Privacy protection

The right to privacy is one of the most important human rights in modern society. At Modra, we recognise its importance and respect the privacy of our customers. We therefore handle personal data responsibly and in accordance with the regulations governing personal data protection in the Republic of Slovenia.

Access to personal data is granted only to authorised employees and contractual processors. Access is limited to what is necessary for the performance of work processes, the provision of the insurance company’s services, and the fulfilment of rights and obligations arising from contractual relationships.

Modra zavarovalnica has adopted a Privacy Policy on the basis of the Regulation, which provides all relevant information on the processing of individuals’ personal data.

Privacy protection

Categories of Personal Data

Personal data required for the conclusion and performance of contracts are provided to Modra zavarovalnica, d. d. (hereinafter: Modra) directly by the individual, either in the enrolment form or during the term of the contract.

In the case of collective insurance, the personal data required to conclude and perform the contract are provided to Modra by the employer. The personal data provided by the employer are included in the Notice of Enrolment, which is issued by Modra and sent to each member of the pension fund.

Certain personal data may be generated by Modra or obtained from publicly available sources.

Purposes and Legal Bases for the Processing of Personal Data

The collected data and information are processed for the purpose of providing insurance products and related services offered by Modra.

a) Processing on the Basis of Legal Provisions

Modra processes personal data based on:

If the individual does not provide the personal data required under the applicable legal basis, Modra will not be able to conclude or perform the insurance contract.

b) Processing on the Basis of Consent

Modra processes personal data in certain cases on the basis of the individual’s consent for direct marketing purposes, including communication about personalised offers. This may include satisfaction measurement, market research, marketing activities and profiling.

In certain cases, Modra processes personal data on the basis of the individual’s consent for direct marketing purposes, including the communication of personalised offers. This may include satisfaction measurement, market research, marketing activities and profiling.

Terms and Conditions for Participation in Modra’s Social Media Prize Draws

c) Modra’s Website Uses Cookies

Types of cookies used by Modra zavarovalnica’s website:

Strictly Necessary Cookies
These cookies are strictly necessary for navigating and using the website. Without them, we cannot provide the services you have requested, such as submitting the “Ask us” online form.

Performance Cookies
These cookies collect information about how the website is used, for example which pages users visit most often and whether error messages appear on individual pages. These cookies do not collect information that could identify the user. All information collected is aggregated and therefore anonymous. These cookies are used solely to improve the performance of the website.

Functional Cookies
These cookies allow the website to remember the choices you make, such as your username, and provide enhanced, more personalised features. They may also be used to provide services such as viewing video content.

These cookies also remember individual changes you make to font size and other parts of the website that you can customise. The information collected by these cookies is anonymous and does not track your browsing activity on other websites.

More About Cookies

Users of Personal Data

Users of personal data include Modra employees, contractual processors, public authorities or other bodies to which personal data have been disclosed, as well as state authorities or holders of public authority where required by law.

Information relating to individuals, including personal data, is treated as Modra’s business secret. Employees process personal data in accordance with their authorisations and assigned access rights. Contractual processors are required to protect confidential data and respect the rights of individuals in the same manner as Modra.

Modra may entrust certain personal data processing activities to contractual processors outside the European Union where such processing is carried out under contract for the purpose of performing Modra’s activities. These processors may be located in countries that do not have regulations protecting the right to personal data protection in the same way as in the European Union. Where personal data are transferred to third countries outside the EU and the EEA, Modra will ensure the same standard of personal data protection as if the processing were carried out by Modra itself.

Rights of Individuals Relating to the Processing of Personal Data

An individual whose personal data are processed may exercise the following rights by submitting a written request:

An individual may withdraw their consent to the processing of personal data at any time, either permanently or temporarily, in whole or in part, by submitting a written request to the controller or the Data Protection Officer. If the individual believes that their personal data are being processed in breach of applicable personal data protection regulations, they have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Zaloška 59, Ljubljana.

The individual may also manage their consents via:

Retention of Personal Data

Modra retains personal data collected for the purpose of concluding and performing contracts for 10 years after the termination of the contract, or for 10 years after the completion of the insurance claim handling process. Other personal data are retained until the purpose for which they were collected has been fulfilled. Personal data collected on the basis of the individual’s consent are retained for 5 years after the withdrawal of consent.

Once the purpose for which the personal data were collected has been fulfilled, or once the legally prescribed retention periods have expired, the personal data are erased, destroyed, blocked or anonymised.

Accessibility