Contact us

Privacy Protection

Personal Data Protection

  1. Data Controller

The controller of your personal data is Hankook Insurance and Reinsurance Brokers s.r.o., IČO: 02693607, registered in the Czech Republic (hereinafter “HIBRe”, “we”, “us”).

Contact: ana@hibre.cz

HIBRe is an independent insurance intermediary registered with the Czech National Bank (ČNB) under Act No. 170/2018 Coll. on insurance distribution.

  1. Purposes and Legal Basis for Processing
  • Insurance mediation— processing your enquiry, preparing and issuing quotes and policies. Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps).
  • Legal obligations— compliance with insurance distribution law and anti-money-laundering obligations. Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation under Act No. 170/2018 Coll.).
  • Legitimate interest— fraud prevention, IT security, and internal record-keeping. Legal basis: Art. 6(1)(f) GDPR.
  • Contact form submissions— responding to general enquiries submitted via the website. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding).
  1. Categories of Personal Data Processed
  • Identity data: name, date of birth, identification numbers
  • Contact data: email address, telephone number, postal address
  • Policy data: insured property/vehicle/person details, coverage parameters
  • Claims data: incident details, damage assessments
  • Financial data: premium amounts, bank details (where required for claims)
  • Technical data: IP address, browser type (for website security purposes only)
  1. Retention Periods
  • Active policies:Duration of the policy plus 10 years after expiry (statutory limitation periods)
  • Claims:5 years from settlement
  • Non-converted leads (enquiries):6 months from submission
  • Contact form enquiries:2 years from submission, then purged
  • AML records:10 years as required by Act No. 253/2008 Coll.
  1. Your Rights Under GDPR (Art. 15–21)
  • Right of access (Art. 15)— obtain a copy of your personal data
  • Right to rectification (Art. 16)— correct inaccurate data
  • Right to erasure (Art. 17)— request deletion where no legal retention obligation applies
  • Right to data portability (Art. 20)— receive your data in a structured, machine-readable format
  • Right to object (Art. 21)— object to processing based on legitimate interest
  • Right to restrict processing (Art. 18)— limit how we use your data while a dispute is resolved
  • Right to withdraw consent— where processing is based on consent, withdraw it at any time without affecting prior processing
  1. How to Exercise Your Rights

Email ana@hibre.cz with subject line “GDPR Request”. We will respond within 30 days. We may ask you to verify your identity before processing your request.

  1. Supervisory Authority

You have the right to lodge a complaint with the Czech data protection supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

  1. Third-Party Data Recipients

Your data may be shared with:

  • Insurance carriers and reinsurers for underwriting and claims purposes
  • IT infrastructure providers (cloud hosting, database services) acting as data processors under GDPR Article 28 agreements
  • Regulatory and law enforcement authorities where legally required

We do not sell or rent personal data to third parties for marketing purposes.

  1. International Transfers

Personal data is processed within the European Union and European Economic Area. Where any processor is located outside the EEA, we ensure adequate safeguards are in place pursuant to Art. 46 GDPR (standard contractual clauses or adequacy decision).

  1. Cookies and Tracking

This website uses only technically necessary session cookies required for the portal to function. We do not use analytics tracking cookies, advertising cookies, or third-party tracking pixels without your explicit consent. You may disable cookies in your browser settings; this may affect portal functionality.