Privacy Policy - Personal Data Processing
Privacy Policy - Personal Data Processing
Personal Data Controller
Name: Green Card Bureau in Bosnia and Herzegovina
JIB: 4200816860001
Adress: Derviša Numića br.7, 71000 Sarajevo
Phones: +387 33 724550, +387 33 610744
Fax: +387 33 724560
E-mail: bzkbih@bzkbih.ba
Data Protection Officer (DPO)
Phone: +387 33 724559
E-mail: dataprotection@bzkbih.ba
Introduction
The Green Card Bureau of Bosnia and Herzegovina is a national Bureau of Bosnia and Herzegovina established for the purpose of providing a double guarantee:
- in its own country, that the foreign insurer will comply with the laws of Bosnia and Herzegovina, and compensate the injured parties for damages within the prescribed insurance amounts in Bosnia and Herzegovina;
- to the Bureau of the visited country, for the obligation of its member - the insurance company from Bosnia and Herzegovina, which covers motor third parties liability for the use of a motor vehicle with a Bosnian (BIH) registration plates that was involved in an accident.
In order to fulfil the above-mentioned roles of a double guarantor, the Green Card Bureau in Bosnia and Herzegovina processes personal data of insured persons, persons involved in traffic accidents and claimants in accordance with the Law on Personal Data Protection (LPDP) and concluded Agreements on the processing of personal data with foreign partners (EU Standard Contractual Clauses for data transfers between EU and non-EU countries).
Processing of personal data
Green Card Bureau in Bosnia and Herzegovina receives the personal data that processes from insurance companies from Bosnia and Herzegovina, foreign claims handling partners, or directly from claimants and their representatives.
Only those personal data that are required for the purpose of MTPL insurance and claims arising from traffic accidents that occur in Bosnia and Herzegovina, as well as in the countries of the Green Card System involving vehicles with BIH registration plates, are processed.
Legal basis
The processing of personal data is carried out in order to fulfil the legal obligations prescribed in Article 3, Paragraph (1) (r), (t), (u), (v), Articles 8, 47, 48 and 49 of the "Law on Compulsory Traffic Insurance" ("Official Gazette of the FBiH", No. 57/20 and 103/21) and Article 4, Paragraph (1) 10), 11), 12), 13), 14), 15), 17), Articles 34, 35 and 36 of the "Law on Compulsory Traffic Insurance" ("Official Gazette of the RS", No. 82/15, 78/20 and 1/24), Commission Implementing Decision (EU) 2020/1358 on the application of Directive No. 2009/103/EC (Official Journal of the European Union L-314 of 29.09.2020), the "Internal Regulations", the "Protection of Visitors Agreement" and the "Agreement on the Exchange of Information between Information Centres under Article 23 of EU Directive 2009/103/EC", as well as the binding decisions of the international motor third party liability insurance system - the Green Card System.
Categories of data subjects whose personal data is processed
1. Drivers, insureds, claimants (victims of road traffic accidents), dependents (relatives) and legal successors, witnesses and other natural persons involved in the relevant road traffic accidents and their legal representatives.
2. Employees (authorised users) and contact persons of the national bureaux of the member countries of the Green Card System.
3. Employees and contact persons of insurance companies, agents, correspondents, legal representatives, and other individuals involved in the subsequent claims handling and settling procedure.
4. Health professionals.
5. Civil servants of public bodies and authorities.
Categories of personal data processed
In relation to data subject category 1 above: Identification data (age, gender, civil and family status), contact details, financial information, personal and physical characteristics, accident related information, vehicle related information, information related to the International Motor Insurance Certificate (also known as “Green Card”) MTPL insurance policy and driving license. Only identification data (name, job title), business contact details, function/role and correspondence in relation to legal representatives.
In relation to data subject category 2 above: Identification data (name, job title), business contact details and function/role in relation to the claims handling and settling procedure.
With respect to data subject category 4 above, also professional expertise, educational background, training, qualifications, medical reports authored by the health professionals themselves and their own expert / witness statements. With respect to data subject categories 1 and 5, also decisions and rulings.
In relation to data subject categories 3, 4 and 5 above: Identification data (name, job title), business contact details and function/role in relation to claims handling and settling procedure and correspondence.
Recipients of personal data
The personal data being processed may be forwarded (disclosed) only to the following recipients or categories of recipients:
- Dedicated personnel of the relevant national Green Card Bureau.
- Service providers of the national Bureau (e.g. consultants, law firms).
- Agents and correspondents duly authorised and mandated to handle the claim.
- The data subjects themselves, their dependents or their legal representatives.
- The insurance companies concerned.
- Public authorities, courts and tribunals.
The handling and settling process of international MTPL claims involves the need to exchange personal data with the competent Green Card Bureaux, their members and claims handling agencies, i.e. the transfer of personal data to the member countries of the Green Card System. For the purpose of such transfer of personal data between the national bureaux of the member countries of the Green Card System, a Personal Data Processing Agreement with EU Standard Contractual Clauses for data transfers between EU and non-EU countries has been signed, which includes technical and organizational measures for the transfer of personal data.
Use and retention of personal data
We process personal data until the purpose of processing is fulfilled. After the end of the purpose for which they were collected, we no longer use the personal data, and they remain in our storage system, and we keep them as much as it is required by the legal regulations on the retention of archival materials.
Data subject’s individual rights
Personal data subjects, in accordance with the provisions of Articles 14-25 of the Law on Personal Data Protection (LPDP), have the following rights:
- to be informed about the processing of their personal data:
Personal data subjects have the right to obtain information about whether the Bureau processes personal data relating to them, as well as all other data related to such processing in accordance with Articles 14-16 of the LPDP.
- to access personal data:
Personal data subjects have the right to obtain confirmation from the data controller as to whether their personal data are being processed and, if so, access to the personal data and the following information: the purpose of the processing; the category of personal data being processed; the recipient or categories of recipients to whom the personal data have been or will be disclosed, in particular the recipient in another country or international organization; the envisaged period for which the personal data are retained; as well as other information referred to in Article 17 of the LPDP.
- to rectification of personal data:
Data subjects have the right to obtain from the data controller the rectification of inaccurate personal data, as well as the right to complete any incomplete personal data.
- to have personal data erased:
Data subjects have the right to obtain from the data controller the erasure of personal data relating to them, if the conditions set out in Article 19 of the LPDP are met.
- to restrict the processing of personal data:
Data subjects have the right to restrict the processing of personal data relating to them, if the conditions set out in Article 20 of the LPDP are met.
- to have personal data ported:
Data subjects have the right to receive personal data concerning them, which they have provided to the data controller, in a structured, commonly used and machine-readable format, and have the right to transmit that data to another data controller without hindrance from the data controller to whom the personal data were provided, if the conditions set out in Article 22. LPDP are met.
- to withdraw consent for the processing of personal data, if it has been previously given:
If personal data are processed on the basis of consent, personal data subjects have the right to withdraw consent at any time. If personal data subjects wish to withdraw consent for the processing of their personal data, they can do so by sending an e-mail to dataprotection@bzkbih.ba or the official address of the Bureau.
- to file a complaint with the Green Card Bureau of BiH, the Personal Data Protection Agency of Bosnia and Herzegovina or a lawsuit with the competent court:
Personal data subjects have the right, on the basis of their particular situation, to file a complaint at any time against the processing of their personal data.
- rights regarding automated decision-making and profiling:
Personal data holders, in accordance with Art. 24. ZZLP, have the right not to be subject to a decision based solely on automated processing.
Information and complaints
For all information and complaints regarding the processing of their personal data, data subjects can contact directly our data protection officer (DPO) via e-mail address dataprotection@bzkbih.ba or the official e-mail address of Green Card Bureau in Bosnia and Herzegovina.
Cookies Policy
To make our website work properly, small data files called cookies are sometimes placed on your device.
1. What are cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse or browse its contents.
Please note that removing or blocking cookies can impact your user experience and some functionality may no longer be available.
2. What kind of cookies are used?
a) Functional cookies
These cookies are intended to improve the functioning of the website.
Without these cookies, access could not be fully ensured, so they are particularly important.
b) Analytical cookies
Green Card Bureau in Bosnia and Herzegovina uses Google Analytics and these cookies allow us to track the number of visits and traffic sources so that we can measure and improve the performance of our site and help us understand how visitors use our site. All information collected by these cookies is aggregated and anonymous, and you can turn them off without compromising the displayed content.
3. How can the user modify its settings?
The user can change the settings of his browser. The user can configure his/her browser so that cookies are not saved on his computer or delete previously saved cookies and prevent them from being placed. If you do this, the access to certain services that require the use of cookies may be changed, therefore you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.
This configuration is specific to each browser. It is described in the help menu of the user's browser, which allows the user to know how to change cookie settings.
You can control and/or delete cookies as you wish – for more details, please see:
http:/www.cookiecentral.com/faq/