Personal data protection

Personal data protection

Your privacy matters to us. Not only do we comply with the General Data Protection Regulation (GDPR) and the Czech Data Protection Act, but we also make your privacy a priority – no data breach is acceptable. We will process any information you provide to us in line with our privacy policy. Before we start the processing, we will explain you the reasons of our actions, what categories of personal information we process and why, and provide a legal ground for the processing.

Processing of personal data

We process personal information electronically, by automated means. We may use personal data for marketing profiling or automated decision-making, for covering risks or for establishing compliance with contractual obligations with our suppliers (banks, bank card associations). We analyse the behaviour of users on our website and in ThePay and use profiling to determine where risks may be and to profile business activity categories and turnover categories.

We will process the personal data for as long as we discuss the terms and conditions of the contemplated contract, amendments to the contract or other agreements with you and for an additional period of ten years after we enter into a business relationship with you, as provided for by the Czech AML Act. We will destroy the personal data after that period ends.

Personal data transmission and sharing

If and when we transmit the personal data to third parties, we will do it only to the extent necessary and in accordance with law. We may share the personal data with the competent public authorities (Financial Analytical Unit, Police of the Czech Republic, Czech National Bank) and cooperating entities (acquirers, banks and other financial institutions). We may also share the personal data with our consultants such as accountants, tax advisors, lawyers or eCommerce solution providers hosting your project.

Storage of the personal data

We store the personal data on secure servers managed by an ISO 27001 (information security management standard) certified company. We also use GDPR compliant services such as G Suite (Google LLC) and Basecamp.

Read also:

AML rules
Privacy