Privacy Policy

1. Who we are

In this Policy, "Draudita", "we", "us", or "our" refers to UAB Draudita, company code 302543510, registered at Vėdrynų g. 7, LT-10238 Vilnius, Lithuania. We are the data controller of your personal data within the meaning of applicable data-protection laws (GDPR).

2. Data we collect

The scope of personal data we process depends on the service you request. We may process:

• Identification & contact data: name, surname, ID/passport number, company position, address, phone, email.
• Policy data: insurance type, policy number, validity, sum insured, premium, payment terms, insurer.
• Payment & banking data: payer details, payment amount, date, bank account, payment-card number.
• Insured / beneficiary data: name, ID, date of birth, address, phone, email, bank account for claim payouts.
• Verification data: sanctions lists, disqualifications, criminal record, PEP status.
• Driver & insurance history: licence, prior claims, accidents, traffic violations.
• Internet use data: IP address, browser type, OS, device identifier, location data, cookies.
• Communication preferences: interests, preferred language.

3. Where we get your data from

• Directly from you, when you contact us or use our services.
• From the organisation you work for or represent.
• Automatically (cookies and similar technologies).
• From third parties (insurers, reinsurers, financial institutions, public authorities).

4. Why we process your data

We process personal data to:

• Evaluate applications and conclude insurance contracts.
• Administer and service contracts.
• Comply with our legal and regulatory obligations.
• Prevent fraud and financial crime.
• Process payments.
• Conduct analytics, market research and service development.
• Communicate with you and respond to enquiries.
• Market our products and services (where lawful).

5. Legal bases

We process data on the basis of: (a) performance of a contract; (b) compliance with legal obligations; (c) our legitimate interests; (d) your consent; (e) the establishment, exercise or defence of legal claims.

6. Recipients of data

Your data may be shared with insurers and reinsurers, supervisory and public authorities, IT and other processing service providers, legal advisors and auditors, and business partners — strictly as needed.

7. International transfers

Data may be transferred outside the EEA only with appropriate safeguards as required by GDPR (e.g. Standard Contractual Clauses).

8. Retention

Data is retained only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements.

9. Your rights

You have the right to:

• Access your data.
• Correct inaccurate data.
• Erase your data.
• Restrict processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

10. Cookies & tracking

We use cookies and similar technologies to provide and improve our services. For details on the cookies we use, see our Cookie Policy.

11. Contact us

12. Complaints

You may lodge a complaint with the State Data Protection Inspectorate of Lithuania, Juozapavičiaus g. 6, 09310 Vilnius — Tel: +370 5 271 2804, Email: ada@ada.lt.

13. Changes to this Policy

This Policy may be updated periodically. We will notify you of material changes.