1. General provisions
This Policy sets out how Polis Re LLC (OOO «Polis Re») processes and protects the personal data of users of the polisre.ru website (the "website") and clients of the Polis Re insurance centre. The Policy is published pursuant to Part 2 of Article 18.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (the "Law No. 152-FZ"). It applies to all personal data the operator receives through the website and the personal account, by phone, by e-mail and via messengers.
Operator details
- Operator: Polis Re Limited Liability Company (OOO «Polis Re»).
- Taxpayer ID (INN) 7733823400, Primary State Registration Number (OGRN) 1127747178371.
- Address: 6 Kronshtadtsky Boulevard, Moscow, 125212.
- E-mail for personal data enquiries: info@polisre.ru.
The operator's full company details are given on the Company Details page.
Terms
Terms are used as defined in Law No. 152-FZ. Personal data means any information relating directly or indirectly to an identified or identifiable individual (the data subject). Processing means any operation performed on personal data: collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction.
2. Whose data we process
- website visitors — technical data and cookies;
- applicants — people who have submitted a request, ordered a quote or a consultation;
- personal account users;
- policyholders, insured persons and beneficiaries, including travellers whose details are entered when buying travel insurance, and drivers authorised to drive a vehicle;
- representatives of corporate clients and sole proprietors;
- newsletter subscribers;
- authors of reviews, enquiries and complaints.
3. What data we process
- surname, first name and patronymic; for travel insurance, also the Latin spelling exactly as in the international passport;
- phone number and e-mail address;
- dates of birth of the policyholder and insured persons;
- passport details of the policyholder and travellers (series, number, date of issue and other document details) — only when a policy is being issued and only to the extent required by the insurance company;
- vehicle data: make, model, year of manufacture, VIN, registration plate, details of the owner and drivers (including driving licence details and driving experience) — when quoting and selecting OSAGO (compulsory motor third-party liability insurance), KASKO (voluntary motor hull insurance) and other motor insurance;
- details of the insured property, the trip (countries, dates), the chosen programme and the sum insured;
- for representatives of organisations — position and company name;
- personal account credentials: login and e-mail address (the password is stored only in encrypted, hashed form);
- history of requests, quotes and policies in the personal account;
- technical data: IP address, browser and device information, cookies, URLs of pages viewed, referral source, date and time of visit.
We process health data only where an insurance company requires it for a specific contract (for example, a life insurance or voluntary health insurance questionnaire), and only with your separate written consent as provided by Article 10 of Law No. 152-FZ. We do not process other special categories of personal data (racial or ethnic origin, political views, religious or philosophical beliefs, intimate life) or biometric data.
4. Purposes and legal grounds for processing
| Purpose | Data | Legal ground (Art. 6 of Law No. 152-FZ) |
|---|---|---|
| Receiving and handling requests, feedback, consultations | full name, phone, e-mail, details from the request | consent (cl. 1, Part 1); steps taken at the data subject's request before entering into a contract (cl. 5, Part 1) |
| Preliminary premium quotes and selection of insurers' offers | details of the insured object, vehicle, trip, dates of birth | cl. 5, Part 1; consent |
| Registering and maintaining the personal account | e-mail, phone, full name, history of requests and policies | cl. 5, Part 1 (User Agreement) |
| Issuing policies through partners — insurance companies and the Cherehapa service | full name, dates of birth, passport details, contacts, vehicle data and other information required by the insurer | cl. 5, Part 1; consent to transfer |
| Recording enquiries in the Bitrix24 CRM, service quality control | contacts, enquiry history | consent; legitimate interest of the operator (cl. 7, Part 1) |
| Traffic analytics and website improvement (Yandex.Metrica) | cookies, technical data | consent |
| Information and marketing mailings | name, e-mail, phone | separate consent (Art. 15 of Law No. 152-FZ, Art. 18 of the Federal Law "On Advertising") |
| Publishing reviews on the website | name (or nickname), review text | consent |
| Compliance with legal requirements: accounting and tax records, responses to requests from public authorities | details of contracts and payment documents | cl. 2, Part 1 |
We do not take decisions that have legal consequences for you based solely on automated processing. Calculator results are for reference only: the decision to conclude a contract and the final price are determined by the insurance company.
You give consent to processing by ticking the relevant box in a form on the website, by registering a personal account, or by providing data to a Polis Re specialist for a quote or policy issue.
5. Data of other people
If you provide data of other people — fellow travellers, insured persons, drivers, employees — you confirm that you have obtained their consent to share this data with Polis Re and the insurance company, or that you are acting as their legal representative. We receive data of minors (for example, children covered by travel insurance) only from their parents or other legal representatives.
6. How we process data
Data is processed both with and without the use of automation tools. We process only the data needed for the stated purposes and do not combine databases created for incompatible purposes.
Localisation. When personal data of citizens of the Russian Federation is collected, including via the website, its recording, systematisation, accumulation, storage, clarification and retrieval are carried out using databases located in the Russian Federation (Part 5 of Article 18 of Law No. 152-FZ).
7. Disclosure to third parties
We share personal data only to the extent necessary for the purpose and only with the following recipients:
- Insurance companies licensed by the Bank of Russia — to quote, conclude and service the insurance contract and to settle insured events. Once received, the insurance company processes the data as an independent operator under its own policy.
- OOO «Cherehapa» (the Cherehapa service) — the partner through which travel insurance is quoted and issued on the website. Travellers' and the policyholder's data is transferred to quote, pay for and issue the policy by the chosen insurance company. Payment is processed on the side of the partner and payment services: Polis Re does not receive or store bank card details.
- Bitrix24 CRM — a cloud service in which we register requests and keep the enquiry history.
- OOO «Yandex» — the Yandex.Metrica web analytics service (cookies and technical data).
- hosting, e-mail and mailing providers that keep the website running;
- public authorities — only in cases provided for by law.
Parties processing data on our behalf must maintain confidentiality, comply with the principles and rules of processing set out in Law No. 152-FZ and take measures to protect the data (Part 3 of Article 6). We do not sell personal data or share it with third parties for their own marketing.
Polis Re does not carry out cross-border transfers of personal data. If an insured event occurs abroad, the insurance company may pass the necessary information to an assistance company and medical facilities abroad — such transfer is made by the insurer under the insurance contract and its own rules.
8. Processing and retention periods
- request and correspondence data where no contract was concluded — until the purpose of processing is achieved, but no longer than 3 years from the last contact;
- data of clients with issued policies — for the term of the insurance contract and thereafter for the periods established by law for keeping accounting records;
- personal account data — while the account is active; after the account is deleted, the data is destroyed within 30 days, except for data we are required by law to keep;
- mailing data — until consent is withdrawn;
- cookies — within the period set by your browser and analytics service settings.
Once the purpose of processing is achieved or consent is withdrawn, the data is destroyed or depersonalised within 30 days unless otherwise provided by law or contract (Article 21 of Law No. 152-FZ).
9. Cookies
Cookies are small files that a website stores in your browser. We use:
- essential cookies — for the website, forms, calculators and personal account login to work; without them the website cannot function properly;
- analytics cookies — Yandex.Metrica collects anonymised visit statistics: which pages are viewed, where visitors come from and how they use the website. This helps us make the website more convenient.
Analytics cookies are used with your consent, given in the cookie notice on your first visit. You can delete cookies or block them in your browser settings; some website features may then become unavailable.
10. Your rights
As a data subject, you have the right to:
- obtain information about the processing of your data (Article 14 of Law No. 152-FZ): confirmation that processing takes place, its legal grounds, purposes and methods, periods, and the list of parties to whom data is disclosed;
- require that your data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
- withdraw your consent to personal data processing;
- unsubscribe from mailings at any time;
- appeal against the operator's actions to Roskomnadzor (the authority for the protection of data subjects' rights) or in court.
11. How to submit a request or withdraw consent
Send your request to info@polisre.ru or by post to: Polis Re LLC, 6 Kronshtadtsky Boulevard, Moscow, 125212. Include the details of your identity document, information confirming your relationship with Polis Re (for example, a request number or the e-mail address you used to contact us) and the substance of your request; a paper request must be signed.
We will reply within 10 working days of receiving the request. This period may be extended by no more than 5 working days, in which case we will tell you why.
You can withdraw consent in the same way — by e-mail to info@polisre.ru or by post. You can unsubscribe from mailings via the link in the e-mail. After consent is withdrawn, we stop processing and destroy the data within 30 days unless we have other lawful grounds to continue (for example, performance of a concluded contract or an obligation to keep records). Withdrawing consent does not terminate a contract already concluded with an insurance company: to cancel it, contact the insurer.
12. Data protection
We take legal, organisational and technical measures to protect data against unlawful access, alteration, disclosure and destruction:
- a person responsible for organising personal data processing has been appointed;
- only employees who need data for their work have access to it; employees are familiar with the legal requirements;
- the website uses the secure HTTPS protocol, and passwords are stored in hashed form;
- backups and access control to systems are in place.
No data transmission over the internet can be completely secure, so do not share your personal account password with anyone. Polis Re staff will never ask for your password.
13. Final provisions
This Policy is a publicly available document. We may update it when legislation or our service changes; a new version takes effect upon publication on the website unless stated otherwise. The rules for using the website are set out in the User Agreement, and information on Polis Re's status is on the Disclosure page.
Version of 10 October 2026.