Costa Duarte - Corretor de Seguros, S.A. ("Costa Duarte") as insurance intermediary needs to regularly gather personal data whilst recognising that Data Subjects are entitled to total respect of their private and family life.
You may also obtain further information at CNPD – Comissão Nacional de Proteção de Dados at www.cnpd.pt
The data controller is Costa Duarte - Corretor de Seguros, S.A. (“Costa Duarte”), VAT no. 503976555, with a Share Capital of €123,000.00, insurance intermediary registered on 27/01/2007 with ASF - Autoridade de Supervisão de Seguros e Fundos de Pensões, in the category of Insurance Broker, under no. 607084984/3, authorized to practice insurance distribution services in both the Life and Non-life branches, which can be verified and confirmed at www.asf.com.pt
Costa Duarte - Corretor de Seguros, S.A.
Att. Data Protection Officer
Avª António Augusto Aguiar, 130 - 4º, 1050-020 Lisboa
Costa Duarte maintains strict secrecy from third parties of all facts or information of which it has knowledge arising from performing its duties, and it also complies with and ensures that others comply with data security rules and systems, as well as control of the circulation of the mentioned information.
Personal data supplied through the relation established with Costa Duarte is processed in compliance with the legally applicable precepts, namely:
Personal data is processed for purpose, lawfulness and stored for the time strictly necessary for fulfilling the respective aims, according to the following terms:
In case of some risks to be transferred, namely in the case of insurance workmen’s compensation, personal accidents, health and life polices, among others, Costa Duarte may process health data, either as part of the pre-contractual relation to analyse the proposed risk and negotiate contractual conditions, or as part of managing the contractual relation, activation of the coverage, claims management and in contract renewal and amendment processes.
All data entered in this typology are treated with secrecy and confidentiality, have been adopted the necessary technical and organizational measures.
Access to personal data is given to Costa Duarte personnel and to all parties participating in the contract in question that need the said data to carry out pre-contractual diligences and contractual or legal obligations for insurance distribution activities.
Personal data may be communicated to other companies that are in a dominant or control relation, already set up or to be set up, of which Costa Duarte is a party thereof or comes to be a party thereof, whose identification and contact data may be, at any time, requested from the DPO, and may be processed by other entities for which Costa Duarte acts, if such is the case, as a processor or is jointly responsible for the processing, to which Costa Duarte has subcontracted its processing and also by its insurance cointermediators or Persons Directly Involved in the Insurance Distribution Activity (PDEADS).
Personal data may also be processed by other Insurance Companies or co-intermediators as part of claims management
As part of managing the insurance’s pre-contractual and contractual relation and for compliance with the duties of information, clarification, transmission, advice, assistance and registration imposed by applicable laws, Costa Duarte may collect information about the Data Subject deemed relevant for evaluating the risk to be insured and for the Insurance Companies to establish the contractual conditions of the insurance. The said information may be obtained from sources accessible to the public, public entities, the sector’s associations, existing computer platforms or specialised companies, to complement or confirm the information provided by the Data Subject.
Data Subject has the right to request the following from Costa Duarte and, through the latter, from the Insurance Companies, by submitting a written request sent to the DPO:
Through a written request, sent to the DPO, Data Subject is also entitled to::
Data Subject may also request more detailed information from the DPO, namely about the purposes, lawfulness basis and storage periods, and also submit complaints to the DPO about how his personal data is processed, without prejudice of also submitting such to the Portuguese Data Protection Authority (CNPD)
Data Subjects shall provide the necessary personal data for compliance with the respective pre-contractual and contractual obligations and diligences and the data that Costa Duarte is legally required to collect.
Without this data, Costa Duarte must, as a general rule, decline from placing the contract or an order at an insurance company or pension fund management firm.
Costa Duarte, in carrying out insurance distribution activities in the Life branch, is bound to the legal provisions on money laundering. For us to comply with this legal obligation, the Personal Data Subject must submit the necessary information and documentation and, during the commercial relation, must immediately notify any alterations or confirm that the information is up to date. If the Data Subject does not provide us with the necessary information and documentation, we will be unable to establish or continue the commercial relation or proceed with the Data Subject’s requests.
Personal Data Subjects must maintain Costa Duarte informed about any alterations to their personal data, namely within the terms and conditions stipulated in the respective policies.
Costa Duarte applies adequate technical and organisational measures to protect Personal Data against loss, destruction or damage, either accidental or illicit, and thereby ensure that the provided data is protected against access or utilisation by unauthorised third parties. Costa Duarte guarantees the privacy and security in the transmission of data of its clients and of visitors to its website and other IT platforms, if it has them.
Personal data will be transmitted to countries outside the European Union only when necessary to carry out orders or requests by the Data Subject, by legal requirement or when the Data Subject has given us express authorisation for the purpose.
When necessary to rely on service providers from third countries, these are bound to comply with the instructions applicable to this matter, by signing an agreement of to fulfil standard European Union contractual clauses for compliance with the level of data protection applicable in the European Union
Although, as a rule, we do not perform automated data processing to define commercial profiles, we may need to define profiles within the scope of the services that were contracted or to be contracted.
Costa Duarte may define profiles to enable to provide information and advice about products and services by using assessment instruments. This approach enables to match communication and publicity to market demand.
Costa Duarte applies all suitable measures to safeguard your rights and liberties within this scope. If client profiles are created exclusively for commercial purposes, you may object to the definition of that profile by contacting the Data Protection Officer at the contacts shown above
Using cookies is a normal practice by websites, and most Internet browsers allow a user to accept, reject or delete cookies, namely by selecting the appropriate definitions in the browser.
For further information, please consult our Cookies Policy at www.costaduarte.pt
Lisbon, 30th September 2019