Under the General Data Protection Regulation, the term "processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
In addition to the term "processor", the General Data Protection Regulation defines several new terms in relation to the processing of personal data, such as "recipient" and "joint controller", which do not have the same meaning. This means that, also on the basis of the guidance of the Information Commissioner, the relevant practice and understanding of these concepts will be further developed, and therefore changes to the individual categories of processors listed below and to the categories of recipientss in the List of categories of recipients of personal data are also possible.
| Category of processor | Subject of contractual processing |
|---|---|
|
Insurance agents and insurance intermediaries in various legal forms |
Provision of insurance agency and insurance intermediation services |
|
Contractual assistance centre |
Provision of assistance services agreed in the insurance contract |
|
External medical censors |
Providing expert assistance and opinions |
|
Payment service providers |
Payment implementation |
|
External IT service providers |
Providing system maintenance, administration and development services for systems and applications |
|
Providers of destruction of personal data files |
Implementation of procedures for the removal and destruction of personal data files |
|
Contractual partner for a marketing campaign or event |
Carrying out activities related to a marketing campaign or event |
|
Printers |
Providing document printing services |
|
Providers for the preparation of discounts and the distribution of coupons |
Providing services relating to the preparation of discounts and the distribution of coupons |
|
External body shops and contract garages |
Implementing procedures for reporting damage, repairing damage |
|
Detectives |
Investigating suspected insurance fraud |
|
Call studio |
Providing call studio services |
|
Grant project implementers |
Implementation of grant projects |
|
Event organisers |
Organisation of events |
|
Digital marketing service providers |
Implementing digital marketing |
|
Providers of marketing communications, marketing and advertising services |
Providing marketing communications, marketing and advertising services |
|
Providers of business communication and public relations services |
Providing corporate communication and public relations services |
|
Advertising service providers |
Providing advertising services |
|
Provider of electronic signing and electronic stamping services (remote) |
Providing a platform for the implementation of signatory authentication, electronic signing and electronic sealing of documents |
We would like to remind you in particular that, in accordance with the General Data Protection Regulation, personal data are also disclosed to recipients of personal data for the purposes of compliance with the law, for the purposes of the exercise of legitimate interests and for the purposes of consent. A list of categories of recipients is published here.