Data Controller
- Data controller
- JORI ARMENGOL Y ASOCIADOS, CORREDURÍA DE SEGUROS Y REASEGUROS, S.L.
- Administrative authorisation
- Insurance brokerage authorised by the Spanish Directorate General of Insurance and Pension Funds, under administrative authorisation code J-0942
- CIF
- B-58.299.124
- Address
- C/ Roger de Llúria 124, 3.º Puerta 2, 08037 – Barcelona (Barcelona)
- Phone Number
- 93 476 33 50
- protecciondedatos@joriarmengol.com
The data controller is committed to the protection of the information it manages, not only for the due compliance with the regulations that govern us, but also for the confidentiality of the personal data entrusted to us. We provide you with information regarding the processing of personal data we carry out, with the aim that you can always know how we process your data and the rights you have.
For what purpose do we process your personal data?
Depending on the category of the interested party, we process the data you provide us with the following purposes:
| Category of interested party | Purposes |
|---|---|
| Contacts and potential clients | Manage the potential commercial and/or professional relationship and contact details. Attend to, process and manage queries raised and provide offers of our services and/or products that may be of interest to you. Telephone assistance through artificial intelligence systems: automated management and routing of incoming calls, handling of general queries, recording and transcription of conversations, improvement of service efficiency and referral to the appropriate department or person. |
| Clients | Manage the commercial and/or professional relationship, maintain accounting, administrative and payment management, as well as tax obligations. Attend to, process and manage queries raised and the information you require, and provide offers of our services and/or products that may be of interest to you. Telephone assistance through artificial intelligence systems, as indicated. |
| Suppliers | Manage the professional and/or commercial relationship, accounting, administrative and payment management, as well as tax obligations. |
| Candidates | Manage your data in the personnel selection process. |
| Web users | Manage the analysis of your browsing data. |
What is the legal basis for processing your data?
| Category | Legal basis |
|---|---|
| Potential clients | Art. 6.1.b GDPR: application, at the request of the interested party, of pre-contractual measures (budgets, service offers). Art. 6.1.f GDPR: legitimate interest (requested information, response to queries). Art. 6.1.a GDPR: consent of the interested party (sending commercial communications). |
| Clients | Art. 6.1.a GDPR: consent of the interested party. Art. 6.1.b GDPR: execution of a contract in which the interested party is a part. |
| Suppliers | Art. 6.1.b GDPR: execution of a contract in which the interested party is a part. |
| Candidates | Art. 6.1.a GDPR: consent of the interested party. |
| Web users | Art. 6.1.a GDPR: consent of the interested party. |
To whom will your data be communicated?
No communications of personal data are foreseen, unless expressly informed. Certain data, by virtue of the contractual relationship you maintain with us or current regulations, may be communicated to:
- Banks and financial entities, for the collection of contracted services.
- Competent public administrations in the sector, when established by current regulations.
- Google Ireland Limited, as the provider of the reCAPTCHA service that protects web forms against automated submissions. For this, it analyses technical data of the visit, such as the IP address and interaction with the page, which may be transferred to Google LLC (United States) under the Data Privacy Framework adequacy decision (art. 45 GDPR). Its use is governed by Google's privacy policy and terms of service.
How long will we keep your data?
The data will be kept for the time necessary depending on the purpose for which they were provided or collected for the correct provision of the service, as well as to address any possible liabilities that may arise or to comply with any other legal requirement.
What are your rights?
In relation to your personal data, you have the following rights:
- Right to request access to personal data concerning the interested party.
- Right to rectification or erasure.
- Right to object.
- Right to request restriction of processing.
- Right to data portability.
- Right not to be subject to decisions based solely on automated data processing.
You may exercise these rights before the data controller by writing to the registered office at C/ Roger de Llúria 124, 3.º Puerta 2 (08037 – Barcelona (Barcelona)) or by sending an email to protecciondedatos@joriarmengol.com.
Models, forms and more information about your rights are available on the website of the Spanish Data Protection Agency, www.aepd.es.
Right to withdraw consent
The data subject shall have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with the supervisory authority
If you believe that your data has not been processed correctly or your rights request has not been addressed, you may lodge a complaint with the Spanish Data Protection Agency: calle Jorge Juan, n.º 6 (28001 – Madrid), www.aepd.es.
If in the execution of our privacy and data protection policy we cause any damage, you may claim individually or collectively in the ordinary courts of your jurisdiction.
Telephone assistance through artificial intelligence systems
In addition to the purposes indicated for clients, insured parties, potential clients and other interlocutors who contact the entity, we may process your personal data through artificial intelligence systems intended for the management of telephone communications. In particular, your data may be processed to:
- Attend to and manage incoming telephone calls.
- Identify the reason for the call and direct it to the appropriate department or professional.
- Respond to general enquiries related to the services provided by the entity.
- Record and transcribe conversations held during the call.
- Maintain records of activity and traceability of communications.
- Ensure the quality, security and proper functioning of telephone assistance systems.
- Manage incidents, complaints or requests made by the data subjects.
During the conversation, identifying data, contact data, information related to insurance policies, claims, information requests and any other data voluntarily provided by the interlocutor within the framework of the enquiry made may be processed.
The legal basis for processing your data is the execution of pre-contractual measures requested by the data subject and/or the execution of the existing contractual relationship (art. 6.1.b GDPR); the legitimate interest of the controller in adequately organising and managing telephone assistance and the provision of its services (art. 6.1.f GDPR); and compliance with legal obligations applicable to the controller (art. 6.1.c GDPR), where appropriate.
When interacting with our automated telephone assistance systems, you will be informed in advance that you are interacting with a system based on artificial intelligence. No automated decisions are made that produce legal effects on the data subjects or significantly affect them in a similar way, in the terms of Article 22 of the GDPR.
Your data may be processed by technology providers offering infrastructure, storage, voice processing, transcription, and artificial intelligence services, acting as data processors and following the instructions of the data controller.
Some of these providers may be located outside the European Economic Area. When this occurs, international data transfers will only be carried out when there are adequate safeguards in accordance with Articles 44 and following of the GDPR, including, among others, the signing of Standard Contractual Clauses approved by the European Commission or the provider's adherence to adequacy mechanisms recognised by applicable regulations.
Recordings, transcriptions, and records derived from telephone communications will be retained for the time necessary to manage the query or relationship maintained and, subsequently, for the periods required by applicable regulations or while legal liabilities may arise for the data controller.
Modification of the privacy policy
The data controller reserves the right to modify this privacy policy to adapt it to legislative changes, so we recommend reading it before each access and navigation of the website.
In order to protect the security of your personal data, all necessary technical and organisational measures have been adopted to safeguard its security.
