Introductory Information
Please pay attention to the following document, through which we provide you with information about the processing of your personal data and the rights related to the processing of your personal data within our activities, i.e., in connection with the services provided to you. The protection of your personal data is taken very seriously by the controller listed below.
Any handling of personal data is governed by applicable legal regulations, especially the provisions of Title II, Part 2, Section 6 of Act No. 89/2012 Coll., Civil Code, Act No. 101/2000 Coll., on Personal Data Protection, or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, also referred to as "GDPR"), as well as related Czech legislation.
Who is the Data Controller and How to Contact Them?
The data controller is Logflex s.r.o., with its registered office at Na Dlouhém 103, 251 01 Říčany-Jažlovice, ID No.: 28496850, registered in the Commercial Register under file number C 195211 kept by the Municipal Court in Prague, telephone +420 513 034 253, e-mail: (hereinafter also referred to as the "controller"). You can exercise the rights listed below by contacting the controller in person, by mail, or, after prior verification of your identity, also by email or phone.
What is Considered Personal Data?
Personal data refers to any information relating to an identified or identifiable natural person, based on which a specific individual can be directly or indirectly identified. Personal data includes a wide range of information, such as name, gender, age and date of birth, marital status, photograph (or any representation of appearance), personal identification number, permanent residence address, telephone number, email, health insurance information, nationality, health status (both physical and mental), as well as fingerprints, signatures, or IP addresses.
On What Basis Will the Controller Process Your Personal Data?
The controller will process personal data to fulfill a contract; legal obligation; if processing is necessary for the purposes of legitimate interests of the controller or a third party; or based on your consent for a specific purpose of processing. You voluntarily provide the controller with the personal data necessary to conclude contracts. If you do not provide them, it will not be possible to conclude a contract with you and fulfill it accordingly.
Scope of Personal Data Processed by the Controller
We inform you that personal data subjects' data is processed to the extent of:
- identification and contact details (name, surname, date of birth, address, phone number, email),
- data on the creditworthiness and trustworthiness of the data subject (data necessary for case assessment in accordance with legal regulations and the controller's internal rules {creditworthiness} - ID card number and validity, number/validity of another document, permanent residence address, current residence address (including the start date of residence), telephone contact, type of housing, marital status, number of dependents, profession, employer (name, ID No., address, date of employment, employer's phone number), net income, housing costs, other income and obligations, data on partner (name and surname, maiden name, date of birth, net income),
- data on rights and obligations (mutual legal acts, obligations arising from them, and possible collateralization of obligations).
Purpose and Duration of Personal Data Processing
The personal data of the data subject will be processed for the following purposes:
- providing loans (including consumer loans other than for housing and loans for housing);
- fulfilling obligations under contracts concluded with the data subject, exercising or defending the controller's legal claims;
- legitimate interests of the controller or a third party (exercising or defending the controller's legal claims; sending notifications directly related to the contract you have concluded);
- maintaining internal records, fulfilling legal obligations, and ensuring the functioning of the controller;
- other purposes explicitly agreed upon between the contracting parties, directly or indirectly arising from or permitted by legal regulations.
{Processing takes place for the time necessary to: settle mutual rights and obligations arising from individual purposes of processing; determine, exercise, or defend legal claims arising from the above-mentioned actions; for the purposes of legitimate interests of the relevant controller or a third party; fulfill the controller's legal obligation.
Additional Information on Personal Data Processing
The personal data of the data subject is processed manually (in writing and electronically) by the controller's employees, the controller's lawyers. Personal data is made accessible to the network administrator during network administration. The controller is entitled to provide personal data to persons whose cooperation the controller uses in exercising its rights and fulfilling its obligations and in its internal activities and control and management (the controller's credit intermediary, the controller's tax advisor). The controller is also entitled to provide this data to public authorities within the framework of submissions made by the controller. Furthermore, the controller is entitled to provide this data to the extent required by law (e.g., to courts in civil proceedings under Section 128 of the Code of Civil Procedure).
The personal data of the data subject will not be processed by processors, co-controllers, or other persons, except those mentioned in the previous paragraph.
Instructions on Data Subject's Rights and Additional Information
The data subject has the right to request information from the controller about the processing of their personal data.
The data subject has the right to have the controller rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.
The data subject has the right to have the controller erase personal data concerning them without undue delay, and the controller has the obligation to erase personal data without undue delay if one of the grounds provided by the General Data Protection Regulation (especially if the data is no longer necessary for the purpose for which it was collected) is met.
The data subject has the right to have the controller restrict the processing of personal data in cases provided by the General Data Protection Regulation.
The data subject has the right to object to the processing of personal data concerning them if the controller processes personal data for the following reasons: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party; for direct marketing purposes; for scientific or historical research purposes or for statistical purposes.
The data subject has the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller, in cases provided by the General Data Protection Regulation.
If the processing of personal data is based on consent given by the data subject, the data subject has the right to withdraw this consent at any time. The controller will immediately stop processing personal data after the consent is withdrawn.
The controller hereby informs you that it is significantly safer to transfer personal data in person, by mail, and through a data mailbox than by phone/email. If you insist on email and phone communication for specific personal data transmission, the controller will send it to the phone/email you specify.
If the data subject believes that there has been a violation of legal regulations concerning the protection of their personal data, they have the right to lodge a complaint with a supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection. More information about your rights is available on the website of the Office for Personal Data Protection (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276).