for legitimation for the creation of a profile about you for the creation of targeting audiences is the legitimate interest of Gescobert, allowing Gescobert to proceed with the creation of your profile based on your personal characteristics, information about your browsing, the information obtained regarding your needs or preferences expressed by you in the acquisition of the products and information obtained from third parties, according to your consumption habits.
  • This purpose responds to the need, based on the analyses carried out, to provide you with a management of the requested product that is more tailored to your real needs, including better pricing and proposals for services linked to the subscribed product. The information relating to your profile will be treated in a secure and confidential manner, being processed only in systems that analyse the information obtained in an automated manner.

Furthermore, you may, at any time, express your wish not to be subject to this processing, exercising your right to object to it.

Retention period: Your data will be retained for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are hereby informed that your data may be communicated to other companies in the Concentra Group in accordance with the provisions of CD 48 of the GDPR. You can obtain further information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the “Companies that make up the Concentra Group” section at  www.concentragrupo.com .

Rights: You may exercise your rights regarding data protection as indicated in the “Exercise of Rights” section of this Privacy Policy.

3. Exercise of rights

We inform you that you may exercise the following rights:

  1. Right of access to your personal data to know which are being processed;
  2. Right to rectification of any inaccurate personal data;
  3. Right to delete your personal data, where possible;
  4. Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the processing of the data is doubtful, in which case, we may retain the data for the exercise or defense of claims.
  5. Right to object to the processing of your personal data, when the legal basis that enables us to process it is legitimate interest. GESCOBERT CORREDURIA DE SEGUROS SL will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims.
  6. Right to the portability of your data, when the legal basis that enables us to process them as indicated is your consent.

These rights may be exercised free of charge by the interested party, and where applicable, by his or her representative, by means of a written request addressed to  rgpd@concentragrupo.com

In addition to the above rights, the interested party shall have the right to withdraw the consent given at any time without such withdrawal of consent affecting the lawfulness of the processing prior to its withdrawal. GESCOBERT CORREDURIA DE SEGUROS SL may continue to process the data of the interested party to the extent permitted by applicable law.

GESCOBERT CORREDURIA DE SEGUROS SL reminds the interested party that they have the right to file a claim with the competent Control Authority of the country in which they are located, with a national control authority (Spanish Data Protection Agency at C/Jorge Juan, 6. 28001- Madrid or telephone 912663517) or the respective regional authority.

 4. What security measures do we have in place?

GESCOBERT CORREDURIA DE SEGUROS SL is committed to fulfilling its obligation to keep personal data confidential and to safeguard them, and will take the necessary measures to prevent their alteration, loss, processing or unauthorized access, in accordance with the provisions of applicable regulations.

GESCOBERT CORREDURIA DE SEGUROS SL has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss and unauthorized processing and/or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, whether arising from human action or from the physical or natural environment, in accordance with the provisions of the applicable regulations.

5. Confidentiality

The personal data that we may collect through the website or through the various communications that we maintain with you will be treated confidentially, and we undertake to maintain secrecy regarding them in accordance with the provisions of the applicable legislation.

6. Links to other websites

This website may include hyperlinks to other sites that are not operated or controlled by GESCOBERT CORREDURIA DE SEGUROS SL. Therefore, GESCOBERT CORREDURIA DE SEGUROS SL does not guarantee, nor is it responsible for, the legality, reliability, usefulness, veracity and timeliness of the content of such websites or their privacy practices. Please, before providing your personal information to these websites other than GESCOBERT CORREDURIA DE SEGUROS SL, keep in mind that their compliance with data protection may differ from ours.

 7. Privacy Policy Update

The content of the data protection policy may be subject to modification to adapt it to legislative changes that may occur, as well as to criteria and positions issued by the control authorities. In any case, any modification to the Privacy Policy will be duly notified to the Data Subject so that he or she is informed of the changes made in the processing of his or her personal data and, if the applicable regulations so require, the Data Subject may give his or her consent.