Introduction
Please make sure you read the following text where you will find the information on processing of your personal data and on the rights associated therewith for the purposes of our business activities, i.e. when we provide you with our services. the below specified personal data controller takes the protection of your personal data seriously.
Any use of personal data will be governed by the applicable legislation, including without limitation by provisions of Title II, Part 2, Section 6 of Act No. 89/2012 Sb., the Civil Code, Act No. 101/2000 Sb., on Protection of Personal data, or by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "General Data Protection Regulation" or the "GDPR ") and by other applicable Czech legislation.
Who is the personal data controller and how to contact him?
the personal data controller is Logflex s.r.o., with its registered office at Na Dlouhém 103, 251 01 Říčany-Jažlovice, Company Id. No: 28496850, registered in the Companies Register, file No C195211, kept by the Metropolitan Court in Prague, telephone +420 513 034 253, e-mail: (hereinafter also referred to as the “Controller”). You can exercise the rights specified below by contacting the controller in person, by mail, or where your identity has been verified, also by email or telephone.
What personal data is included?
Personal data means any information concerning an identified or identifiable natural person that can result in identification, whether direct or indirect, of a specific person. Personal data includes a wide range of information such as name, gender, age and date of birth, marital status, photo (or any display of personal features), personal identification number, place of residence, telephone number, e-mail, information on your health insurance company, citizenship, health condition (physical and mental), but also fingerprints, signature or IP address.
On what lawful basis will the controller process your personal data?
the controller will process your personal data to perform on the contract; to fulfil its legal obligations; in cases where the processing is necessary for the legitimate interests of the controller or a third party; or based on your consent to the specific purpose of processing. You provide your personal data necessary to enter into the contract voluntarily. If you do not provide the data to the controller, the controller will not be able to enter into the contract with you and perform on the contract.
the scope of personal data processed by the controller
We inform you that the personal data of data subjects is processed in the following scope:
- identification and contact details (name, surname, date of birth, address, telephone number, e-mail),
- data on creditworthiness and credibility of the data subjects (data necessary for the assessment of the case in accordance with the legal regulations and internal rules of the controller {creditworthiness} - number and validity of the Czech identity card, number/validity of other documents, permanent address, current address (including the date of the first day on the address) telephone number, type of housing, marital status, number of dependent children, profession, employer (name, company identification number, address, date of commencement of employment, work telephone number), net income, housing costs, other income and payables, partner’s data (name and surname, maiden name, date of birth, net income),
- data on rights and obligations (contracts, obligations arising out of them and, as the case may be, security of the obligations)
Purpose and term of the personal data processing
the data subjects personal data will be processed for the following purposes:
- to provide loans and credits (including consumer credit, non-housing and housing loans);
- to fulfil obligations arising out of the contracts made by and between the data subject and the controller, to exercise and enforce the controller's rights;
- due to legitimate interests of the controller or of a third party (exercising or enforcing the controller's rights; sending communications that are directly related to the subject-matter of your contract);
- to keep internal records, fulfil statutory duties and ensure functioning of the controller;
- for any other purposes agreed expressly between the parties, directly or indirectly resulting from the above arrangements, or permitted by law.
the personal data will be processed for a period of time necessary: to perform on mutual rights and obligations resulting in connection with the relevant purposes of the processing; to determine, exercise or enforce any rights arising out of the above mentioned acts; for the purposes of the legitimate interests of the relevant controller or a third party; to fulfil any duties of the controller.
More information on personal data processing
the personal data of the data subjects is processed manually (in writing and electronically) by the controller's employees and its lawyers. When administrating the network, the personal data is made available to the network administrator. the controller may provide your personal data for processing to persons who cooperate with the controller in order for the controller to exercise its rights and to make sure the controller complies with its obligations and duties and to carry out internal activities of the controller and to audit and manage such activities (a loan intermediary, a controller's tax advisor). the controller may disclose the data to public authorities when filing any documents. the controller may also disclose such data within the scope of its duties laid down by legislation (e.g. to courts in civil law proceedings under Section 128 of the Code of Civil Procedure).
the personal data of the data subjects will not be processed by processors, co-controllers or other persons, except for the persons referred to in the preceding paragraph.
Information on the rights of data subjects and other information
the data subjects have the right to request the controller to inform them on the processing of their personal data.
the data subjects have the right to request the controller to rectify their personal data if inaccurate without undue delay. Depending on the purpose of the processing, the data subjects have the right to have their incomplete personal data completed, including by provision of additional declaration.
the data subjects have the right to have their personal data deleted without undue delay; the data controller is obliged to delete the personal data without undue delay where there is a reason for it as set out in the General Data Protection Regulation (especially, where the data is not necessary anymore for the purpose for which it has been originally collected).
the data subjects have the right to request that the controller restrict the personal data processing in the cases provided for by the General Data Protection Regulation.
the data subjects have the right to object to the processing of their personal data when the controller processes personal data for the following reasons: the processing is necessary for the performance of a task carried out in the interest of the public or while exercising the official authority vested in the controller; processing is necessary for the legitimate interests of the controller or a third party; for direct marketing purposes; for the purposes of scientific or historical research or for statistical purposes.
the data subjects have the right to obtain their personal data that they have provided to the controller in a structured, commonly used and machine-readable formats, and to transmit such data to another controller without being prevented to do so by the controller; they may do so in the cases provided for by the General Protection Regulation.
If the personal data processing is based on the consent to the processing of personal data provided by the data subject, that data subject has the right to withdraw such consent at any time. the controller shall immediately stop processing the personal data.
the controller hereby advises you that it is considerably safer to provide your personal data in person, by mail or by data box rather than by telephone/e-mail. If you insist on having your personal data sent by e - mail and telephone, the controller will gladly do so at the phone / e-mail that you indicate.
If the data subjects consider that there has been a breach of the legislation in relation to the protection of their personal data, they have the right to report it to the supervisory authority. the Supervisory Authority in the Czech Republic is the Office for Personal Data Protection. For more information on your rights, go to the website of the Office for Personal Data Protection (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276) .