Information on rights of the data subject
In relation to the processing of your personal data, you have the following rights in accordance with the applicable data protection legislation: the right of access to and be informed about your personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of your personal data.
Right of access to your personal data
You have the right to obtain confirmation as to whether we are processing your personal data, and if so, to request access to its content (e.g. obtaining a copy of your personal data in electronic or printed form). You are entitled to one (free) copy of your personal data, and we may charge a reasonable fee for additional copies, taking into account the cost of preparing the copy. Exercising the right of access to your personal data should not negatively affect the rights or freedoms of others. However, Zavarovalnica Triglav, d.d. may, in certain cases, partially or fully refuse your request to exercise the right of access to your personal data.
Right to rectification
You have the right to have inaccurate personal data corrected or to have incomplete personal data completed. You are also generally required to notify us of any significant changes to your personal data. If you request rectification of your personal data, we reserve the right to request evidence of the change or to ask for a document that indisputably proves that the personal data we hold or process is incorrect.
Right to erasure
You have the right to request the erasure of your personal data if:
- The insurer has unintentionally collected your personal data, which is clearly unnecessary for the specific processing;
- The insurer no longer needs your personal data for the purposes for which it was collected or is being processed;
- You withdraw your consent to the processing of your personal data;
- You object to the processing of your personal data, and there are no overriding legitimate grounds for processing, or you object to the processing of your personal data for direct marketing purposes;
- Your personal data is being processed unlawfully;
- The insurer must erase your personal data to comply with its legal obligations;
- The insurer collected your personal data in connection with the offer of information society services under Article 8(1) of the General Data Protection Regulation.
However, despite the above, Zavarovalnica Triglav, d.d. may not be required to fulfil your request for erasure, particularly when there is a legal basis for the continued processing of your personal data or when the processing is necessary to fulfil a legal obligation under national or EU law, or for the establishment or defence of legal claims.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data (i.e. to cease processing your personal data and only store it) in the following cases:
- You exercise your right to rectification of your personal data, and the restriction applies for the period during which the decision regarding this right is made;
- You believe that the processing of your personal data is unlawful, but you do not want your personal data to be erased;
- The personal data we process about you is necessary for the establishment, exercise or defence of legal claims, while Zavarovalnica Triglav, d.d. no longer needs it and would otherwise erase it;
- You exercise your right to object to the processing of your personal data, which we conduct based on legitimate interest, for the period while it is verified whether our legitimate interests override your reasons.
When the processing of personal data is restricted, Zavarovalnica Triglav, d.d. may process your personal data only with your consent, for the establishment or defence of legal claims, to protect the rights of another natural or legal person or for reasons of significant public interest.
Right to data portability
Where Zavarovalnica Triglav, d.d. processes your personal data by automated means based on your consent or a contract, you may request that we transfer the personal data you have provided to another controller in a structured, commonly used, and machine-readable format, if this is feasible or if the state-of-the-art permits. You may also request the transfer of your personal data to yourself in the same way and under the same conditions. However, you may not request the transfer if it would adversely affect the rights and freedoms of others.
Right to object
You may object to the processing of your personal data by Zavarovalnica Triglav, d.d. based on legitimate or compelling legitimate interests. If you object to the processing of your personal data for a specific purpose, we will no longer process your personal data for that purpose, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If we receive an objection to the processing of your personal data based on legitimate interests for direct marketing purposes, including profiling (where this is related to direct marketing), we will, without exception, stop processing your personal data for those purposes.
Consent to the processing of personal data and right to withdraw consent
In the context of the consent provided for the processing of personal data (for one or more specific purposes), you have the right to withdraw your consent at any time by submitting a written request. The withdrawal of consent does not affect the lawfulness of the processing that was carried out based on the consent prior to its withdrawal.
You can provide and withdraw your consent to the processing of your personal data by sending an email to info@triglav.si or by using the online forms of Zavarovalnica Triglav, d.d. The form can be downloaded here:
- Consent to the processing of personal data
- Withdrawal of consent to the processing of personal data
You can send us your requests regarding the processing of your personal data:
- To our freephone number 080 555 555,
- To our address Zavarovalnica Triglav, d.d., Miklošičeva cesta 19, 1000 Ljubljana, with the note: "For DPO",
- Via email to the address dpo@triglav.si
To help identify the applicant more quickly and facilitate the resolution of your request, we recommend that you provide your full name, tax number (for unique identification) and the preferred contact details (phone number/email address/postal address) where you would like to receive a response when submitting your request.
The requests received by Zavarovalnica Triglav, d.d. are handled by the authorised data protection officer (contact: dpo@triglav.si) within the legally prescribed time limits. The authorised data protection officer is also available for further clarification regarding the processing of your personal data and for complaints related to the processing of personal data at Zavarovalnica Triglav, d.d.
We reserve the right to contact you during the resolution of your request in order to verify your identity, prevent potential misuse and ensure a comprehensive handling of your request when it does not contain all the information necessary for its processing.
Complaint to the Information Commissioner
Every data subject has the right to file a complaint with the supervisory authority for data protection if they believe that their personal data is being collected or otherwise processed in violation of applicable data protection laws.
The supervisory authority for data protection in Slovenia is:
Information Commissioner, Dunajska cesta 22, 1000 Ljubljana.
Website: www.ip-rs.si
Right to general judicial protection of data subject rights
A data subject who believes that Zavarovalnica Triglav, d.d. is violating their rights under the General Data Protection Regulation or the laws governing the processing or protection of personal data may seek judicial redress throughout the duration of the violation. This right may be exercised without the need to first pursue remedies under the provisions of the Personal Data Protection Act (ZVOP-2) or other legal avenues.
