NOTICE ON THE PROCESSING OF PERSONAL DATA
For the companies International-Brokers.com and International-Agents.com, acting in the field of insurance intermediation as controller and processor, in accordance with the EU General Data Protection Regulation 679/2016.
1. INTRODUCTION - RESPONSIBLE LEGAL ENTITY
In the course of our activity as insurance intermediaries, we process Personal Data that concerns you, meaning any information relating to an identified or identifiable natural person, in accordance with Regulation 2016/679/EU and applicable Greek legislation.
WHAT PERSONAL DATA WE COLLECT AND HOW
For the purpose of providing insurance intermediation services and concluding insurance contracts remotely, we operate the website my-policies.com. By using this website you accept, declare and guarantee that you provide only accurate and truthful information wherever required by the site’s electronic data-entry system at all stages of the process.
We may collect personal data when you request an insurance quote, subscribe to newsletters, place or process an order, contact us by email, call our service teams, visit our stores, submit insurance applications, claims notices or supporting documents, or otherwise communicate with us.
Calls with our representatives and call centers may be recorded, in compliance with applicable legal formalities. We may also receive personal data from insurance undertakings, service providers, partner intermediaries and software applications used on computers, smartphones and other mobile devices.
The data we collect may include identification and contact information, such as full name, home address, date of birth, email and phone number, consumer preferences, and in some cases special-category data such as health information, family medical history and other information required by insurance law or by application forms and related documentation.
2. MINORS
The services of this website are not intended for persons under eighteen (18) years of age and we ask that you do not submit personal data through the site if you are under eighteen (18).
3. PURPOSES OF PROCESSING
- Provision of insurance intermediation services and execution of related obligations.
- Customer service, user support and complaint management.
- Promotional communications and newsletters, where you have provided consent.
- Improvement and personalization of your customer experience.
- Data analysis, statistics and customer-satisfaction research.
- Analysis of insurance policies and correspondence with artificial-intelligence tools, and improvement of our own model, as described in section 3A.
3A. USE OF ARTIFICIAL INTELLIGENCE (AI)
We use artificial-intelligence tools as an assistant to our staff, so that we can serve you faster and more accurately: to read and analyse your insurance policies, their terms and exclusions, to compare offers, and to organise your correspondence and prepare our replies.
Our own model (PPI). We have developed our own artificial-intelligence model, PPI, which runs and is trained on our own local, proprietary servers, under our full control. The analysis of your insurance policies and documents with artificial intelligence is carried out exclusively by PPI, on our own servers. Your documents are not sent to any third party, and the copy PPI uses is deleted as soon as the analysis is completed and reviewed.
Improving the model.To keep improving our service, we train PPI with examples from our daily work, such as policy analyses and customer questions together with our staff's replies. Before any example is used for training, identifying details (names, tax numbers, social-security numbers, IBANs, phone numbers, email addresses) are removed and every example is reviewed by a member of our staff. Health data is never used for training. The trained model is used internally only: it is not sold, not made available to third parties and not published.
Health data. We process health data only to the extent required for the insurance application, the servicing of your policy and the handling of your claims.
Correspondence. For certain functions that organise our correspondence, such as routing incoming messages to the responsible department, we also use a specialised artificial-intelligence provider acting as a processor, under a data processing agreement (Article 28 GDPR). The provider processes data only on our behalf and does not use it to train its own models. Your insurance policies and documents are not analysed by third-party providers.
Human review. Every AI output is reviewed by a member of our staff. AI does not send messages, does not change insurance policies and does not make decisions about you.
Legal basis. Analysing documents and correspondence in order to serve you is based on the performance of our contract and, where health data is involved, on your explicit consent. Training PPI is based on our legitimate interest in improving our services (Article 6(1)(f) GDPR). You may object at any time to the use of your data for training by emailing dpo@my-policies.com, with no effect on the service you receive.
4. WHO WE SHARE YOUR DATA WITH
We may transfer personal data and, where necessary, special-category data to the relevant cooperating insurance company, in order to obtain insurance offers, process applications, administer and perform the insurance contract.
Your data may also be accessible to our employees and external partners or providers who support our operations and are bound by legal and contractual confidentiality obligations, including technology providers, communication providers, payment services, courier services and related professional partners, as well as cloud-infrastructure and artificial-intelligence providers (see section 3A).
Our database and files are hosted within the European Union. Some email providers and the artificial-intelligence provider used to organise our correspondence are based in the United States. In those cases transfers rely on the European Commission's Standard Contractual Clauses (SCCs) or, where applicable, the EU-US Data Privacy Framework.
5. NO DISCLOSURE FOR OTHER PURPOSES
We will not transfer your personal data to any third party for any purpose other than those described above, and we do not sell your personal data to third-party companies for their own marketing.
6. DATA RETENTION
We retain your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, throughout the duration of the contractual relationship and until the expiration of any applicable limitation period for related claims.
7. AUTOMATED DECISION-MAKING
We do not make automated decisions. Important decisions concerning your insurance are made by insurance undertakings under their own privacy policies and the applicable policy terms and conditions. The artificial-intelligence tools we use are assistive only; the final judgement always rests with a member of our staff.
8. TECHNICAL AND ORGANIZATIONAL MEASURES
We have adopted appropriate modern organizational and technical safeguards, including encryption and pseudonymization where relevant, to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
However, absolute security in online transmission or storage can never be guaranteed. If you believe the security of your data has been compromised, please notify us immediately at info@my-policies.com.
9. YOUR RIGHTS
- Right to transparent information, information notice and access.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure where legally applicable.
- Right to object, especially to direct marketing and to the use of your data for training our model.
- Right to restriction of processing.
- Right to data portability.
- Right to withdraw consent at any time.
To exercise any of these rights, you may contact us at info@my-policies.com.
10. HOW TO LODGE A COMPLAINT
For any matter related to the processing of your personal data, you may contact us via email at dpo@my-policies.com or by post at 77 Alexandras Ave, 11474, Athens, Greece.
You also retain the right to contact the Hellenic Data Protection Authority, including electronically through www.dpa.gr.
11. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy entered into force on 14 February 2018 and was last revised on 26 October 2026, adding the section on the use of artificial intelligence. It may be amended from time to time, and any changes will be communicated through notice on our website.