Privacy Policy
The operator of the Corrency system, the operator of the website Corrency.cz (hereinafter referred to as the "Website") and at the same time the administrator of personal data is the company CorCo Systems a.s., IČO: 119 686 13, with its registered office at Sokolovská 394/17, Karlín, 186 00 Prague 8, registered in the commercial register maintained by the Municipal Court in Prague, section B, file 26744 (hereinafter referred to as "CorCo" or "We").
The Corrency system is a system of efficient distribution of money through a unit with adjustable convertibility (so-called Corrents). As part of the Corrency system, CorCo provides Correncies to specific natural persons (hereinafter referred to as "Beneficiaries''). These Beneficiaries can subsequently redeem Correnty at sellers of goods and service providers who are involved in the Corrency system (hereinafter referred to as "Merchants'').
CorCo attaches great importance to protecting the privacy of all natural persons involved in the Corrency system or visiting our website (hereinafter referred to as "You") and takes care to protect their personal data. The processing of your personal data takes place in accordance with generally binding legal regulations, in particular Regulation of the European Parliament and Council No. 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95 /46/EC (hereinafter referred to as the "Regulation").
The aim of these policies is to inform you about how we can process your personal data, in particular about their categories, scope and purpose for which they are processed, and about the persons to whom your personal data is transferred. Here you will also find information about your rights in connection with the processing of personal data.
By providing us with your personal data, you accept this policy and acknowledge that we may process your personal data in the manner and for the purposes set out below. If you do not agree with this policy, please do not provide us with your personal information.
What is personal data?
Personal data is all information about an identified or identifiable physical person, such as name, place of residence, e-mail address, telephone number or IP address.
What personal data we collect about you and how we use it
CorCo only collects personal information that you voluntarily provide to us or that we obtain in connection with your involvement in the Corrency system, through our website, or through written or telephone communications with you.
We process the personal data of the Recipients for the following purposes:
|
Purpose of processing |
Categories of processed data |
The legal basis of processing |
|
Your registration on the website Your request to conclude a contract and control of personal data for the purposes of concluding a contract |
Identification information Contact information ID number |
Conclusion and fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Management of your Corrent account, continuous information on the status of the Corrent account, fulfilment of our other obligations according to the concluded contract |
Identification information Contact information Corrent account balance |
Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Checking your identity and account status during a transaction with the Merchant (verification of the ID number / check of the generated code, in both cases sent by the Merchant), related communication with the Merchant |
Identification information Contact information ID number (In case you do not provide your mobile phone contact when registering for the Corrency system) Corrent account balance |
Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations |
Maintaining accounting records and fulfilling our legal obligations |
Identification information Corrent account balance |
Fulfilment of our legal obligation according to Article 6 paragraph 1 letter c) Regulations |
|
Protection of our rights and legitimate interests |
Identification information Contact information ID numbers Corrent account balance |
Our legitimate interest in legal and other protection, possibly in the detection of misuse of the Corrency system and the identification of persons responsible for such misuse in accordance with Article 6 paragraph 1 letter f) Regulations |
|
Communication with you |
Identification information Contact information |
Our legitimate interest in the functionality of the Corrency system and ensuring the satisfaction of persons involved in the Corrency system in accordance with Article 6 paragraph 1 letter f) Regulations Performance of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Sending offers, news about planned events, promotion, our services (hereinafter referred to as "Newsletter") |
Identification information Contact information |
Legitimate interest consisting in direct marketing according to Article 6 paragraph 1 letter f) Regulations |
We process the personal data of Merchants who are natural persons for the following purposes:
|
Purpose of processing |
Categories of processed data |
The legal basis of processing |
|
Registration on the website (request to send a draft contract and check personal data for the purpose of concluding a contract) |
Identification information Contact information Banking information |
Conclusion and fulfilment of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Realization of Corrent transaction (sending an SMS to the Merchant approving the transaction) |
Contact information |
Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Reimbursement of Corrents to the Merchant |
Payment information Banking information |
Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Keeping accounting and tax records and fulfilling our legal obligations |
Identification information Contact information Banking information Payment information |
Fulfillment of our legal obligation according to Article 6 paragraph 1 letter c) Regulations |
|
Protection of our rights and legitimate interests |
Identification information Contact information Banking information Payment information |
Our legitimate interest in legal and other protection, possibly in the detection of misuse of the Corrency system and the identification of persons responsible for such misuse in accordance with Article 6 paragraph 1 letter f) Regulations |
|
Communication with you |
Identification information Contact information |
Our legitimate interest in the functionality of the Corrency system and ensuring the satisfaction of persons involved in the Corrency system in accordance with Article 6 paragraph 1 letter f) Regulations Performance of the contract according to Article 6 paragraph 1 letter b) Regulations |
|
Sending the Newsletter |
Identification information Contact information |
Legitimate interest consisting in direct marketing according to Article 6 paragraph 1 letter f) Regulations Consent to the use of your electronic contact for the purposes of disseminating our business communications in accordance with Article 6 paragraph 1 letter a) Regulation and § 7 paragraph 2 of Act No. 480/2004 Coll. |
We process the personal data of website users for the following purposes:
|
Purpose of processing |
Categories of processed data |
The legal basis of processing |
| Sending the Newsletter |
Identification information Contact information |
Your prior consent expressed by subscribing to the Newsletter according to Article 6 paragraph 1 letter a) Regulations |
|
Technical security of website operation |
Electronic data (e.g. IP address, cookies, browser type) |
Legitimate interest in the functional operation of the website according to Article 6 paragraph 1 letter f) Regulations |
|
Evaluating the use of our site, improving its content, customer support and user experience Marketing and remarketing (profiling) through cookies |
Electronic data (e.g. IP address, cookies, browser type) |
Your consent according to Article 6 paragraph 1 letter a) Regulations |
You are not obliged by law to provide us with your personal data, the provision of personal data is completely voluntary. However, without providing your personal data, we will not be able to enter into a contractual relationship with you and your involvement in the Corrency system will not be possible. Likewise, we will not inform you about our news or provide you with our other services (at all or in the required quality).
If we require your consent to process your personal data, you are entitled to refuse consent or revoke consent already granted. However, revocation of consent will not affect the legality of processing in the period before its revocation.
If you are a Recipient, please note that the personal data you enter as part of your request to join the Corrency system will be subject to automated processing. This processing is necessary for the purposes of deciding whether you meet the criteria for participation in the Corrency system and whether we can enter into a contract with you. The automated processing of your personal data also takes place during a transaction with the Merchant. In this case, our system verifies whether you are a participant of the Corrency system and whether there is a sufficient number of Corrents in your account necessary to carry out the transaction. We process your personal data for these purposes automatically due to the efficient functioning of the Corrency system. If you believe that our system has evaluated any transaction incorrectly, please do not hesitate to contact us via the contact provided below.
We will not sell or rent your personal information to any third party.
Security and retention period of your personal data
We use strict physical, electronic and administrative security measures to protect your data from unauthorized persons and against unlawful processing, accidental loss, destruction and damage.
We will keep your personal data only for the time necessary for the purpose of their processing. If your personal data is used simultaneously for several different processing purposes, we will process them until the purpose with a longer processing time ceases to exist. However, we will stop using them for a purpose with a shorter processing time once that time has passed.
We use the following criteria to determine the processing time of your personal data:
- For the purpose of concluding and fulfilling the contract, your personal data will be processed until the termination of the obligations from the relevant contract, or until a decision is made that the contract will not be concluded.
- In order to comply with our legal obligations according to generally binding legal regulations, your personal data will be processed for the duration of the relevant legal obligation.
- For our legitimate interests, your personal data will be processed for the duration of the relevant protected interest of CorCo. In order to protect our rights, we will e.g. process your personal data even after the termination of the obligations from the concluded contract or after the termination of the legal obligation, specifically until the end of the 5th calendar year after the termination of such obligation or legal obligation. In the event of the initiation and duration of judicial, administrative or other proceedings in which our rights or obligations towards you will be resolved, the processing will not end before the end of such proceedings.
- If you give us your consent to process your personal data for a specific purpose, we will process the personal data for that purpose until you revoke such consent (unless we set a shorter processing time when obtaining your consent).
- For the purposes of direct marketing, we will process your personal data until you express your disagreement with such processing (unless we set a shorter processing time).
Transfer of personal data
In order to ensure the operation of the Corrency system, we will transfer the personal data of the Beneficiaries to the Merchant with whom the relevant Beneficiary redeems the Correnty. Such Merchant will process the Personal Data of the Recipients as a separate controller and at its own risk. If you have any questions regarding the processing of your personal data by the Merchant, please always contact the Merchant directly.
We will transfer your personal data to public authorities, to which we are obliged to transfer them according to generally binding legal regulations. These recipients will process your personal data independently of us as independent administrators.
We will further transfer your personal data to our processors with whom we have entered into a contract for the processing of personal data (this may be, for example, a provider of IT or other services). Upon request, we will provide you with an up-to-date list of processors who process your personal data for us. Based on CorCo's legitimate interest, we may transfer your personal data to other companies in the CorCo group, exclusively for internal administrative purposes. Upon request, we will be happy to provide you with an up-to-date list of members of our group with whom we share your personal data.
Your personal identification data will not be transferred to third countries outside the European Union, or outside the European Economic Area. In the event of the transfer of non-identifying personal data to third countries, we will adopt appropriate safeguards to ensure that such data is processed in accordance with the Regulation, in particular through standard contractual clauses. At your request, we will be happy to inform you whether your non-identifying personal data is transferred to third countries.
Policy on the use of cookies
In order to be able to constantly improve our services, our website uses cookies. Cookies are short text files that are created by a web server and stored on your computer via your browser. If you return to our website, we will use cookies to obtain information about your previous visit and other information that our server has stored on your computer.
Information about specific cookies used on our website can be found in our CMP (consent management platform) form. This form is automatically displayed when you first visit the website and serves to easily set and manage your preferences in relation to the cookies used.
The CMP form or the bar referring to this form will be displayed to you until you save your preferences. If you wish to subsequently change your choices, you can do so by calling up the CMP form again. You can call up the CMP form by clicking on the "[Cookies]" link located in the footer of the website.
In the CMP form, you can set your preferences (agree or disagree) in relation to the use of cookies on your device. You can express your consent or disagreement both (a) for specific cookies that are or may be used on the website, and (b) in general for a certain category of cookies. Within the CMP form, these are divided into marketing, statistical and necessary (technical) cookies.
In the case of marketing and statistical cookies, the default setting is your refusal and these cookies will not be used on your device until you give your consent. Necessary cookies, on the other hand, are automatically enabled and their use cannot be refused via the CMP form.
You can also manage the use of cookies on your device within the settings of your web browser. If you deactivate the necessary cookies in this way, it will result in a limitation of the functionality of our website or the complete non-functionality of some of its parts.
Your rights
In connection with the processing of your personal data, you have the following rights. However, certain exceptions may apply to the exercise of these rights and therefore may not be applicable in all situations. In the event that you exercise your rights and your request is found to be justified, we will take the required measures without undue delay, within one month at the latest (in justified cases, this period can be extended by up to another two months).
|
· Right to information |
You have the right to be informed in a concise, transparent, understandable and easily accessible manner about how your personal data is processed. |
|
· Right of access to personal data |
You have the right to obtain confirmation from us as to whether or not personal data relating to you is being processed and, if so, to obtain access to and a copy of that personal data (including related information). |
|
· Right to repair |
You can ask us to correct inaccurate personal data. You can also request the completion of incomplete personal data, including by providing an additional statement. |
|
· Right to delete |
You can ask us to delete the personal data processed; under the conditions specified in Article 17 of the Regulation. Please note that in some cases this right cannot be exercised and we may continue to store your data. |
|
· Right to restriction of processing |
In certain cases, you can request that we limit the processing carried out (e.g. until the resolution of your objections). |
|
· Right to data portability |
You can ask us to transfer personal data to you or a third party that we process about you in electronic form on the basis of a contract or your consent. |
|
· Right to withdraw consent |
If the processing of personal data is based on your consent, you can revoke such consent at any time and thus prevent further processing for the purpose stated in the given consent. However, revocation of consent will not affect the legality of processing in the period before its revocation. |
|
· Right to object |
If we process your personal data based on our legitimate interests, you have the right to object to such processing. However, we can demonstrate that there are serious legitimate reasons for further processing on our side. If your personal data is processed for direct marketing purposes, you have the right to object to the processing of this data at any time. If you object to processing for direct marketing purposes, personal data will no longer be processed for these purposes. |
|
· The right to request redress and the right to file a complaint |
If you believe that your personal data is being processed in violation of the law, please contact us and we will promptly remedy the situation. This does not affect your right to file a complaint regarding the processing carried out directly with the Office for Personal Data Protection. |
Our contacts
You can contact us at the e-mail address gdpr@corrency.cz for questions about the processing of your personal data or for the purpose of exercising your rights. Alternatively, you can contact our personal data protection officer directly at the e-mail address povenerec@corrency.cz
Changes to this policy
CorCo reserves the right to modify or supplement this policy as necessary. We recommend that you check these policies regularly to be informed of any changes. Updated versions of this policy will always be available on the website.