Protection of personal data processing is one of the fundamental rights of natural persons.
EUROHERC insurance Plc., Zagreb, 282 Ulica grada Vukovara, VAT Reg No: 22694857747 (hereinafter referred to as the Company) is collecting, processing and uses personal data in accordance with the General Data Protection Regulation (hereinafter referred to as the Regulation).
The Company is responsible for ensuring appropriate safeguards of personal data processing and is implementing all appropriate organisational and technical measures accordingly.
Information the Company is responsible to provide, in accordance with the Regulation, to the natural person whose personal data the Company is collecting or processing, are contained in the Company’s IOOP form (Information in relation to the processing of personal data).
If you have any request relating to how the Company uses your personal data or if you want to object to the processing of personal data, after completing the request form for exercising data subject rights, you can address to the data protection officer at one of the Company’s sales points or directly to the e-mail firstname.lastname@example.org.
Upon undisputable identification of yourself (through insight into a document containing photograph or a copy of the document with handwritten signature of data subjects if you send the request by e-mail), the Company will act on the submitted request.
If the Company has reasonable doubts regarding your identification, when you are submitting the request, according the provisions of the Regulation, the Company can ask for additional information necessary for your identification.
The Company shall without delay respond to your request regarding the actions carried out, at latest within one month of receipt of your request.
That period may be extended by two further months, taking into account the complexity and number of received requests.
The Company shall inform you of any such extension within one month of receipt of the request, together with the reasons of such extension.
If the Company does not act on your request, they will inform you without delay, at latest within one month of submission of your request, about the reasons for inaction and the possibility of lodging the objection to the Personal Data Protection Agency.
The Company is entitled to charge a reasonable fee taking into account administrative costs or refuse to act on your request if your requests are manifestly unfounded or excessive (e.g. if you are frequently repeating the request).