BBVA Multi-Riscos Insurance

Below, we will disclose the details of the new Data Protection Policy and remind you how we process your personal data at BBVA Insurance Portugal Branch.

Who is the data controller of the personal data that you provide as part of the Insurance Policy?

BBVA Seguros, Sociedad Anonima de Seguros Y Reaseguros – Portugal Branch, with registered offices at Av. Da Liberdade, 222, 1250-148 Lisboa. Email address: seguros.pt@bbva.com.

Who is the Data Protection Officer and how do you contact him or her?

The Data Protection Officer is the person in charge of protecting the fundamental right to personal data protection at BBVA Seguros Portugal Branch and is responsible for complying with the data protection policy. You can contact the Data Protection Officer of BBVA Seguros Portugal Branch at the following address: dpo.seguros.pt@bbva.com.

What do we use your personal data for?

At BBVA Insurance we process your personal data to:

• Manage the insurance policy you have taken out or requested and ensure the complete development of the contract.
• Get to know you better and customize your experience.
• Maintain common files with other insurance institutions and partner institutions in the insurance sector for statistical, actuarial, and fraud prevention purposes, as well as for the preparation of insurance technique studies.
• Manage reinsurance contracts, where applicable.

Why do we use your personal data?

Below, we explain the legal basis that allows us to process your data for each of the purposes we have previously indicated to you:

• To manage the insurance policy you have taken out or are requesting: in performance of a contract.

BBVA Seguros must also comply with the legal obligations imposed by the laws and, especially, Law 147/2015 of 09/09 that approves the legal framework for access and exercise of insurance and reinsurance activity, as well as the procedural regime applicable to special crimes of the insurance and pension fund industry and offenses which are processed by the Insurance and Pension Fund Supervisory Authority and Law 83/2017 of 18/08 on the Prevention of Money Laundering and Terrorism Financing.

• To get to know you better and customize your experience: for the legitimate interest of BBVA Seguros.

To better meet your expectations and increase your satisfaction as a customer, as well as create statistics for actuarial purposes, surveys, or market studies that may be of interest.

These legitimate interests respect your right to personal data protection, to honor, and to personal and family privacy. At BBVA Seguros, we believe that you, the customer, have a reasonable expectation that your data be used in order to improve our products and services and thus provide you a better customer experience. But remember that in these cases based on legitimate interest, you can always exercise your right to object if you consider it appropriate. Please do so at the following address: direitosprotecaodadosbbvaseguros.pt@bbva.com.

• Maintain common files with other insurance institutions and partner institutions in the insurance sector for statistical, actuarial, and fraud prevention purposes, as well as for the preparation of insurance technique studies: for the legitimate interest of BBVA Seguros.

Because, among others, Law 147/2015 of 09/09 allows the management of protocols or other agreements between insurance companies that may impact their respective relationship with policyholders, insured persons, beneficiaries, and injured third parties, in particular as regards claims settlement, for the detection and reporting of insurance fraud situations with an effective actuarial function. To create shared files that make it easier for us to settle claims and to enact actuarial-statistical collaboration for pricing and risk selection. In addition, Law 147/2015 of 09/09 assigns certain powers to prevent fraudulent acts aimed at obtaining illicit enrichment on the primary basis of claiming damages that have not taken place. These files perform a social function as they may be accessed by the State's Defense Forces and Bodies. In either case, your inclusion in these files will be properly informed.

You can always exercise your right to object if you consider it appropriate. Please do so at the following address: direitosprotecaodadosbbvaseguros.pt@bbva.com.

• To manage reinsurance contracts, where applicable: in performance of a contract.

In addition, for proper risk management, Law 147/2015 of 09/09 allows insurance companies to process data as part of a reinsurance contract.

How long will BBVA Seguros keep your data?

We will keep your personal data for the duration of the contractual relationship. Unsigned insurance claims will be retained by BBVA Seguros for a maximum period of ninety (90) days, except when a longer period is agreed upon in the claim to avoid duplication of new claims. Once the contractual relationship has ended, BBVA Seguros will keep Personal Data blocked for the statutory limitation period, which is generally 10 years.

To whom do we communicate your data?

We will not transfer your personal data to third parties, except when required by law, when previously agreed with BBVA Seguros, under reinsurance contracts, and for the simple management of the contractual relationship.

In order to provide you with an adequate service and to manage the relationship we have with you as a customer, in Appendix I, you will find a list companies by category that handle your data on behalf of BBVA Seguros as part of the services we have taken out with you.

What are your rights when you provide us with your data?

RIGHT

Access: Consult your personal data included in BBVA Seguros files

Rectification: Modify your personal data when inaccurate

Erasure: Request erasure of your personal data

Opposition: Request that your personal data not be processed

Limitation of processing

Request limitation of the processing of your data in the following cases:

• While evaluating a challenge to the accuracy of your data.
• When the processing is unlawful, but you oppose deletion of your data.
• When BBVA Seguros does not need to process your data, but you need it to exercise or defend claims.
• When you have opposed the processing of your data in order to fulfill a mission of public interest or to satisfy a legitimate interest, while checking whether the legitimate reasons for processing prevail over yours.
  

Portability: You may receive, in electronic format, the personal data you have provided to us and the personal data obtained from your contractual relationship with BBVA Seguros. You may also have the data transferred to another entity.

Service Channels

direitosprotecaodadosbbvaseguros.pt@bbva.com

BBVA Seguros.
Quality Department.
Av. Liberdade, 222, 1258-140 Lisboa

If you believe that w have not processed your personal data in accordance with the policy, you can contact the Data Protection Officer at: dpo.seguros.pt@bbva.com.

Additionally, you may file a complaint with the National Data Protection Commission (www.cnpd.pt/).

You may exercise your rights free of charge.

In addition, you can withdraw your consent at any time without affecting your request for processing by sending your request to the email address direitosprotecaodadosbbvaseguros.pt@bbva.com, or by contacting any of the BBVA Agencies.

List BBVA Seguros service providers by category (with potential access to personal data)

See Annex I - List of BBVA Seguros service providers by category here.