Privacy Policy - GDPR

Axeria IARD SA Lyon – Bucharest Branch, with its registered office in Romania, Gheorghe Țițeica Street 212 – 214 (2nd floor), Sector 2, Bucharest, registered with the Trade Register under number J2021011706408, Tax Identification Code 44552384, acting as a branch of AXERIA IARD, a company established in France, with a share capital of 38,000,000 euros (registration number 352 893 200) and with its registered office at 129 avenue Felix Faure 69003 Lyon (postal address: 26 rue du Général Mouton Duvernet 69003 Lyon), hereinafter referred to as “Axeria RO”, attaches great importance to the protection of your personal data in accordance with the applicable Data Protection Legislation.

The purpose of this Privacy Policy is to inform Data Subjects about the processing of personal data carried out by Axeria RO, as the Controller, and about the procedures implemented.

1. DEFINITIONS

The following terms, whether used in the singular or plural in this Privacy Policy, shall have the following definition:
Axeria RO:
refers to the company, acting as the Controller, mentioned in the information accessible on the Website.
Controller:
means the natural or legal person who determines the purposes and means of the processing.
Processor:
means the natural or legal person, public authority, department or other body which processes personal data on behalf of the Controller.
Data Subject:
means the natural person whose personal data is processed by Axeria RO, as defined in this Privacy Policy.
GDPR:
means Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, applicable from May 25, 2018.
Insured Persons:
means any adult natural person who enters into an insurance policy with Axeria RO, for their personal needs, according to the terms and conditions described in the “Products and Services” section of the Website.
Intermediate Archiving:
means the transfer of personal data that is still of administrative interest to Axeria RO (e.g., in the event of a dispute) and/or in the case of a legal obligation, to a separate database, logically or physically, and to which access is restricted. This archive represents an intermediate step before the relevant personal data is deleted or anonymized.
Personal Data:
means the personal data of the Data Subject, as defined in the applicable data protection legislation, collected and processed by Axeria RO.
Applicable Data Protection Legislation:
means the relevant data protection and privacy legislation, including GDPR, applicable to Data Subjects.
Privacy Policy:
means the policy regarding the privacy and protection of Data Subjects’ personal data implemented by Axeria RO.
Processing:
means any operation or set of operations performed by Axeria RO in its capacity as Controller.
Specific Rights:
means the rights granted by the applicable data protection legislation to Data Subjects in connection with the processing of their personal data.
Website:
means the website accessible at the URL: https://www.axeria-iard.ro/, where this Privacy Policy is located.
Terminals:
means the hardware equipment (computer, tablet, smartphone, phone, etc.) used by Data Subjects to consult or view the Website and/or any other digital medium published by a third party.
Users:
refers to all users and visitors of the Website, including insured persons, candidates, brokers, prospects, accident victims, as well as any other persons whose personal data is processed in the context of this Privacy Policy.

2. PROCESSING OF YOUR PERSONAL DATA

We collect Personal Data:

  • Directly from you (through forms, contracts, direct contact)
  • From intermediaries (e.g., Brokers)
  • From public sources (e.g., government databases)
  • Through the Website, using cookies and similar technologies, whose dedicated policy is available here.

We use your Personal Data to allow you to access and properly use the Website and, in general, in connection with your relationship with Axeria RO, for the following purposes:

  • Website Usage: this Processing is based on Axeria RO’s legitimate interest in allowing Users to browse the Website, for which Personal Data, processed through session cookies, is retained for the period indicated in the Cookie Policy available here.
  • Preparation of commercial statistics, analyses, and marketing tools (especially classification, scores, etc.): this Processing is based on the consent of Data Subjects, for which Personal Data is retained for a period of thirteen (13) months.
  • Management of requests for exercising Specific Rights according to the conditions set out in Article 8 – Specific Rights: this Processing is based on a legal obligation incumbent on Axeria RO, for which Personal Data is retained in an active database for the duration of the request, then in an Intermediate Archive for a period of three (3) years.
  • Online claims management: Personal Data is collected and processed according to the dedicated privacy policy, accessible here.
  • Online complaints management: this Processing is based on the performance of a contract, for which Personal Data is retained in an active database for the duration of the contract, then in an Intermediate Archive for a period of four (4) years.
  • Management of requests made through the contact form available here: this Processing is based on Axeria RO’s legitimate interest in managing and responding to Data Subjects’ requests, for which Personal Data is retained in an active database for the duration of the request, then in an Intermediate Archive for a period of three (3) years.

These processing operations are carried out in accordance with the Applicable Data Protection Legislation.

Each User is invited to read this Privacy Policy, which is available on the Website or can be obtained upon request from Axeria RO by sending an email to: dpo@axeria-iard.ro.

3. COLLECTION OF YOUR PERSONAL DATA

Axeria RO collects the following categories of Personal Data from you when you browse the Website, create and use an account, or contact Axeria RO by phone, electronically, or in person:

  • Identification data: name, surname, gender, date of birth, postal address, email address, phone number.
  • Navigation data (date, time, IP address, pages viewed) during website browsing.

4. STORAGE OF PERSONAL DATA

The Website is hosted by the company whose contact details are available here.

All security measures have been taken to store your Personal Data in a secure environment and to prevent distortion, damage, or unauthorized access by unauthorized third parties. The Personal Data transmitted by you will never be transmitted to third parties for commercial purposes, nor will it be sold or exchanged.

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS

Within our activity, we may use Processors to provide certain services on our behalf. As a result, some of your Personal Data may be transmitted to these persons. However, Processors will not use your Personal Data for purposes other than those specified. Your collected Personal Data is intended exclusively for use by Axeria RO and the following Processors:
  • Responsible for Website hosting.
  • Responsible for Website development and maintenance.
  • Responsible for managing certain online complaints.
As Controller, Axeria RO undertakes not to transfer your Personal Data outside the European Union. In the event of such a transfer, Axeria RO undertakes to implement appropriate protection measures in accordance with GDPR and, in particular, to apply the Standard Contractual Clauses adopted by the European Commission in their current version.
Recipient of Personal Data Type of Personal Data transferred Purpose of planned transfer Location of Personal Data Level of protection offered by the country or exception provided in GDPR
Cyberfolks All personal data processed from the site Website hosting Romania Appropriate
Intaro All personal data processed from the site Maintenance of website facilities Romania Appropriate
Intaro All personal data processed through the online claims management platform, public MTPL calculator, and claims notification platform Platform editor and data processor for certain online claims, complaints, and MTPL premium calculation Romania Appropriate

6. HYPERTEXT LINKS

On the Website, Users can access other websites through hypertext links that refer to the relevant authorities. If Users decide to access these websites from the Website, they leave the Website. Axeria RO invites you to consult the privacy policy of the respective website to understand how your Personal Data is shared and used in this context.

7. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

In accordance with the Applicable Data Protection Legislation, Axeria RO implements all appropriate technical, physical, and organizational measures in relation to the nature of the Personal Data and the risks presented by the Processing, to maintain the security and confidentiality of Users’ Personal Data, especially to prevent distortion, damage, or unauthorized access by unauthorized third parties.

8. SPECIFIC RIGHTS

In accordance with the Applicable Data Protection Legislation, as a Data Subject, you may, at any time, benefit from the following Specific Rights regarding:

  • Access to your Personal Data
  • Rectification thereof
  • Erasure thereof
  • Restriction of Processing
  • Data portability
  • Objection to processing
  • Post-mortem instructions
    • Right of access

You can obtain from Axeria RO confirmation as to whether or not your Personal Data is being processed, and, where Personal Data is being processed, access to it, as well as the following information:

  1. a) The purposes of the Processing
  2. b) The categories of Personal Data
  3. c) The recipients or categories of recipients to whom the Personal Data has been or will be disclosed
  4. d) The period for which the Personal Data will be stored, where possible, or, if not possible, the criteria used to determine that period
  5. e) The existence of the right to request from Axeria RO rectification or erasure of your Personal Data, restriction of processing concerning you, or to object to such processing
  6. f) The right to lodge a complaint with the competent supervisory authority in Romania (ANSPDCP)
  7. g) Where the Personal Data is not collected directly from you, any available information as to their source
  8. h) The existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where your Personal Data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards relating to the transfer.

Axeria RO will provide you with a copy of the Personal Data undergoing processing.

Axeria RO may charge a reasonable fee based on administrative costs for any further copies you request.

If you submit your request electronically, the information will be provided to you in a commonly used electronic format, unless you request otherwise.

Your right to obtain a copy of your Personal Data shall not adversely affect the rights and freedoms of others.

  • Right to rectification

As a Data Subject, you can obtain from Axeria RO, without undue delay, the rectification of inaccurate Personal Data concerning you. You also have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.

  • Right to erasure

As a Data Subject, you can obtain from Axeria RO the erasure of your Personal Data without undue delay where one of the following grounds applies:

(a) Your Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed by Axeria RO.

(b) You withdraw consent on which the Processing is based and where there is no other legal ground for the Processing.

(c) You have exercised your right to object, in accordance with the conditions set out below, and there are no overriding legitimate grounds for the Processing.

(d) The Personal Data has been unlawfully processed.

(e) The Personal Data has to be erased for compliance with a legal obligation.

(f) The Personal Data has been collected from a minor.

  • Right to restriction

As a Data Subject, you can obtain from Axeria RO the restriction of processing of your Personal Data where one of the following applies:

(a) Axeria RO will verify the accuracy of the Personal Data following a challenge by you regarding its accuracy.

(b) The Processing is unlawful and you oppose the erasure of your Personal Data and request the restriction of its use instead.

(c) Axeria RO no longer needs the Personal Data for the purposes of the Processing, but it is required by you for the establishment, exercise or defense of legal claims.

(d) You have objected to Processing, in accordance with the conditions set out below, and Axeria RO will verify whether the legitimate grounds pursued override the grounds invoked.

  • Right to data portability

As a Data Subject, you have the right to receive from Axeria RO your Personal Data in a structured, commonly used and machine-readable format, under the following conditions:

(a) Your Personal Data Processing is based on consent or on a contract.

(b) The Processing is carried out by automated means.

When exercising your right to data portability, you have the right to have your Personal Data transmitted directly from Axeria RO to another Controller designated by you, where technically feasible.

Your right to request the portability of your Personal Data shall not adversely affect the rights and freedoms of others.

  • Right to object

As a Data Subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of Personal Data concerning you which is based on Axeria RO’s legitimate interests. Axeria RO will no longer process your Personal Data unless it demonstrates compelling legitimate grounds for the Processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

  • Post-mortem instructions

As a Data Subject, you can provide Axeria RO with instructions regarding the retention, erasure, and sharing of your Personal Data after your death, these instructions being able to be registered with a “digitally certified trusted third party”. These instructions, or a kind of “digital will”, may designate a person responsible for their execution; in the absence of such designation, your heirs will be designated.

In the absence of specific instructions, your heirs may contact Axeria RO to obtain information regarding:

  • Access to the processing of personal data for the purpose of “organizing and regulating the deceased’s inheritance”
  • Receiving communication of “digital assets” or “data representing family memories, which can be transmitted to heirs”
  • Closing your account on the Website and objecting to the continued Processing of your Personal Data.

In any case, you can inform Axeria RO at any time that you do not wish your Personal Data to be communicated to a third party in the event of your death.

9. EXERCISING YOUR SPECIFIC RIGHTS

These rights can be exercised at any time by contacting Axeria RO by email at the following address: dpo@axeria-iard.ro.

For the purpose of applying your rights under the conditions set out above and if Axeria RO has doubts about the identity of the person making the request, Axeria RO may ask you to prove your identity by providing your name, surname, and email address, accompanying the request with a copy of a valid identity document.

A response will be sent to you within a maximum of one (1) month from the date of receipt of the request.

If necessary, this period may be extended by two (2) months by Axeria RO, which will inform you, taking into account the complexity and/or number of requests.

If you request the erasure of your Personal Data, Axeria RO may still retain this data in the form of an Intermediate Archive for the period necessary to fulfill legal obligations, or for evidentiary purposes during the applicable statute of limitations period.

As a Data Subject, you may also lodge a complaint with the competent supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing, whose headquarters are at B-dul G-ral. Gheorghe Magheru 28-30 Sector 1, postal code 01033, Bucharest, Romania.

Version in force on: March 1, 2026

axeria iard - rca calculator-logo

Axeria-Iard © 2023 – All rights reserved – design by MCGM Web Design