Privacy and Personal Data Processing Policy

MAPFRE RE, COMPAÑÍA DE REASEGUROS, S.A., hereinafter MAPFRE RE, with registered offices at Paseo de Recoletos nº 25, 28004, Madrid (Spain) is the owner of this Website, and is responsible for the personal data provided by users through this Website.
The user is hereby informed of the processing performed on any data provided while browsing the website, as well as any data generated while using said website, including, if applicable, any communications or international transfers of the data that may occur, for the purposes referred to in the “Why do we process your personal data?” section.

If the data provided refers to third-party individuals other than the user, the user warrants that said data was gathered with the third party’s prior consent to sharing their data and has been informed, before providing said data, of the purposes of the processing, sharing and other terms provided for in the section “Information on Data Protection.”

The user hereby states that he or she is over 14. If the data provided during browsing come from children under the age of 18, including health data, as the holder of parental authority or guardianship over the minor, you expressly authorize the processing of such data under the terms established in the additional information.

The user guarantees the accuracy and truthfulness of the data provided, committing to communicate any changes in the data provided to MAPFRE RE.

The use of this website is subject to the Privacy and Personal Data Processing Policy, the Terms of Use detailed below, and the Cookies Policy. Please read them carefully.

Who is the data controller for your personal data?

• Identity: MAPFRE RE, COMPAÑÍA DE REASEGUROS, S.A. CIF A78346558
• Postal address: Paseo de Recoletos, 25, 28004 Madrid. SPAIN.
• Data Protection Officer contact details:  DPO.NNCC@mapfre.com

What data do we collect and how do we collect it?

1. Data obtained from the browsing and use of MAPFRE’s website, specifically:
   a) The domain name of the Internet service provider (ISP) providing your access to the Internet. For example, a user with provider XXX will be identified using the domain name xxx.es.
   b) Date and time of access to our website.
   c) The Internet address containing the link used to arrive at our website.
2. Identifying, economic and any other data that you by e-mail, postal address and on the forms available on the Website by users on the website and for the purpose stated in each of the forms.

Why does MAPFRE process your personal data?

Below are the purposes of the processing:

• Regarding data obtained from the browsing and use of our website, we will process the data generated during browsing for the purposes shown in the cookies panel and your associated preferences Configure cookies.
• This website owned by MAPFRE RE contains links to third-party websites whose privacy policies are not those of MAPFRE RE. By accessing such websites, you could decide whether to accept their privacy and cookie policies. In general, if you browse the Internet, you could accept or reject third-party cookies from the configuration options of your browser.
• In this case, the data provided by e-mail, postal address and on the forms available on the Website will be processed for the purposes related to those e-mail, postal address or forms, specifically:
  • In the case of providing your data for the MAPFRE RE Internal Information System, we will process your data to manage complaints relating to relating to any situation or conduct that is irregular, illicit or contrary to the law or applicable internal regulations.
  • In case you provide data in order to request information through any of the published addresses, MAPFRE RE will process your data to contact you and respond to your request.
  • In case you provide your personal data to manage your registration request, user registration and/or password reset, MAPFRE RE we will process your data to contact you and attend your request.

What is the legal basis for processing your data?

The legal bases for processing your data for the purposes indicated in the section entitled “Why do we process your personal data?” are listed below:

• Regarding the browsing and use of our website, it is the consent given by the user in the cookies panel Configure cookies,
• Regarding the data provided by e-mail, postal address and on the forms related to MAPFRE RE Internal Information System:
  • Regarding the data provided by e-mail, postal address and on the forms related to MAPFRE RE Internal Information System, the legitimate basis is the consent of the user to provide their data in order to respond to the request.
  • Regarding the processing of data from emails sent to any of the published addresses, the legal basis is the consent given by the user by providing their data as contact details in order to respond to the request.
  • Regarding the data provided to manage your registration request, long in and/or password reset, as a user, the legitimate basis is the consent of the user to provide their data to meet your request.

How long will MAPFRE keep your personal data?

Personal data provided will be stored for a time period determined based on the following criteria: (i) the legal storage obligation; and (ii) the data subject’s deletion request, when applicable.

With whom will your data be shared?

MAPFRE RE may send your data to the following recipients, exclusively for the purposes shown in the section “Why do we process your personal data?”:

• Public bodies, General Directorate for Insurance and Pension Funds, Tax Agency, judges, and courts and, in general, competent authorities, when MAPFRE RE is legally required to provide them.
• Various service providers within the MAPFRE Group, for the proper provision of services, including but not limited to the following categories of providers: technology providers and providers of web analytics services and tools.
• Third companies with which cooperation agreements are reached to provide the qualified services requested by the customer.
• Reinsurance companies, both in the MAPFRE Group and outside it, required to fulfill the contract.
• The various insurance, financial, and real estate companies belonging to the MAPFRE Group (www.mapfre.com), subsidiaries and investees for the purpose of the comprehensive, centralized management of the relationship between the data subjects and the various MAPFRE Group companies.

Within the framework of the communications indicated in the previous paragraph, international data transfers may be made to third countries. These transfers will only be made when necessary to fulfill the stated purposes. The appropriate guarantee will be implemented in each case to ensure compliance with data protection regulations.

For countries where there is an adequacy decision approved by the European Commission, the guarantee will be such decision. In the absence of an adequacy decision, appropriate guarantees will be provided, which may be (i) the signing of Standard Contract Clauses for data protection adopted by the European Commission or (ii) with regard to international transfers between MAPFRE Group companies, international transfers may be regulated in accordance with the Binding Corporate Rules (hereinafter, “BCR”) approved by the MAPFRE Group. You can access the BCR content, or view a list of MAPFRE Group companies bound by the BCRs.

In any event, if an international transfer must be made to countries that do not have an adequacy decision, and the mechanisms described in the previous paragraph cannot be used, the international transfer will be carried out in accordance with the system of exceptions for specific situations provided for in the General Data Protection Regulation.

What are your rights when you provide us with your data?

Under the terms and scope set out in the current regulations, any person may exercise the following rights:

• Access: See the personal data that MAPFRE RE has on you.
• Rectification: Request the rectification of any incorrect data.
• Erasure: Request that the data be erased when, among other reasons, it is no longer necessary for the purposes for which it was collected.
• Restriction of processing: Request that we stop processing your data, if, for example, the data are inaccurate or the processing thereof is unlawful; however, it may still be processed for the exercise or defense of possible claims, the protection of the rights of
  another person, or for reasons of public interest.
• Opposition: Oppose the processing of your data, except when necessary for, among other reasons, the development of the contractual relationship, if appropriate, or for the exercise or defense of possible claims.
• Portability: Receive your personal data in a structured, commonly used, and readable format, or request that it be sent to another controller where technically feasible.

We remind you that you may also, at any time, withdraw your consent to the processing of your data, where appropriate.

The aforementioned rights may be exercised directly by the owner of the data or by a legal or voluntary representative, in a written communication addressed to the Corporate Privacy and Data Protection Office. Carretera de Pozuelo, 52, 28222 Majadahonda, Madrid (Spain), or by e-mail to OCPPD@mapfre.com

Furthermore, we inform you that you can submit a complaint to the Spanish Data Protection Agency if you consider that we have not processed your data in accordance with the regulations, through the website set up for such purposes by that Supervisory Authority.

MAPFRE RE accepts no responsibility for information on this website originating from sources outside of the MAPFRE Group, nor for any content that it has not created.

The links that appear on this page are solely intended to inform the user about the existence of other relevant sources of information available on the Internet, where the data provided here may be expanded. Under no circumstances will MAPFRE RE be held responsible for the outcome obtained through said links.

MAPFRE RE may modify the Privacy Policy of this website without prior notice, and such modifications will not entitle the data subject to any compensation. The applicable Privacy Policy will be in force at the time the data subjects has accessed the MAPFRE RE website.

It is the responsibility of the data subject to consult the latest published version of the Privacy Policy.

The owner of the domain is MAPFRE RE, with Tax ID A-78346558, registered office at Paseo de Recoletos nº 25, 28004, Madrid (Spain), and registered in the Madrid Company Register, Volume 7029, General 6026 section 3 of the Company ledger, Folio 35 Sheet 71898-1, entry 1.

The user undertakes to make good use of the website. This good use is understood to be in accordance with current legislation, good faith and public order. The user also agrees not to use the website for fraudulent purposes and not to perform any action intended to damage, disable or overload the website or that may prevent its normal use and operation in any way.

The user is hereby informed that, in the event that the Conditions of Use, the Privacy Policy or any other terms or conditions contained on the website are breached, MAPFRE RE reserves the right to limit, suspend or block the user’s access to the website using any technical measure that it deems necessary to this end.

Copyright

All rights reserved. The design of the portal and its source codes, as well as the logos, trademarks and other distinctive symbols that appear therein, belong to MAPFRE RE and are protected by the corresponding intellectual and industrial property rights.

The reproduction, distribution, transformation, manipulation, public communication or any other total or partial, free or paid for use of the texts, images or any other content contained on the website is strictly forbidden without written authorization from the copyright holders.

MAPFRE RE reserves the right, at any time and without prior notice, to apply any changes, variations, deletions or cancellations to the contents and its manner of presentation that it deems necessary, whether temporarily or permanently. The user must ensure that they are using the updated version at all times. This does not grant users the right to receive indemnification for any damages and losses.