Privacy Policy

Personal Data Protection Policy Statement

In its capacity as an insurance intermediary (insurance broker), KARAVIAS UNDERWRITING AGENCY S.A. places great importance on protecting your personal data and undertakes to process it lawfully and transparently. This statement explains how and why we use your personal data. Please read it carefully.

Who Will Use Your Personal Data?

KARAVIAS UNDERWRITING AGENCY S.A. will use your personal data as the Data Controller.

Address: 12 Evripidou Street, Athens 105 59, Greece. Telephone: +30 210 3640618. Email: info@gkaravias.gr.

If you have questions about the processing of your personal data, wish to exercise your rights or lodge a complaint, contact our Data Protection Officer by telephone, by letter addressed to the company marked “For the Attention of the Data Protection Officer”, or by email at dpo@gkaravias.gr.

How We Use Your Personal Data

KARAVIAS UNDERWRITING AGENCY S.A. uses your personal data for the following purposes:

• Underwriting, reinsurance and management of the insurance risk, including calculation of the premium.
• Concluding, issuing and administering the insurance policy.
• Providing the insurance cover under your policy, including assessment, examination and settlement of claims when an insured event occurs.
• Providing information about your policy and other products, and obtaining feedback on satisfaction with our services.
• Compliance with applicable legal and regulatory obligations, including handling complaints and grievances and preventing insurance fraud.

We may process personal data as necessary to undertake pre-contractual steps and perform the terms of your policy, should the insurance contract be concluded.

What Personal Data Means

Personal data means any information relating to you through which you are identified or can be identified, either by that information alone or by combining it with other information in our possession. Processing is governed by the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

Processing includes any operation or set of operations performed on personal data or sets of personal data, such as collection, recording, organisation, erasure, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or other availability, alignment or combination, restriction, erasure or destruction.

The original statement says that KARAVIAS UNDERWRITING AGENCY S.A. does not itself process special categories of your data, such as genetic or biometric data or information relating to health or sexual orientation. Such data, particularly health information, may be processed by your insurer to perform an insurance contract and provide health cover. Before taking out health insurance, you should review your selected insurer’s data protection information and any applicable consent requirements for processing health data.

What Personal Data We Use

We process only the personal data necessary for the purposes described above. The original policy identifies:

• Identity information, including name, identity-card number and tax identification number.
• Contact details, including address, telephone number and email.
• Bank account number (IBAN) or credit-card details.
• Other personal data held in the company’s records.

We may also obtain information on financial behaviour through the ICAP database, and property information from the Hellenic Cadastre and locally competent land registry offices.

Where an insured event occurs, additional information may be requested about the circumstances, together with supporting documentation, such as a tax assessment or confirmations of the absence of loan debt in the case of mortgaged properties.

With Whom We Share Your Personal Data

We may share data with external organisations such as your insurance intermediary and authorised loss adjusters when pre-insurance inspections or insured events arise. We may also share relevant information with the technical departments of communications and advertising partners and with collaborating reinsurers or brokers.

The company states that measures have been taken to transmit only the data strictly necessary and to ensure that the processing is lawful.

We will not disclose your personal data to unrelated third parties unless required by law or pursuant to a lawful request or order from a public authority. The original statement also says that personal data will not be provided to third parties for their own commercial marketing activities.

Why We Need to Collect Your Personal Data

Collection is necessary to arrange and administer insurance. Without the required information, the company may be unable to conclude the insurance policy or provide the services and cover contemplated by it.

Your Rights Regarding Personal Data

Subject to the applicable legal conditions, you may exercise rights of access, rectification and data portability and, where statutory requirements are met, erasure, restriction of processing and objection.

For information on exercising these rights, refer to gkaravias.gr or contact the Data Protection Officer at dpo@gkaravias.gr. Requests are generally free of charge unless manifestly unfounded or excessive.

How to Lodge a Complaint

If you believe that the protection of your personal data has been infringed, you may contact the Hellenic Data Protection Authority, 1–3 Kifisias Avenue, Athens 115 23, Greece, www.dpa.gr.

How Long We Retain Your Personal Data

According to the original policy statement, personal data is retained and processed for the purposes described above while your policy remains in force and for up to 20 years after its termination for any reason, unless legislation prescribes a different period. If no policy is concluded, the stated retention period is up to five years.

Technical and Organisational Security Measures

The company states that its corporate procedures provide for suitable technical and organisational safeguards, which are applied to the information systems and platforms used to collect, process and use data. These measures include:

• Physical access controls to prevent unauthorised entry to data-processing systems.
• System access controls preventing unauthorised persons from using data-processing systems.
• Data access controls ensuring authorised users access only the data for which they have permission, and preventing unauthorised reading, copying, modification or deletion.
• Transmission controls designed to prevent unauthorised reading, copying, modification or removal of data during electronic transmission, transport or recording, and allowing identification of recipients and processors.
• Input controls enabling retrospective verification of whether and by whom data was entered, modified or deleted.
• Processor/contractor controls requiring personal data handled by third parties to be processed only on the client’s instructions.
• Availability controls protecting data against accidental destruction or loss.
• Separation controls allowing data collected for different purposes to be processed separately.

The original information notice states that it took effect on 3 August 2018 and asks visitors to review its contents periodically for changes. This is a translation of the historical source notice and requires a separate legal and operational review before publication as an up-to-date privacy statement.

Contact

For insurance enquiries, call +30 210 36 40 618.