Welcome to the Privacy Policy of Grupo Concentra. In this document you will find information of interest to you regarding how Concentra Group treats your personal data and your rights under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). 

Identity and contact details of the Responsible

 The companies of the CONCENTRA Group, which are equally affected by this Privacy Policy, are listed below: 

SOCIEDADNIFDOMICILIO
CONCENTRA INVERSIONES S.L.B83181479Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
HISPANIA CAPITAL INVESTMENTB85141711C/Antonio González Echarte, 1 planta 3ºIzq. – 28029 Madrid
HISPANIA GLOBAL UNDERWRITING CORREDURIA DE REASEGUROS SLB83604363C/Antonio González Echarte, 1 planta 3ºIzq. – 28029 Madrid
HISPANIA RISK BROKER CORREDURIA DE SEGUROS Y REASEGUROS SAA85158269C/Antonio González Echarte, 1 planta 3ºIzq. – 28029 Madrid
SARTORIO AGENCIA DE SEGUROS S.L.B59103564Carrer de Veneçuela nº 105, bloq. 1.2. 2º 1ª, 08019, Barcelona
COBERGEST GRUPO CONCENTRA SLB87623112Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
CONCENTRA GARANTÍA S.L.B84436955Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
UBL BROKERS GRUPO CONCENTRA SAA79309837Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
GESCOBERT CORREDURIA DE SEGUROS SLB59191296Carrer de Veneçuela nº 105, bloq. 1.2. 2º 1ª, 08019, Barcelona

You can contact GRUPO CONCENTRA through the following channels:  

  • In person or by post to the address of each of the aforementioned entities. 
  • By e-mail to [email protected] or by contacting the Data Protection Delegate through the same channel provided for this purpose.

Processing of personal data 

Personnel selection. 

The entities of Grupo Concentra will process the data related to the candidates for the purpose of managing the selection processes for job positions. 

Legal basis: The basis that legitimises the processing is the consent of the data subject in the case of the submission of self-candidatures when there is no open selection process or in application of pre-contractual measures when their data comes from a selection platform or company.  

Retention period: The data provided will be kept for a period of 1 year. Once this time is exceeded or you request deletion or revoke the consent given to participate in this process, your personal data will be deleted:  

Recipients: The data may be communicated to group companies for the management of vacancies in application of CD 48 of the GDPR. Otherwise, data will not be disclosed to third parties unless legally obliged to do so.  

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Budget management 

The entities of Grupo Concentra will process your data in order to prepare and present you with a quote in relation to the selected insurance policy. 

Legal basis: The basis that legitimises the processing is the application of pre-contractual measures in relation to the preparation of the quote and compliance with legal obligations in relation to Royal Decree-Law 3/2020.  

Retention period: The data provided will be kept for the time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to meet possible legal liabilities. 

Recipients: You are informed that it will be necessary to communicate your data to the corresponding insurance companies for the issuance of the quote and to other companies of the Concentra group in application of legitimate interest in accordance with the provisions of CD 48 of the RGPD. 

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Brokerage customer management 

The entities of Grupo Concentra will process your data in order to formalise the contracting of the corresponding insurance policy; to manage the information that must be provided to the policyholder, insured and beneficiary of the insurance and to provide assistance and advice if necessary.  

Legal basis: The basis legitimising the processing is compliance with contractual obligations in relation to the subscription of the corresponding policy and compliance with legal obligations in relation to Royal Decree-Law 3/2020. 

Retention period: The data provided will be kept for 6 years from the end of the corresponding contract and thereafter will be kept blocked for the period of time necessary to meet possible legal liabilities. 

Recipients: You are informed that it will be necessary to communicate your data to the corresponding insurance companies in order to formalise the corresponding contract. Likewise, your data will be communicated to banks for collection management and to other companies of the Concentra group in application of legitimate interest in accordance with the provisions of CD 48 of the RGPD. 

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Management of clients outside mediation activities 

The entities of Grupo Concentra will process your data in order to manage the services or projects contracted in relation to activities not related to mediation. 

Legal basis: The basis that legitimises the processing is the fulfilment of contractual obligations in relation to the contracted service or project. 

Retention period: The data provided will be kept for the time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to meet possible legal liabilities.  

Recipients: You are informed that your data will be communicated to banks for collection management and to companies of the Concentra group in application of legitimate interest under the provisions of CD 48 of the RGPD. 

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy.  

Supplier management 

The entities of Grupo Concentra will process your data in order to manage the contracted services. 

Legal basis: The basis that legitimates the treatment will be the execution of the contract and legitimate interest in application of article 19 LOPDGDD.   

Retention period: Your data will be kept for the duration of the contractual relationship and will subsequently be kept blocked for the period of time necessary to meet possible legal responsibilities. 

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of the provisions of CD 48 of the RGPD. 

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy.  

Management of contact data and contact forms 

The entities of Grupo Concentra will process your data in order to maintain commercial, financial and business relations. 

Legal basis: The basis that legitimates the processing of individual entrepreneurs and liberal professionals is the legitimate interest in application of article 19 LOPDGDD. With regard to the contact form, the basis that legitimises the processing is legitimate interest, as your identification and contact details are suitable for dealing with your request for information, necessary to contact you and resolve your queries and proportional in the sense that the minimum data are processed to fulfil the intended purpose.   

Retention period: Your data will be kept for the duration of the contractual relationship and thereafter will be kept blocked for the period of time necessary to meet possible legal responsibilities. With regard to the contact form, your data will be kept for the time necessary to deal with your request. 

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of the provisions of CD 48 of the RGPD. 

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Sending commercial communications 

The entities of Grupo Concentra will process your data in order to send you commercial communications about our products or services that may be of interest to you. 

Legal basis: The basis that legitimizes the processing is the consent previously granted or in application of the legitimate interest provided for in Article 21.2 of the LSSI in the event that you are a customer and the service offered is similar to one previously contracted. Likewise, and in case you have given your consent, the entities belonging to Grupo Concentra may send you information about products or services that may be of interest to you. You can obtain more information about the entities belonging to the Concentra Group by consulting the ‘Companies that make up the Concentra Group’ section at 

Retention period: Your data will be kept indefinitely until you revoke your consent, object to the processing or request the deletion of your data. In each communication, the user will be able to oppose receiving this type of information through the specific mechanisms to process the unsubscription, as well as to request, where appropriate, their right to revoke consent, oppose or delete their data. 

Recipients: your data may be communicated to other entities of Grupo Concentra in the event that you have authorised the sending of commercial communications by these entities. Otherwise, your data will not be communicated to third parties unless legally obliged to do so. 

Rights: You may withdraw your consent and exercise your rights regarding data protection as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Internal information system 

The entities of Grupo Concentra will process your data in order to receive and decide on the admission of the communication received; carry out the appropriate investigations of the reported facts and, if necessary, adopt the corresponding corrective measures and keep the complainant or informant informed about the admission or not of the communication, as well as the progress and results of the investigation process. 

Legal basis: The basis that legitimises the processing is the application of Law 2/2023 of 20 February regulating the protection of persons who report regulatory infringements and the fight against corruption in the case of a company obliged in accordance with the provisions of Article 10 or the fulfilment of a mission carried out in the public interest or the exercise of public powers conferred on the data controller in the case of a non-obliged company. 

Storage period: they shall process the personal data within a maximum period of three months from receipt of the communication or, if no acknowledgement of receipt was sent to the informant, three months from the expiry of the seven calendar days they have to acknowledge receipt of the communication. The above time limit may be extended by a further three months in cases of particular complexity. Once the aforementioned period has elapsed without any investigation having been initiated, the data will be deleted from the system, except for the purpose of maintaining evidence of the operation of the system and in an anonymised form. 

Recipients: You are informed that your data may be communicated to public bodies or institutions, judges and courts when it is necessary for the adoption of disciplinary measures, for the processing of the legal proceedings that, where appropriate, are necessary or in those cases in which it is legally required and to the Public Prosecutor’s Office, when the proceedings fall within its competence. 

Rights: You may exercise your rights regarding data protection as indicated in the ‘Exercise of Rights’ section of this Privacy Policy. 

Likewise, the entities of Grupo Concentra carry out other types of processing related to the management of human resources, video surveillance and the management of data related to the administrators and/or attorneys-in-fact, shareholders or partners of the Company that are not detailed in this Privacy Policy. 

Profiling

The Group entities to which you provide your data will process your data for profiling purposes, for analytical purposes, as well as for the creation of targeting audiences related to Gescobert’s business processes based on the information provided within the framework of the insurance project. This process allows us to learn about your browsing behaviour, upon acceptance of the Cookies Policy, to communicate to you, based on your user profile, the offers that may best suit you, as well as, to have new pricing variables that could be inferred from your purchasing and consumption habits in order to bring to your attention new services or coverage linked to the product subscribed by you, including, for the latter purpose, data and information provided by third parties.

Legal basis: The basis of legitimacy for the elaboration of a profile about you for analytical purposes is the consent given by you, allowing us to proceed to the elaboration of your profile based on your personal characteristics, information from your browsing, information obtained concerning your needs or preferences expressed by you in the acquisition of the products and information obtained from third parties, according to your consumption habits.

  • The basis of legitimacy for the elaboration of a profile about you for the creation of targeting audiences is the legitimate interest, allowing us to proceed to the elaboration of your profile based on your personal characteristics, information about your browsing, information obtained concerning your needs or preferences expressed by you in the acquisition of the products and information obtained from third parties, according to your consumption habits.
  • This purpose responds to the need, based on the analyses carried out, to provide you with a management of the product requested that is more in line with your real needs, including a better pricing and proposal of services linked to the product subscribed to. The information relating to your profile will be treated securely and confidentially, being processed only in the systems that analyse the information obtained automatically.
    Moreover, you may, at any time, express your wish not to be the subject of this processing by exercising your right to object to it.

Retention period: Your data will be kept for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to meet possible legal responsibilities.

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of the provisions of CD 48 of the RGPD. You can obtain more information about the entities belonging to the Concentra Group by consulting point 1.1 of this policy and in the section ‘Companies that make up the Concentra Group’ at www.concentragrupo.com.

Rights: You may exercise your data protection rights as indicated in the ‘Exercise of Rights’ section of this Privacy Policy.

Exercise of rights 

We inform you that you may exercise the following rights: 

  

  1. Right of access to your personal data to find out which personal data is being processed; 
  2. The right to rectify any inaccurate personal data; 
  3. Right to erasure of your personal data, where this is possible; 
  4. The right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the data for the exercise or defence of claims. 
  5. The right to oppose the processing of your personal data, when the legal basis that enables us to process it is legitimate interest. The CONCENTRA GROUP will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims. 
  6. The right to the portability of your data, when the legal basis that enables us to process the indicated data is your consent. 

Said rights may be exercised free of charge by the interested party, and where appropriate, whoever represents them, by means of a written request addressed to [email protected]. 

In addition to the aforementioned rights, the interested party shall have the right to withdraw the consent granted at any time without such withdrawal of consent affecting the lawfulness of the processing prior to the withdrawal of consent. The entities of Grupo Concentra may continue to process the data subject’s data to the extent permitted by applicable law.   

The entities of Grupo Concentra remind the data subject that he/she has the right to lodge a complaint with the competent supervisory authority of the country in which he/she is located.  

What security measures have we implemented? 

The entities of Grupo Concentra are committed to fulfilling their obligation of secrecy of personal data and their duty to protect it, and will adopt the necessary measures to prevent its alteration, loss, or unauthorized access, in accordance with the provisions of applicable regulations. 

The entities of Grupo Concentra have implemented the necessary technical and organisational security measures to guarantee the security of your personal data and to avoid its alteration, loss and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment, in accordance with the provisions of the applicable regulations.  

Confidentiality 

The personal data that we may collect through the website or by means of the different communications that we maintain with you will be treated with confidentiality, and we undertake to keep them secret in accordance with the provisions of the applicable legislation. 

Links to other websites 

This website may include hyperlinks to other websites that are not operated or controlled by Grupo Concentra entities. Therefore, the entities of Grupo Concentra do not guarantee, nor are they responsible for the legality, reliability, usefulness, veracity and timeliness of the contents of such websites or their privacy practices. Before providing your personal information to these websites outside of Grupo Concentra, please be aware that their data protection compliance may differ from ours. 

Updating of the privacy policy 

The content of the data protection policy may be subject to modification in order to adapt it to legislative changes that may occur, as well as to criteria and positions issued by the control authorities. In any case, any modification to the Privacy Policy will be duly notified to the Data Subject so that he/she is informed of the changes made to the processing of his/her personal data and, if the applicable regulations so require, the Data Subject may grant his/her consent.