Privacy notice for insurance claims handling and the prior authorization of medical treatment

From whom do we collect your data?

directly from the insured person when submitting the claim or in response to a subsequent request for additional information, where it is determined that further medical or other documentation is required in order to decide on the claim; and
of healthcare institutions with which the Company has established business cooperation.

The type of information do we collect?

For the purpose of processing a claim for payment of insurance benefits: the insured person’s full name, date and country of birth, residential address, citizenship, the policyholder’s full name or company name, identity card number, policy number or insurance card number, contact telephone number, email address, bank account number, the account holder’s full name, and data concerning the insured person’s health.
For the purpose of obtaining prior authorization for medical treatment: the insured person’s full name and date of birth, the policyholder’s full name or company name, policy number or insurance card number, contact telephone number, email address, and data concerning the insured person’s health

Why do we need your data and how long do we keep it?

purpose	legal basis	retention period
performance of obligations under the insurance contract	Insurance contract	for 10 years from the date on which the insurance benefit is determined or the agreed amount is paid.
prior authorization for medical treatment	Insurance contract
processing of data concerning the insured person’s health for the purpose of performing the insurance contract	consent
assessment of the applicant's satisfaction	legitimate interest	until the purpose for which the personal data is processed has been fulfilled
for statistical purposes, including risk assessment in connection with the renewal or conclusion of future insurance contracts, the application of actuarial principles and the detection and/or prevention of insurance fraud	legitimate interest	for 10 years from the date on which the insurance benefit is determined or the amounts agreed under the insurance contract are paid

Why do we need your data?

In order to perform the insurance contract and comply with our legal obligations.

With whom do we share your data?

Where necessary, we may share your personal data with third parties authorized to process personal data for the purposes specified above, including healthcare institutions; persons engaged by the Company to provide medical opinions or arrange medical treatment abroad; other service providers and business partners of the Company; members of the Generali Group; reinsurers and co-insurers; the National Bank of Serbia and other competent public authorities; and external auditors.

Where do we transfer your data?

Where applicable, to other companies within the Generali Group and to external partners, in accordance with the applicable provisions of the Law on Personal Data Protection.

Your personal data processing rights

You have a right to access, rectify, update and erase personal data, the right to restrict data processing, to object and to transfer the data.

Where the processing of your personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

If you believe that your personal data has been processed against the Law on Personal Data Protection, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Personal data processing relevant contact

E-mail: dpo@generali.rs

Privacy notice update

The company may update this Notice. All the updates will be posted on the Company's website: www.generali.rs.