Privacy

Privacy

Your privacy matters to us. Not only do we comply with the General Data Protection Regulation (GDPR) and the Czech Data Protection Act, but we also make your privacy a priority – no data breach is acceptable. We will process any information you provide to us in line with our privacy policy. Before we start the processing, we will explain you the reasons of our actions, what categories of personal information we process and why, and provide a legal ground for the processing.

Processing

We process personal information electronically, by automated means. We may use personal information for marketing profiling or automated decision-making, for covering risks or for establishing compliance with contractual obligations with our suppliers (banks, bank card associations). We analyse the behaviour of users on our website and in ThePay and use profiling to determine where risks may be and to determine business activity categories and turnover categories.

We will process the personal information for as long as we discuss the terms and conditions of the contemplated contract, amendments to the contract or other agreements with you and for an additional period of ten years after we enter into a business relationship with you, as provided for by the Czech AML Act. We will destroy the personal information after that period ends.

Transmission and sharing

If and when we transmit the personal information to third parties, we will do it only to the extent necessary and in accordance with law. We may share the personal information with the competent public authorities (Financial Analytical Unit, Police of the Czech Republic, Czech National Bank) and cooperating entities (acquirers, banks and other financial institutions. We may also share the personal information with our consultants such as accountants, tax advisors, lawyers or eCommerce solution providers hosting your project.

Storage

We store the personal information on secure servers managed by an ISO 27001 (information security management standard) certified company. We also use GDPR compliant services such as G Suite (Google LLC) and Basecamp.

Read also:

AML rules
Privacy