Source: https://www.study-abroad-insurance.com/data-protection-gdpr/backtopage/cmb-fra/
Timestamp: 2018-06-22 11:01:18
Document Index: 61484230

Matched Legal Cases: ['Art. 30', 'Art. 30', 'arty\n5', '§ 49', 'Art. 30', 'Art. 32']

The protection and safety of your personal data is our particular concern as well as our obligation. As a company and insurance agent we always take care of carefully handling personal data that complies with data protection regulations.
Processing directory for the automated processing of personal data according to Art. 30 GDPR
I Information on the responsible body (Article 30 (1) (a) GDPR)
1 Responsible for data collection, use or processing
Name or company name CareMed GmbH
Area Mediation of insurance for exchange participants
Street Budapester Str. 4
Zip, place 53111 Bonn
Phone +49 (0)228 55 54 900
Fax +49 (0)228 55 54 975
E-mail address info@caremed-travel.com
2 Responsible employee
Management of the responsible body, representative Annabelle Franco, Thomas Kiechle
Company CareMed GmbH
Address Budapester Str. 4
Phone number 00 49(0)228 55 54 90-0
Fax number 00 49 (0)228 55 54 90-75
E-mail DataProtection@caremed-travel.com
II Information on the procedure acc. Art. 30 para. 1 b) -f) GDPR
1 Purpose of data collection, processing or use
The purpose of the data collection, processing, storage or use is to carry out insurance mediation, administration and settlement of claims abroad related to the travel insurance sold, especially in the field of educational travel such as exchange programs.
2 Description of the groups of persons concerned and the related data / data categories
Group of persons Data / data category
Interested parties/prospects, clients Name, address, e-mail address, date of birth, home country/country of usual residence, travel destination, contracted insurance option/cover
Business partners Company name, postal address of the company, e-mail address, phone number, first name, last name, position, area
3 Recipients or categories of recipients to whom data can be communicated
Insurer, claims office
4 Rule deadlines for the deletion of data
For customers: Legally stipulated 10-year retention period
For interested parties/prospects: 1-30 working day after examination of the legitimated written request by the interested party
5 Planned data transfer to third countries or to an international organization
Plan x yes no
If so: Claims in in the USA, in accordance with the insurer
Purpose Data / Data category Country / Category of country / international Organization
Cover check and claims processing A, B USA
Details of the documented guarantees according to § 49 Abs. 1 GDPR:
The transfer of the subjected data is necessary in order to conclude or fulfill a contract in the interest of the concerned person or the person in charge of another natural or legal person.
III Information pursuant to Art. 30 (1) (g) GDPR
General description of the technical and organizational measures for safety during processing according to Art. 32 para. 1 GDPR
The processes and their compliance are checked both in accordance with the required technical specifications and the data protection requirements at CareMed and at the service providers of the CareMed GmbH and documented on the basis of checklists. Access control, control of disks and USBs e.g., storage control, user control, access control, transmission control, control of data entry, transport control, recoverability, reliability, data integrity, order control, availability control and separability are among the main safety measures.
Data Protection Officer or Supervisor 04-May-2018 ppa. Annabelle Franco