Personal Data Processing Policy

provided within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as "GDPR") to users who have established a personal account on the CebiaNET web portal accessible at www.cebianet.cz.

I. Administrator of your data

Cebia, spol. s r.o., with its registered office at Vyskočilova 1461/2a, Michle, 140 00 Prague 4, ID No.: 18628443, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 4057 (hereinafter referred to as "Cebia") as the administrator hereby informs you about the processing of your personal data and your rights in accordance with the GDPR.

II. Purposes of processing your data

We process your personal data to the extent necessary for the purpose of personalized access to Cebia systems via the CebiaNET portal.

In accordance with Act No. 480/2004 Coll., on certain information society services, Cebia uses the contact data from your personal account for the purpose of sending commercial communications with an offer based on automated decision-making, until you express your disagreement with this use of your contact.

III. Your data that we process

We only process personal data to provide you with access to our systems in the CebiaNET portal, to comply with our contractual obligations and to protect our legitimate interests.

We process the following categories of personal data.

A. Basic identification data: name, surname, title, type of worker. This is personal information that uniquely and unmistakably identifies you.

B. Contact details: e-mail, telephone, mobile phone. This is personal information that allows us to contact you.

C. CebiaNET portal usage data: records of your login, logout and activities on Cebia systems, device IP addresses and cookie identifiers. This is data for automated decision-making, on the basis of which you may be contacted with a commercial offer.

IV. Recipients of your data

We process and store your personal data within Cebia. Where the processing of personal data is based on your consent, your personal data may be transferred to Cebia's partners who are engaged in the provision of financial and non-financial products and services.

The processing of personal data may only be carried out for Cebia by processors on the basis of a contract for the processing of personal data.

Your personal data may be disclosed to public authorities under certain conditions.

V. Duration of processing of your data

Your personal data is stored by Cebia for the time necessary for the provision and use of the Cebia systems via the CebiaNET portal or for the duration of the contract.

After you stop using the Cebia systems or after the termination of the contract, we continue to process your personal data only for the purposes and for the period for which we are obliged to retain such data under generally binding legal regulations. We also retain personal data for the purpose of exercising our rights, where applicable, which we consider to be in our legitimate interest.

As soon as the purpose of the processing of personal data has been fulfilled and there is no other purpose for the processing, or if we have no legitimate reason to process the personal data, we will immediately anonymise or permanently delete your personal data from our databases and information systems.

VI. What rights you have

We process your data transparently, fairly, in accordance with the GDPR and generally binding legal regulations. You have the right to access and correct your data. In cases of processing of your data for which you have given your consent, you are entitled to withdraw this consent at any time. If you wish to withdraw consent to processing and there is no other legal basis for processing your data, or you object to processing for direct marketing purposes, you have the right to erasure or restriction of processing.

You can exercise your right of access to your data and your other rights by contacting the person acting for your company who is authorised to manage the registration of personal accounts or by contacting Cebia directly.

If you believe that the processing of your data is not in order, you can file a complaint with the Office for Personal Data Protection. If you have any questions, please contact us at [email protected]