Privacy Notice

(Last update: June 2020)

This notice explains what personal data we collect, process and share, why and how we process it, and how to contact us.

xArt Consult Ltd acts as a personal data controller in connection with insurance brokerage activity. We maintain appropriate administrative, technical and organisational measures to protect personal data.

Categories of data

• Identification data (name, personal ID number, identity document, etc.)
• Contact data (email, phone, address)
• Financial information and information needed for risk assessment
• AML/CTF information (source of funds, etc.)
• Health information where required for a contract or a claim
• Anonymous cookie data

Purposes

• Communication
• Preparation, conclusion, administration and servicing of insurance contracts
• Processing payments and claims
• Compliance with legal requirements (including AML)
• Fraud and crime prevention
• Responding to enquiries, requests and complaints

Legal basis

Processing is carried out to fulfil legal and contractual obligations and for the activities comprising the distribution of insurance products.

Consent

Where applicable, we may request consent; you may withdraw consent.

Retention

Data is retained only as long as necessary (e.g., limitation periods under the Insurance Code; claim documents – 5 years; AML data – 5 years).

Recipients

We share data with insurers, service providers (experts, couriers, banks, etc.) and public authorities where legally required.

Your rights

Access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to the Bulgarian data protection authority.

Contact
E: marko.markov@xartconsult.com
M: +359 888 519 047