Data Protection and Use Policy

Duty to Provide Information on Data Processing

BEST MERIDIAN INSURANCE COMPANY (hereinafter “BMI”), legal ID 3-012-622635 and domiciled in San José, San Rafael de Escazú, BMI Building, in front of the CIMA Hospital, (hereinafter “BMI”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring a positive experience on our website and when using our products and services. This DATA USE AND PROTECTION POLICY describes our approach to privacy to comply with our obligations under applicable laws and regulations. By using our Site, you agree to the terms of this DATA USE AND PROTECTION POLICY.

BMI is responsible for the processing of data collected from Users through this website, at the time of the User's initial registration on the website and those subsequently provided by the User for the development, fulfillment and monitoring of the use derived from this website, in this sense, in accordance with the provisions of the Law on the Protection of the Person Against the Processing of Their Personal Data (Law No. 8968), BMI informs Users of the following regarding the handling of their Personal Data:

1. General Aspects

This consent for the processing of your personal data is comprehensive of all personal data provided to BMI through this website. 

Your data will be part of the database of BMI, will be protected with the necessary security measures and will be used for the purposes detailed in this document.  

The database will be stored and processed by BMI through its Information Technology Department inside or outside Costa Rica.

Acceptance of this DATA USE AND PROTECTION POLICY It will not be mandatory, but it would imply that BMI is unable to provide services through this website.

1. Information we collect

In order to provide our services and to efficiently run our website, we may collect, use, store and transfer a variety of personal information about you. This information falls into several categories:

• Identity Information: This may include your first name, last name, username or other similar identifier, marital status, title, date of birth and gender. If required by the nature of the insurance product or service, we may also collect sensitive identity information such as health information or biometric data.
• Contact Information: This involves your physical address, which may include both billing and delivery addresses, email address, and contact phone numbers. We use this information to communicate with you about your insurance policies, to send you notices or updates, and to provide customer service and support.
• Financial information: We collect financial information such as your bank account details, payment card details, and insurance policy payment history. This information is necessary to administer your policy payments, process claims and refunds, and protect against fraudulent activity.
• Transaction Information: We maintain records of your transactions with us, including details of the insurance products and services you have purchased from us, your payment history, claims history, and any other interactions you have had with our products and services.
• Technical Information: This includes information such as your internet protocol (IP) address, your login credentials, your browser type and version, your time zone setting and location, the types and versions of browser plug-ins you use, your operating system and platform, and other technology on the devices you use to access our website. This information helps us ensure that our website functions properly across different devices and systems and allows us to secure our site.
• Profile Information: This includes information related to your account with us, such as your username and password, purchases or orders you have made, your personal preferences, feedback you have provided to us, and responses to surveys we have conducted. This information helps us understand your needs and preferences, improve our offerings, and personalize our communications with you.
• Usage Information: We collect information about how you use our website, products, and services, which helps us understand usage patterns, improve our website, and develop new products and services.
• Marketing and Communications Information: This includes information about your preferences for receiving marketing communications from us and our third party partners, as well as your communication preferences. We use this information to personalize our marketing messages, measure the effectiveness of our promotional campaigns, and ensure that you receive information that is relevant and interesting to you.

1. How We Use Your Information

We use the information we collect about you for a variety of purposes. Specifically, we use your information:

• Provision of Services: We use your personal data to provide you with the insurance products and services that you request or purchase from us. This includes using your data to process your insurance policy, administer your account, process claims and renewals, and manage your relationship with us. This processing is necessary for the performance of the contract to which you are a party or to take steps at your request prior to entering into a contract.
• Risk Assessment and Management: We use your personal data to assess your insurance needs, understand the risk associated with providing you with insurance, set appropriate premiums, and manage and mitigate risk. This processing is necessary for the performance of the contract to which you are a party or to take steps at your request prior to entering into a contract.
• Customer Support: We use your personal data to provide customer service and support, handle queries and complaints, and facilitate communication between you and us. This processing is based on our legitimate interest in providing quality customer service.
• Compliance and Legal Obligations: We use your personal data to comply with applicable legal obligations, including responding to legal processes or requests for information issued by government authorities or other third parties, fraud prevention, audits, compliance with regulatory reporting requirements, and data protection rights requests. This processing is necessary to comply with a legal obligation to which we are subject.
• Marketing: With your explicit consent or where we have a legitimate interest for business development purposes, we may use your contact details to provide you with information about our products and services, where permitted by law. This includes using your data to personalize and improve the relevance of our marketing messages, measure the effectiveness of our advertising, and send you survey and feedback requests. You have the right to opt out of our use of your personal data for marketing purposes at any time.

Please note that the specific purposes for which we process your personal data may vary depending on the legal basis for processing. We will inform you, before collecting your personal data, whether the provision of your personal data is mandatory or voluntary and of the possible consequences, if any, of not providing your personal data.

1. Database Users and Transfer of Their Personal Data

DATABASE USERS: The database can be consulted by collaborators of BMI duly authorized, suppliers, affiliates, subsidiaries or parent companies of BMI and the members of the Group to which it belongs BMI (BMI Financial Group, INC); to whom the information may be transmitted or transferred and who are obliged to comply with the confidentiality and data protection policies. Additionally, the data may be shared, transmitted, delivered, transferred or disclosed for the purposes mentioned above, to: Yo) The operators necessary for the fulfillment of rights and obligations derived from the contracts entered into with BMI, such as: call centers, researchers, assistance companies, external lawyers, external doctors, among others; ii) Insurance intermediaries involved in the process of conclusion, execution and termination of the insurance contract; and iii) The people with whom BMI carry out procedures for the purposes of entering into Coinsurance or Reinsurance contracts. 

We may need to share your personal data with internal third parties, external third parties and specific third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and we only permit them to process your personal data for specified purposes and in accordance with our instructions.

1. International Transfers

In the course of our operations, we may need to transfer your personal information beyond the borders of Costa Rica to fulfill the purposes for which we process this data. This may occur when our servers, suppliers or service providers are located in different countries. When we make international transfers of your personal information, we ensure that these transfers are subject to adequate protections and we take all necessary measures to ensure that your personal information is treated securely and in accordance with this Privacy Policy. DATA USE AND PROTECTION POLICY and applicable data protection laws. By using our services and submitting your personal information, you consent to the transfer, storage and processing of your personal information in accordance with this DATA USE AND PROTECTION POLICY.

1. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

1. Rights of revocation, rectification, deletion, informational self-determination

To exercise their rights of revocation, rectification, deletion, informational self-determination, the email is available to you receptionbmicr@bmicos.com, the telephone number 2228-6069 or directly at the BMI – Costa Rica Offices located in San José, Escazú, San Rafael, BMI Building. In cases where the owner requests the deletion of all or part of his/her personal information and this is essential for the correct operation of the services provided through the website, BMI will process said request with the understanding that the functionalities of the website will stop working for the User.

1. Data Retention

Our retention of your personal information is determined by the necessity of its use and the fulfillment of the purposes outlined in this policy. Therefore, we will retain your personal information for as long as your account remains active, or as long as necessary to provide you with our services. In addition to the provision of services, there may be legitimate legal, contractual or business requirements that necessitate the long-term retention of your personal information. For example, we may be required by law or regulation to retain certain types of information for a set period of time in order to comply with legal or regulatory requirements, prevent illegal activities, resolve disputes or enforce our terms and conditions. Upon ceasing the above requirements, we will take appropriate steps to delete, anonymize or de-identify your personal information, unless there is a legal requirement or legitimate business reason for us to retain it in an identifiable format. Please note that if you request that your information be deleted, we may still need to retain some necessary information for a period of time to comply with any legal obligations we may have and to resolve disputes. In all cases, our retention of your personal information will be carried out in compliance with our data retention policies and applicable laws.

1. Changes in this DATA USE AND PROTECTION POLICY

We can update this DATA USE AND PROTECTION POLICY from time to time in response to legal, technical or business changes. When we update our DATA USE AND PROTECTION POLICY, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

1. Consent to the management and use of your personal data

Taking into account the above, who accepts this DATA USE AND PROTECTION POLICY freely declares that it authorizes BMI and BMI Financial Group, INC for: 

8968. Store and process personal data provided through the Website, in its national or international personal database and as provided for by Law No. 8968. Especially those relating to health and biomedical data. 
8969. Verify your personal data in public or private, national and international media and store them in a database.
8970. Transfer the data collected in its databases to its Suppliers for the provision of the services described on this website. This transfer may be made to its national or international databases. 
8971. Additionally, I declare that in accordance with the provisions of the Law on the Protection of Individuals with regard to the Processing of their Personal Data (Law No. 8968), I have been informed of the provisions set forth herein regarding the handling of my Personal Data.
8972. In this sense, by accepting this DATA USE AND PROTECTION POLICY, I empower BMI to access, process and collect my personal data under the terms indicated. 

1. Contact Information

If you have any questions or concerns about this DATA USE AND PROTECTION POLICY, please contact us using the following details:

Direction: San Jose, San Rafael de Escazu, BMI Building, in front of the CIMA Hospital

Phone: 2228-6069

Email: receptionbmicr@bmicos.com

By using our site, you confirm that you accept the terms of this DATA USE AND PROTECTION POLICY and agrees to comply with them. If you do not agree with this DATA USE AND PROTECTION POLICY you must not use our Site.