Skip to content
DigiCare Insurance Greece home page

Privacy policy

Last updated:

This policy sets out how DigiCare Insurance collects and uses your personal data when you visit digicare-insurance.gr or ask us for an insurance quote, who receives it, and how you can exercise your rights under the GDPR (Regulation (EU) 2016/679).

Who is responsible for your data

The controller is Costas Matheou Insurance Agent, trading as DigiCare Insurance: a licensed insurance agent registered in Cyprus with the Insurance Companies Control Service (ICCS), licence no. 2451, business address Eirinis 4, shop 1 & 2, 8027 Paphos, Cyprus. Full details are on our legal information page.

For any question about your data, write to info@digicare-insurance.gr. Costas Matheou handles these requests himself. We have not appointed a data protection officer, because the law does not require one for a business of our size and type (GDPR Art. 37).

What we collect

  • You ask for a quote

    What
    The insurance you want, your Greek postcode, your name, your phone number and/or e-mail, the language you want a reply in, and the details the insurer needs for that line: for a vehicle, the plate country and first-registration year; for a property, floor area and use; for health or residence-permit cover, your year of birth and permit type; for a business, its activity

  • You write to us

    What
    Your message and contact details

  • You accept analytics or marketing cookies

    What
    How you use the site: pages viewed, clicks and scrolls, device and browser, approximate location from your IP address, and which ad or link brought you here (Google Analytics, Microsoft Clarity, Google Ads). Clarity masks what you type into our forms, so it is never recorded

  • You visit the site

    What
    Technical data your browser sends (IP address, browser type, the page requested, time), processed by our hosting provider to deliver the site and protect it from abuse

Analytics and marketing cookies are set only if you accept them in our cookie banner. You can change your choice at any time through “Cookie settings” at the bottom of every page. Details are in our cookie policy.

If a future health-insurance quote asks about your health, we will ask for your separate, explicit consent before we process that information (GDPR Art. 9(2)(a)).

Purposes and legal basis

  • Getting you insurance quotes, answering you and arranging the policy you choose

    Legal basis
    Steps you asked us to take before a contract (GDPR Art. 6(1)(b))

  • Sending your details to insurers so they can quote

    Legal basis
    Same basis: without it, no insurer can quote (Art. 6(1)(b))

  • Keeping records of the advice and quotes we gave, as insurance distribution rules require

    Legal basis
    Legal obligation (Art. 6(1)(c))

  • Running the website securely and protecting it from abuse (technical data)

    Legal basis
    Our legitimate interest in a working, secure site (Art. 6(1)(f))

  • Measuring how the site is used (Google Analytics, Microsoft Clarity)

    Legal basis
    Your consent (Art. 6(1)(a) and Greek Law 3471/2006, Art. 4(5)). You can withdraw it at any time

  • Measuring our ads and showing them to people who visited (Google Ads)

    Legal basis
    Your consent (Art. 6(1)(a) and Law 3471/2006, Art. 4(5)). You can withdraw it at any time

  • Sending you news or offers

    Legal basis
    Only with your consent (Art. 6(1)(a) and Greek Law 3471/2006, Art. 11). You can withdraw it at any time

You do not have to give us your details, but without them we cannot get you a quote.

Who receives your data

  • Insurers. We send your quote details to the insurers we ask to quote for you. If you decide to take out a policy, your details are entered into the insurer's systems so it can issue it. Each insurer uses your data under its own privacy notice, which it gives you with its offer.
  • Our e-mail inbox and our customer relationship management (CRM) system. Quote requests from the website arrive only there, and we manage them there. Both process your data only on our instructions.
  • Our hosting provider. Vercel Inc., which runs this website.
  • Google (Google Analytics, Google Ads). Only if you accept analytics or marketing cookies.
  • Microsoft (Microsoft Clarity). Only if you accept analytics cookies.

We do not sell your data. Google's advertising cookies run only if you accept marketing cookies.

Transfers outside the EU

Vercel, Google and Microsoft may process data in the United States. All three are certified under the EU-U.S. Data Privacy Framework (Commission Decision (EU) 2023/1795). Vercel's data processing agreement with us also adds the EU Standard Contractual Clauses of 2021.

How long we keep it

  • A quote request that does not lead to a policy

    How long
    12 months from the request, then deleted

  • Records for a policy arranged through us

    How long
    While the policy is in force, and afterwards for as long as insurance regulation requires us to keep them

  • Analytics data

    How long
    Google Analytics: no longer than 14 months. Microsoft Clarity: session recordings 30 days, other data up to 13 months. Cookies expire as listed in our cookie policy

  • Your cookie choice

    How long
    6 months, then we ask again

  • Marketing consent

    How long
    Until you withdraw it, plus the record that you did

Automated decisions

We do not make decisions about you by automated means alone. The insurer sets its price and decides whether to offer cover; its own documents explain how.

Your rights

  • Give you a copy of your data (Art. 15)
  • Correct it (Art. 16)
  • Delete it (Art. 17)
  • Restrict how we use it (Art. 18)
  • Send it to you or another provider in a usable format (Art. 20)
  • Stop using it, including for marketing (Art. 21)
  • Withdraw a consent you gave, at any time, without affecting what we did before (Art. 7(3)); for cookies, use “Cookie settings” at the bottom of any page

Write to info@digicare-insurance.gr. We answer within one month. If a request is complex we may extend this by up to two months, and we tell you within the first month if we do (Art. 12(3)).

How to complain

If you live in Greece, you can complain to the Hellenic Data Protection Authority (ΑΠΔΠΧ) at any time (GDPR Art. 77). Because our business is established in Cyprus, the Cyprus Commissioner for Personal Data Protection is our lead supervisory authority and works with the ΑΠΔΠΧ on your complaint. We would like the chance to fix the problem first, so please write to us too.

Changes to this policy

When we change how we use your data, we update this page and its date. If a change affects data we already hold, we tell you before it applies.