This Privacy Notice ("Notice") pertains to the processing of personal data obtained from companies ("Company") that have accepted the Insurance and Risk Management System User Agreement and their employees ("User"), who will use the Insurance and Risk Management System ("Platform") provided through the website www.polipilot.com ("Site") owned by Digital Risk Management Platforms Limited ("Polipilot" or "Our Company") operating at 239-241 Kennington Lane, London SE11 5QU, United Kingdom, in accordance with the applicable GDPR law ("Law"). In the course of our activities as Polipilot, we take the utmost care to process and protect your personal data transferred to our Company in compliance with the applicable Law.

1. Processed Personal Data and Processing Purposes

Personal data provided by the Company or User is processed by Polipilot for the purposes ("Purposes") of improving Polipilot products and services, facilitating communication between the Company and the User regarding the use of the Platform, and conducting business development and reporting activities within the scope of Polipilot's activities, if necessary, in connection with the processing purposes notified, limited, and proportionate to the purposes allowed within Law. With the explicit consent of the User, personal data may be processed by Polipilot for the purpose of direct marketing and sending commercial electronic messages to the contact address provided by the User.

2. Method of Collecting Personal Data and Legal Basis for Processing Personal Data

Your personal data are obtained by our Company verbally or in writing in electronic media from third parties such as family members, proxy, employer, institutions and organisations specified in the legislation, during the creation of an account by the User and the use of the Platform, via the Platform, via e-mail and the Company channel, or from third parties such as family members, proxy, employer that you allow to be shared with Polipilot, in line with the declared processing purposes.

• Improvement of Polipilot products and services,
• Facilitation of communication between the Company and the User regarding the use of the Platform and the conduct of business development and reporting activities,
• Necessity of processing personal data belonging to the parties of a contract directly related to the establishment or performance of a contract, provided that it is necessary to provide the requested products and services and to fulfill the obligations under the contracts you have entered into,
• Obligation to fulfill legal obligations,
• Necessity of processing data for the establishment, use, or protection of a right,
• Processing of data for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms, all within the framework of the principles set out in Law.

With the explicit consent of the User, personal data may be processed based on explicit consent for the purpose of direct marketing and sending commercial electronic messages to the contact address provided by the User.

3. Parties that are provided with Your Personal Data and Transfer Purposes

Polipilot may transfer personal data of the User to domestic and foreign third-party suppliers (information technology service providers, archive service companies, support service providers, consultants), public institutions and organizations authorized by law, and private individuals authorized by law, as well as to Amazon Web Service servers where the Platform is hosted, in compliance with the Law, limited to and proportionate with the purposes in connection with the purposes of processing, based on the legal reasons mentioned in the Law. If the User gives explicit consent, personal data of the User may be shared with suppliers and business partners for the purpose of direct marketing and sending commercial electronic messages to the contact address provided by the User.

4. Right to Information

Under Law, you have the following rights regarding your personal data:

• to learn whether your personal data is being processed or not,
• to request Requesting information if your personal data is being processed,
• to learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• to learn who are the third parties to whom personal data are transferred at home or abroad and which personal data are transferred, if any
• to request the deletion or destruction of your personal data processed within the framework of the conditions stipulated in the relevant legislation,
• to request correction of the processed personal data in case they are incomplete or inaccurate,
• to request notification of third parties that your personal data have been transferred in case of correction, deletion or destruction of your personal data
• to object to an outcome against you due to the analysis of your processed personal data exclusively by automated systems,
• to demand compensation for the damage due to unlawful processing of your personal data,

We would like to remind you that you can submit your requests to benefit from the rights mentioned above to our Company in writing, through secure electronic signature, mobile signature, or from the electronic mail address you previously notified to our Company (privacy@polipilot.com), and you can visit the website of the authority to obtain detailed information.

Your request will be evaluated and finalised as soon as possible and in any case within the period specified in the Law.

If the processing of your application requires a cost, Polipilot may request a fee from you in accordance with the tariff determined by the Law.