Privacy Policy

Welcome to the Grupo Concentra Privacy Policy. In this document you will find information of interest regarding how Grupo Concentra processes your personal data and the rights you hold pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Identity and Contact Details of the Controller

Below are the companies of the CONCENTRA Group to which this Privacy Policy applies equally:

COMPANY	TAX ID	ADDRESS
CONCENTRA INVERSIONES S.L.	B83181479	Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
HISPANIA GLOBAL UNDERWRITING CORREDURIA DE REASEGUROS S.L.	B83604363	C/Antonio González Echarte, 1 planta 3ºIzq. – 28029 Madrid
HISPANIA RISK BROKER CORREDURIA DE SEGUROS Y REASEGUROS S.A.	A85158269	C/Antonio González Echarte, 1 planta 3ºIzq. – 28029 Madrid
CONCENTRA MEDIACIÓN S.L.	B87623112	Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
CONCENTRA GARANTÍAS S.L.	B84436955	Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
CONCENTRA INSURANCE BROKER S.L.	B59191296	Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)
CONCENTRA INSURANCE BROKER DEL MEDITERRÁNEO, S.L.U.	B02069748	Calle Vicente Aleixandre 16, 02640 Almansa (Albacete)
NEW RISK, S.L.	B65223661	Calle Marie Curie, 5 Edif. Alfa 4º 4.6, 28521 Rivas-Vaciamadrid (Madrid)

You can contact GRUPO CONCENTRA through the following channels:

In person or by post addressed to the registered office of each of the entities mentioned above
By email to [email protected] or by contacting the Data Protection Officer through the same channel provided for this purpose.

Processing of Personal Data

Recruitment

The entities of Grupo Concentra will process data relating to candidates for the purpose of managing recruitment processes for job positions.

Legal basis: The basis legitimising the processing is the consent of the data subject in the case of unsolicited applications when there is no open selection process, or the implementation of pre-contractual measures when your data comes from a platform or recruitment company.

Retention period: The data provided will be retained for a period of 1 year. Once this time has elapsed, or you request deletion or revoke the consent granted to participate in this process, your personal data will be deleted.

Recipients: The data may be communicated to group companies for the management of vacancies in application of Recital 48 of the GDPR. Apart from this case, data will not be transferred to third parties except by legal obligation.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Quotation Management

The entities of Grupo Concentra will process your data for the purpose of preparing and presenting you with a quotation in relation to the selected insurance policy.

Legal basis: The basis legitimising the processing is the implementation of pre-contractual measures in relation to the preparation of the quotation and compliance with legal obligations in relation to Royal Decree-Law 3/2020.

Retention period: The data provided will be retained for the time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are informed that it will be necessary to communicate your data to the corresponding insurance companies for the issuance of the quotation and to other companies of the Concentra group in application of legitimate interest in accordance with Recital 48 of the GDPR.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Brokerage Client Management

The entities of Grupo Concentra will process your data for the purpose of formalising the contracting of the corresponding insurance policy; managing the information to be provided, where applicable, to the policyholder, insured person and beneficiary of the insurance; and providing assistance and advice when necessary.

Legal basis: The basis legitimising the processing is compliance with contractual obligations in relation to the subscription of the corresponding policy and compliance with legal obligations in relation to Royal Decree-Law 3/2020.

Retention period: The data provided will be retained for 6 years from the termination of the corresponding contract and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are informed that it will be necessary to communicate your data to the corresponding insurance companies for the formalisation of the corresponding contract. Likewise, your data will be communicated to banking entities for payment management and to other companies of the Concentra group in application of legitimate interest pursuant to Recital 48 of the GDPR.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Management of Clients Outside Mediation Activities

The entities of Grupo Concentra will process your data for the purpose of managing the services or projects contracted in relation to activities unrelated to mediation.

Legal basis: The basis legitimising the processing is compliance with contractual obligations in relation to the contracted service or project.

Recipients: You are informed that your data will be communicated to banking entities for payment management and to other companies of the Concentra group in application of legitimate interest pursuant to Recital 48 of the GDPR.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Supplier Management

The entities of Grupo Concentra will process your data for the purpose of managing contracted services.

Legal basis: The basis legitimising the processing will be the performance of the contract itself and legitimate interest in application of Article 19 LOPDGDD.

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of Recital 48 of the GDPR.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Management of Contact Details and Contact Forms

The entities of Grupo Concentra will process your data for the purpose of maintaining commercial, financial and business relationships.

Legal basis: The basis legitimising the processing of individual entrepreneurs and liberal professionals is legitimate interest in application of Article 19 LOPDGDD. As regards the contact form, the basis legitimising the processing is legitimate interest, as your identification and contact data are suitable for addressing your request for information, necessary for us to contact you and resolve your queries, and proportionate in the sense that the minimum data are processed to fulfil the intended purpose.

Retention period: Your data will be retained for the duration of the contractual relationship and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities. With regard to the contact form, your data will be retained for the time necessary to address your request.

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of Recital 48 of the GDPR.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Sending Commercial Communications

The entities of Grupo Concentra will process your data for the purpose of sending you commercial communications about our products or services that may be of interest to you.

Legal basis: The basis legitimising the processing is the consent previously granted or the application of legitimate interest provided for in Article 21.2 of the LSSI in the event that you are a client and the service offered is similar to one previously contracted. Likewise, and in the event that you have given your consent, the entities belonging to Grupo Concentra may send you information about products or services that may be of interest to you. You can obtain more information about the entities belonging to Grupo Concentra by consulting the section "Companies that Form the Concentra Group" at www.concentragrupo.com

Retention period: Your data will be retained indefinitely until you revoke your consent, object to the processing or request the deletion of your data. In each communication, the user may object to receiving this type of information through the specific mechanisms to process unsubscription, as well as request, where applicable, their right to revoke consent, object or delete.

Recipients: Your data may be communicated to the other entities of Grupo Concentra in the event that you have authorised the sending of commercial communications by said entities. Apart from this case, your data will not be communicated to third parties except by legal obligation.

Rights: You may withdraw the consent granted and exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Internal Information System

The entities of Grupo Concentra will process your data for the purpose of receiving and deciding on the admission for processing of the communication received; carrying out the appropriate investigations of the reported facts and, where appropriate, adopting the corresponding corrective measures; and keeping the whistleblower or informant informed about the admission or not of the communication, as well as the progress and results of the investigation process.

Legal basis: The basis legitimising the processing is the application of Law 2/2023 of 20 February regulating the protection of persons who report regulatory infringements and the fight against corruption in the case of a company obliged in accordance with the provisions of Article 10, or compliance with a mission carried out in the public interest or exercise of public powers conferred on the data controller in the case of a non-obliged company.

Retention period: Personal data will be processed within a maximum period of three months from receipt of the communication or, if an acknowledgement of receipt was not sent to the informant, three months from the expiry of the seven calendar days available to acknowledge receipt of the communication. The aforementioned period may be extended by a further three months in cases of particular complexity. Once the aforementioned period has elapsed without investigation actions having been initiated, the data will be deleted from the system, except for the purpose of maintaining evidence of the system's operation and in anonymised form.

Recipients: You are informed that your data may be communicated to public bodies or institutions, judges and courts when necessary for the adoption of disciplinary measures, for the processing of judicial proceedings that may be appropriate, or in cases where it is legally required, and to the Public Prosecutor's Office when the procedure falls within its competence.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Likewise, the entities of Grupo Concentra carry out other types of processing related to human resources management, video surveillance and the management of data related to directors and/or proxies, shareholders or partners of the Company that are not detailed in this Privacy Policy.

Profiling

The entities of the Group to which you provide your data will process your data for the creation of a profile about you, for analytical purposes, as well as for the creation of targeting audiences, related to the business processes based on the information provided within the framework of the insurance project. This process allows us to understand your browsing behaviour, subject to prior acceptance of the Cookie Policy, to communicate to you, based on your user profile, the offers that may best suit you, as well as to have new pricing variables that could be inferred from your purchasing and consumption habits to bring to your attention new services or coverage linked to the product subscribed by you, including, for this latter purpose, data and information provided by third parties.

Legal Basis: The basis of legitimacy for the creation of a profile about you for analytical purposes is the consent granted by you, allowing a profile to be created based on your personal characteristics, browsing information, information obtained regarding your needs or preferences expressed by you in the acquisition of products, and information obtained from third parties, according to your consumption habits.

The basis of legitimacy for the creation of a profile about you for the creation of targeting audiences is legitimate interest, allowing a profile to be created based on your personal characteristics, browsing information, information obtained regarding your needs or preferences expressed by you in the acquisition of products, and information obtained from third parties, according to your consumption habits.
This purpose responds to the need, based on the analyses carried out, to provide you with management of the requested product more closely aligned with your real needs, including better pricing and proposal of services linked to the subscribed product. The information relating to your profile will be processed securely and confidentially, being processed only in systems that analyse the information obtained in an automated manner.

On the other hand, you may, at any time, express your wish not to be subject to this processing by exercising your right to object to it.

Retention period: Your data will be retained for the period of time necessary to fulfil the intended purpose and will subsequently be kept blocked for the period of time necessary to address any potential legal liabilities.

Recipients: You are informed that your data may be communicated to other companies of the Concentra group in application of Recital 48 of the GDPR. You can obtain more information about the entities belonging to Grupo Concentra by consulting point 1.1 of this policy and in the section "Companies that Form the Concentra Group" at www.concentragrupo.com.

Rights: You may exercise your data protection rights as indicated in the "Exercise of Rights" section of this Privacy Policy.

Exercise of Rights

We inform you that you may exercise the following rights:

Right of access to your personal data to know which are being processed;
Right of rectification of any inaccurate personal data;
Right of erasure of your personal data, where possible;
Right to request the restriction of processing of your personal data when the accuracy, legality or necessity of data processing is doubtful, in which case we may retain the data for the exercise or defence of claims.
Right to object to the processing of your personal data, when the legal basis enabling us to process it is legitimate interest. GRUPO CONCENTRA will cease processing your data unless we have a compelling legitimate interest or for the formulation, exercise or defence of claims.
Right to data portability, when the legal basis enabling us to process it is your consent.

These rights may be exercised free of charge by the data subject, and where applicable their representative, by means of a written request addressed to [email protected]

In addition to the aforementioned rights, the data subject will have the right to withdraw consent granted at any time, without such withdrawal of consent affecting the lawfulness of processing prior to its withdrawal. The entities of Grupo Concentra may continue to process the data subject's data to the extent permitted by applicable law.

The entities of Grupo Concentra remind the data subject that they have the right to lodge a complaint with the competent Supervisory Authority of the country in which they are located.

What Security Measures Do We Have in Place?

The entities of Grupo Concentra are committed to complying with their obligation of confidentiality of personal data and their duty to protect them, and will adopt the necessary measures to prevent their alteration, loss, unauthorised processing or access, in accordance with the provisions of applicable regulations.

The entities of Grupo Concentra have implemented the technical and organisational security measures necessary to guarantee the security of your personal data and prevent their alteration, loss and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether arising from human action or from the physical or natural environment, in accordance with the provisions of applicable regulations.

Confidentiality

The personal data that we may collect through the website or through the various communications we maintain with you will be treated with confidentiality, undertaking to maintain confidentiality regarding them in accordance with the provisions of applicable legislation.

Links to Other Websites

This website may include hyperlinks to other sites that are not operated or controlled by the entities of Grupo Concentra. Therefore, the entities of Grupo Concentra do not guarantee, nor are they responsible for, the lawfulness, reliability, usefulness, truthfulness and currency of the contents of such websites or their privacy practices. Please, before providing your personal information to these websites outside the entities of Grupo Concentra, bear in mind that their compliance with data protection matters may differ from ours.

Privacy Policy Updates

The content of the data protection policy may be modified to adapt it to legislative changes that may occur, as well as to criteria and positions issued by supervisory authorities. In any case, any modification of the Privacy Policy will be duly notified to the Data Subject so that they are informed of the changes made in the processing of their personal data and, in the event that applicable regulations so require, the Data Subject may grant their consent.

We're here to help you

We transform the way we insure, putting people at the centre.