Privacy Policy

PURPOSE OF COLLECTING PERSONAL DATA

ViReels processes the personal data of its clients and other individuals who are connected to or contact it, which are provided to it through browsing the website sykors.com, for the purpose of issuing and delivering purchased insurance policies.

Personal data (identity data, address, personal identification number, phone number, age, or any other similar data that has been provided) may be processed and used by ViReels both for the purposes of issuing and delivering the insurance policies ordered on the company's website, and for the purpose of creating databases and using them in future actions and activities of the operator.

ViReels will not disclose any of your data (personal information or optional information) to any third party without your consent, except when we have a good faith belief that the law requires us to do so, or when it is necessary to protect the rights or property of our company.

AUTHENTICATION THROUGH THIRD-PARTY SERVICES (GOOGLE SIGN-IN)

AUTHENTICATION THROUGH THIRD-PARTY SERVICES (FACEBOOK LOGIN)

AUDIT OF SECURITY IN INFORMATION SYSTEMS OF PERSONAL DATA

ViReels organizes the generation of audit records for the security of personal data in information systems for the following events:

The registration of user login/logout attempts is performed (the date and time of the login/logout attempt are recorded; user ID; the result of the login/logout attempt – successful or failed);

The registration of attempts to gain access for applications and processes intended for processing personal data is performed;

The registration of attempts to start/end the working session of application programs and processes intended for processing personal data, the registration of changes to user access rights, and the status of access objects is performed;

The registration of changes to the user's access rights (competencies) and the status of access objects is performed;

The registration of the exit from the system of information containing personal data (electronic documents, data, etc.), the registration of changes to the access rights of the subjects, and the status of access objects is performed.

In case of malfunction of the audit of personal data security in information systems or the completion of the entire memory allocated for storing the audit results, the person responsible for the personal data security policy is informed, and measures are taken to restore the working capacity of the audit system.

Permanent monitoring and analysis of the security audit records in personal data information systems are carried out to detect unusual or suspicious activities in the use of these information systems, with the preparation of a report regarding the cases of detecting such activities, stored in electronic computing means, and the implementation of predefined actions in the security policy for such cases.

The results of the security audit in personal data information systems, which represent personal data processing operations and the means of performing the audit, are protected against unauthorized access by implementing appropriate security measures, including ensuring their confidentiality and integrity.

To ensure the integrity of information containing personal data and information technologies, the identification, logging, and removal of deficiencies in the software intended for processing personal data are ensured, including the installation of corrections and renewal packages for this software. Protection against the infiltration of harmful programs into the software intended for processing personal data is ensured, a measure that ensures the possibility of timely and automatic renewal of the means for protection against harmful programs and virus signatures. Technologies and intrusion detection tools are used, allowing the monitoring of events in the information systems of personal data and detecting attacks, including those that ensure the identification of unauthorized attempts to use the information systems.

For restoring information containing personal data (for creating backup copies), based on the volume of processing performed, individually, ViReels establishes the time interval in which backup copies of information containing personal data and the software used for automated processing of personal data are made. In any case, this period is less than one year, and they are stored in protected locations, outside the area where this information and the core software are located. Backup restoration procedures are regularly updated and tested to ensure their effectiveness.

ViReels regularly checks, at least once a year, the fulfillment of technical and/or organizational measures taken to detect malfunctions regarding the use of telecommunications systems in the personal data processing process and/or to make improvements if necessary. Security controls are to be updated whenever the owner is reorganized or changes its infrastructure. To verify the level of protection of personal data information systems, as well as to prevent any potential cases of unauthorized or accidental access to these information systems, and to identify weaknesses in their protection mechanisms, the Center periodically conducts security checks, including implementing special technical measures to simulate a model of accessing personal data information systems.

MANAGEMENT OF INFORMATION SYSTEM SECURITY INCIDENTS AND TECHNICAL PROTECTION OF PERSONAL DATA

The personnel responsible for operating the personal data information systems undergo training at least once a year regarding their responsibilities and obligations when managing and responding to security incidents. A mechanism is in place to promptly inform the leadership of the data controller about incidents that breach the security of the personal data information systems. The processing of incidents includes detection, analysis, prevention of development, resolution, and restoration of security. Automated tools are used to support the incident management process for personal data information systems security incidents. Security incidents in personal data information systems are monitored and documented on a continuous basis.

The uncontrolled presence of individuals or vehicles, as well as the accidental installation of antennas, is excluded within a zone of at least 15 meters from the location of the main technical equipment of the personal data information system, in order to ensure the security of personal data processing. Server rooms are protected against information leakage containing personal data due to electromagnetic emissions by shielding the rooms or installing electromagnetic jamming systems, which are designed, implemented, and tested by specialized companies in the field. Unauthorized installation of other electrical, radio, or other devices is excluded or limited in rooms where the technical means for processing personal data are located, to ensure the security of personal data processing. Equipment with lines that exit outside the controlled perimeter is installed at least 3 meters away from the IT equipment where personal data is processed.