PRIVACY POLICY
This privacy notice aims to inform personal data subjects about the manner in which their data is collected, processed, disseminated, stored and the security measures taken for their data.
Bazuar në :
- The Constitution of the Republic of Albania,
- Law No. 52-2014 “On insurance and reinsurance activity”
- LAW No. 124/2024 “On the Protection of Personal Data”
SICRED SHA carries out the lawful processing of personal data by respecting and guaranteeing fundamental human rights and freedoms and, in particular, the right to privacy. Data related to the life and health insurance of its insured persons, which are obtained directly and solely for the purposes of life and health insurance under the voluntary insurance contract, from the insured person, are processed based on the principle of confidentiality in voluntary insurance, which means preventing the use for non-life and health insurance purposes, and outside the scope of the insurance contract, of the data obtained and their unlawful disclosure.
A - DATA PROTECTION
Data protection is based on:
- Processing fairly and lawfully;
- Collection for specific, clearly defined, and legitimate purposes and processing in accordance with those purposes;
- The adequacy of the data, which must be related to the purpose of the processing and not exceed this purpose;
- The accuracy of the data must be ensured and, where necessary, updated; every reasonable step must be taken to erase or correct inaccurate or incomplete data, having regard to the purposes for which they were collected or for which they are further processed;
- Keeping in a form that permits identification of data subjects for a period of time, but no longer than is necessary for the purpose for which they were collected or further processed.
B - PROCESSING FOR VOLUNTARY INSURANCE PURPOSES
Personal data, collected for any purpose, may be further processed for life and health insurance purposes, under the voluntary insurance contract, ensuring that they are not processed beyond the consent given by the insured individual and in no case to take coercive measures or decisions even outside the scope of the insurance contract for an insured individual.
- Personal data is used only by persons who are obligated to maintain confidentiality.
- In cases where the use of data is made in a form that allows the identification of the data subject, the data must be encrypted immediately, so that the subjects are no longer identifiable. Encrypted personal data shall only be used by persons who are obliged to maintain confidentiality.
C - RIGHTS OF THE DATA SUBJECT
Right of access:
- Every person has the right to receive from the controller, free of charge and upon written request:
a) confirmation of whether or not personal data are being processed, information on the purpose of the processing, the categories of data processed and the recipients and categories of recipients to whom the personal data are disclosed;
b) in an intelligible form, the personal data and available information on their source;
- The controller, within 30 days from the date of receipt of the request, informs the data subject or explains to him the reasons for not providing the information.
- The right of access is exercised in accordance with the constitutional principles of freedom of expression and information, freedom of the press and professional secrecy and may be restricted if it violates the interests of national security, the prevention and prosecution of criminal offenses.
- The right of access cannot be exercised in cases where personal data, collected for the purpose of voluntary life and health insurance, are further processed for statistical purposes.
- If access is denied, the data subject may request the Commissioner to review the exemption in the specific case. The Commissioner shall inform the data subject of the measures taken.
D - CONTROLLER
SiCRED sh.a. (life insurance company)
St. BRIGADA VIII , villa 3/1,
Tirana, Albania
https://www.sicred.com.al
E - RIGHT TO REQUEST BLOCKING, CORRECTION, DELETION
- Every data subject has the right to request the blocking, correction or deletion of data free of charge, when he/she becomes aware that the data about him/her are not correct, true, complete or have been processed and collected in violation of the provisions of this law.
- The controller, within 30 days from the date of receipt of the data subject’s request, must inform him/her of the lawful processing of the data, the performance or non-performance of blocking, correction or deletion.
- When the controller fails to block, correct or delete the data requested by him, the data subject has the right to complain to the commissioner.
F - DISCLOSURE OF PERSONAL DATA
SICRED SHA does not transmit your personal data to third parties, except in cases where your express consent has been given to do so.
G - SECURITY MEASURES IN RELATION TO PERSONAL DATA
SICRED SHA has taken all measures to strictly comply with Law No. 124/2024 “On the Protection of Personal Data” and Law No. 52/2014 “On Insurance and Reinsurance” to secure personal data. This is achieved through the use of advanced and modern techniques to protect databases and computer systems.
H - RIGHT TO COMPLAINT
- Any person who claims that his or her rights, freedoms and legitimate interests regarding personal data have been violated has the right to complain or notify the Commissioner and request his or her intervention to restore the violated right. Following this complaint, in accordance with the Code of Civil Procedure, the data subject may appeal to the court.
Commissioner for the Right to Information and Personal Data Protection
St. “Abdi Toptani”, Bld. 5, Postal Code
1001, Tiranë, Shqipëri
https://www.idp.al
- If the data subject has filed an appeal, the controller has no right to change the personal data until the final decision is made.
I - VISITORS TO OUR WEBSITE
SICRED SHA has the official website of the institution. www.sicred.com.al Through it, SICRED SHA publishes and collects information. The purpose of publishing and collecting information via the internet is to be as close as possible to users.
For the visitors of www.sicred.com.al The system collects standard information related to clicks on various sections of this site. We encourage you to read the privacy statements on our website that you visit.
This information is collected for statistical purposes and to study who consults our website, without making visitors identifiable. We make no attempt to find out the identity of visitors who have visited our website.
If we want to collect personally identifiable information through our website, we will make it clear to you when we collect personal information and explain what we intend to do with it.
J - LINKS TO OTHER SITES
This privacy notice does not cover links between this site and other sites. We encourage you to read the privacy statements of other websites you visit.
K - OTHER
SICRED SHA reserves the right to change or modify this information at any time, in accordance with any possible changes in legislation in the field of voluntary life and health insurance, personal data protection, and privacy.
Through the above explanation, SICRED SHA hopes to have informed you accurately and completely about your privacy issues. If you have any questions, complaints/requests, or remarks about these issues, do not hesitate to contact us at the following address:
SICRED sh.a. (life insurance company)
St. BRIGADA VIII , villa 3/1,
Tirana, Albania
https://www.sicred.com.al
