PERSONAL DATA PROCESSING DECLARATION
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) , which took effect on 25.5.2018.
We protect your information
This document provides you with information about your rights regarding the processing of your personal data at IFB, a.s. When processing them, we comply with legal regulations and concluded contracts. The processing of personal data always takes place only to the extent given by a particular service or purpose of processing.
This document will be regularly updated.
You can be absolutely sure that we handle your personal information with due care and in accordance with applicable law. We protect your personal information to the maximum extent possible, which corresponds to the standard technical level.
At IFB, a.s. there are strict rules on who can access and process personal data. As a matter of principle, we do not transfer your personal information outside IFB, a.s. and our owner, except when we have your consent, imposes or authorizes us to do so by law or by our legitimate interest (eg in the case of suppliers or in the case of law enforcement, etc.).
We recommend that you read the information carefully. We did everything we could to make them as clear as possible. If you are still unclear, we will be happy to explain any term to you. For questions you can use the e-mail address info@dluhopisy-ifb.cz.
If you do not agree with the way we process your personal data, you may take the steps below to protect your rights.
Privacy and personal data protection are supervised by:
Office for Personal Data Protection
address: Pplk. Sochora 27, 170 00 Prague 7 tel .: +420 234 665 111
web: www.uoou.cz.
Your data manager
IFB, a.s.
Company ID: 083 74 350
with its registered office at K Vinici 1256, Zelené Předměstí, 530 02 Pardubice
registered in the Commercial Register kept by the Regional Court in Hradec Králové, Section B, File 3686
Martin Klazar, Member of the Board of Directors, is authorized to act
(hereinafter referred to as the “Administrator”)
The administrator collects, holds and is responsible for the proper and lawful processing of your data. You can exercise your rights against the administrator as described below.
Processed data
We only process data so that we can provide you with professional services, comply with legal obligations, and protect our legitimate interests. We collect data primarily about users of our services, including potential clients who are interested in our services or who have approached our offer. Depending on the nature of the situation, we process data on, for example, representatives, including members of statutory bodies and employees, real owners of companies, payees and underwriters.
We process your basic data, data about the services you use, so that the range of such data is adequate, relevant and limited to the necessary extent in relation to the purpose for which we process your personal data. Our main goal is to provide you with professional services, but at the same time we must respect our legal obligations and protect our legitimate interests.
In particular, we process the following data:
Identification data used for unambiguous and unmistakable identification of the data subject.
These include: title, first name, surname, gender, social security number, date of birth, identity card number (identity card or passport), home address, ID, VAT number, registered office address if you do business.
The identification information is part of each contract you enter into with us.
Contact details allowing communication with the data subject.
These include: contact address, phone number, email address.
Data about products and services that are closely related to how you use our services, or that you communicate or otherwise create to us during your cooperation. For example: bank account number, payee / payee person (transaction data).
Communication data provided mainly via e-mails. In personal meetings we write minutes of meetings.
Purpose of data processing
We process your data to the extent necessary for the purpose – for example, to provide the service. This includes cases where we are negotiating a new contract or fulfilling an existing contract. Typically, this is the identification of a natural person, a natural person doing business or a person authorized to act on behalf of a legal entity (company).
The obligation to process data is imposed by a number of legal regulations. For example, Act No. 253/2008 Coll., On Certain Measures Against Money Laundering and Terrorist Financing (the Anti-Money Laundering Act) requires you to require your personally identifiable information. We process a lot of data because it is necessary to fulfill the terms of the concluded contract or to protect the rights and legally protected interests of the Administrator and third parties. However, processing is limited for this reason, and we carefully assess the existence of a legitimate interest.
Otherwise we process your data only with your consent.
Processing purposes include the following categories:
a) Client identification
In order to enter into a contract with you and provide our services, we need to know your personally identifiable information. Your anti-money laundering law also mandates your identification.
The reason we process the data:
for your contract,
compliance with legal obligations,
to fulfill a task carried out in the public interest to prevent money laundering.
b) Performance of the contract
We only collect and process data that is necessary and necessary for the performance of the concluded contract. In order to conclude a contract we need to know your identification and contact details. The next range of data depends on the nature of the service that is the subject of the contract. For example, for subscription and purchase contracts, it is necessary to know the identity card number, its validity, who issued it, the bank account number.
The reason we process the data:
for the conclusion of the contract,
compliance with legal obligations,
performance of contractual obligations,
to protect our rights and legitimate interests.
c) Use of services
We respect your needs and preferences. For this purpose, we process, in particular, relevant data about the services used and data from our communications and interactions that you provide to us. By using our services, we process data. In particular, your identification and contact information, service data and geographic data are involved. We register, manage and keep the data up to date.
The reason we process the data:
for performance of the contract,
d) Marketing
As part of our marketing activities, we send business communications on the services and activities of the Administrator and our business partners in various forms, including the use of correspondence, telephone, e-mail, the Internet, including social networks. By processing for marketing purposes we will better understand your needs and preferences and find the most suitable way of cooperation. We strive to improve our distribution channels to inform you in an appropriate way about our services. We also want our portals to be attractive, clear and easy to find for the client. Processing for direct marketing purposes can be considered processing for legitimate interest (eg sending e-mails to clients).
The reason we process the data:
with your consent
to protect our rights and legitimate interests.
e) Prevention of fraud, prevention of money laundering
In the performance of our services, we conduct activities such as preventing, detecting, or completing the required steps to investigate (potential) fraud or (potential) unethical behavior. We analyze identification data and other necessary data under the Anti-Money Laundering Act.
The reason we process the data:
compliance with legal obligations
to protect our rights and legitimate interests
to fulfill a task carried out in the public interest to prevent money laundering.
f) Accounting and taxes
We collect and process identification and transaction data for the purpose of fulfilling our accounting and tax obligations to state authorities, as required by the Accounting Act, the VAT Act and other Czech accounting and tax laws.
The reason we process the data:
compliance with legal obligations
to protect our rights and legitimate interests.
g) Power, resp. defense of rights (disputes)
In the event that we are forced to recover our claims by legal means, respectively. if we are parties to the proceedings and the proceedings concern you, we will use, to the extent necessary, your basic data, service data, data from our communication and interaction, or other data necessary to protect our rights.
The reason we process the data:
to protect our rights and legitimate interests.
h) Internal administration, reporting
We process personal data while fulfilling internal obligations set within the company. For example, we have a comprehensive approval and reporting system for individual business cases. Your basic data, contact data, service data are used for planning, reporting and / or higher efficiency of provided services. We also report some data to our owner, especially the basic and contact details of persons acting on behalf of our corporate clients.
The reason we process the data:
compliance with legal obligations
to protect our rights and legitimate interests.
Data retention period
We only store your information for the time necessary to ensure the rights and obligations under the contractual relationship and the applicable legislation. All in accordance with the deadlines specified in the concluded contracts, in the file and shredding regulations or in the relevant legislation.
Transmission of personal data
Passing on the data you pass on to us with your consent is voluntary. We require the transfer of other data as processing is necessary to fulfill the contract, fulfill our legal obligations, or protect our legitimate interests. If you do not provide us with such information, we cannot provide you with the service or other performance where we request personal information from you.
We only collect and process certain data with your consent. These are mainly data processed for marketing purposes. The transmission of this data to us is voluntary. You can revoke your consent at any time.
Sources of personal data
Depending on the situation, we process the data we have received from you, as well as data from publicly available sources and registers, such as the Commercial Register, the Trade Register, the Land Register, websites and data from third parties. For internal administrative purposes, we exchange data within our sister companies.
In particular, we process data that you pass on to us or that you generate with your business. Where necessary and appropriate for the purpose of processing your data, we enrich the data with data from other sources – internal and public. These include in particular:
a) Transmission of data within sister companies
Within IFB, a.s. (Administrator), sister company MK accounting sro, ID No .: 28860543, with registered office at K Vinici 1256, Zelené Předměstí, 530 02 Pardubice, and sister company Investice a Finance sro, ID No .: 28788061, with registered office at Pardubice – Zelené Předměstí, K Vinici 1256, Postcode 53002, we pass on your identification and contact information. We use them primarily for the complex solution of your business needs, internal administration and qualified consulting. Mutual contracting also facilitates the transmission of data.
Recipients of personal data
We fundamentally manage your personal information within IFB, a.s. We only disclose data outside the company if we allow it or if required by law. If necessary to achieve any of the purposes listed above, especially if the external entity in the field has the necessary professionalism and expertise, your data is processed by cooperating distributors and suppliers. We are also obliged to share your data with various state authorities, but always under the conditions stipulated by legal regulations.
Recipients of personal information:
a) Processors
If we delegate someone else to perform an activity that is part of our service, they may be processing personal data. It thus becomes a processor of personal data. The processor shall be entitled to dispose of the data solely for the purpose of carrying out the activity for which it has been authorized by the relevant administrator. In such a case, your consent is not required for the purpose of carrying out the processing activity, as such processing is allowed directly by legal regulation or by the fulfillment of the purpose resulting from the concluded contract. In other cases, a processing contract is concluded between the Administrator and the processor, the purpose of which is to ensure the security of the processed personal data when authorizing the processor and at the same time defining liability.
Processors include:
external administrative staff,
external accountant,
IT service providers
notaries,
lawyers,
marketing agencies.
b) Business partners (distributors)
We also cooperate with business partners from different areas of business. Through mutual synergy we can find the most suitable solutions to your needs. In the case of transfer of your personal data, we do so with your consent or for the purpose of the concluded contract.
We will also pass on your personal information if we consider that this partner will provide you with a more qualified advice, service or product in your area.
c) Ad hoc beneficiaries
i. On request without consent
Some public authorities and other organizations are entitled to request information about you. These are mainly the supervisory activities of courts, the Police of the Czech Republic or the Tax Office. We provide data only if the law requires the right to request such data.
ii. With your consent
We also process requests for information to third parties in the form of references. We always do so at your request, respectively. with your consent.
Data subjects’ rights
We process your data transparently, correctly and in accordance with the law. You have the right of access to your data, explanations, data transmission as well as other rights if you believe the processing is not working properly. You have the right to file a complaint with the Office for Personal Data Protection.
We generally handle your rights free of charge. Please note, however, that we have the right to charge a reasonable fee for your application or to refuse it if your request is manifestly unfounded or disproportionate, especially since it is repeated. If necessary, we may ask you to provide additional information. You can send us your request by e-mail or by letter, where your signature will be officially or by other suitable means verified. We will respond to your request in an appropriate manner.
If you have any questions, please write to info@dluhopisy-ifb.cz
a) Right to information concerning the processing of personal data
You have the right to access the processed data and other related information. However, this shall not affect the rights of third parties.
b) The right of access of the entity to personal data
Upon request, you have the right to obtain confirmation from the Administrator whether or not your personal data are processed. If the data is processed, you may have to request a copy of the processed personal data.
c) Right to correct or update data
If your data is incorrect, inaccurate, we will of course correct it. With regard to the purposes for which the data are processed, you have the right to add incomplete data.
d) Right to delete data (“right to be forgotten”)
You have the right to delete personal data if our processing is unauthorized.
e) Right of processing limitation
You also have the right to restrict the processing of data in specified cases.
f) Right to data portability
You may also request the transfer of personal data relating to you, the processing of which is based on consent or contract, to another controller.
g) Right to object
You may object if we process data based on our legitimate interest, in the public interest, or in the exercise of public authority, including processing for both of these reasons, including profiling (i.e., automated categorization of the data subject by performance, .).
h) Right not to be subject to an automated profiling decision
We do not decide on your rights according to any automated processing of personal data.
i) Failure to provide data
You may refuse to provide us with the personal information we require. However, we are unable to provide you with a related service for those data that you are required to provide.
j) Withdrawal of consent
In cases where we require your consent to process your data, you may at any time withdraw your consent. Revocation of the consent does not affect the processing of your data for as long as it has been validly granted by you, or the processing of your data for other legal reasons if applicable (eg compliance with obligations or obligations under another contract).
k) Marketing restrictions
If you have given us marketing authorization or you are receiving business offers from another eligible title, you can withdraw your consent at any time or opt out of receiving offers in the following ways:
our business communications incorporate the option to stop sending them,
you can also tell us in writing that you no longer wish to receive commercial communications. For electronic communication you can use email info@dluhopisy-ifb.cz. You can also send the document by post to the address of IFB, as, K Vinici 1256, Zelené Předměstí, Pardubice 530 02.