Privacy Policy – Advanto

This Privacy Policy (hereinafter referred to as the "Privacy Policy") describes which information of the personal data controller, Advanto Group s.r.o., Company ID: 08863032, with its registered office at Běhounská 5/18, Brno-město, 602 00 Brno, tel: +420 607 149 025, email: kolbl@advanto.cz (hereinafter referred to as the "Provider"), collects and processes from its existing and/or potential customers, users and/or visitors (hereinafter referred to as the "Customer" ") internet applications of the Provider, located at: app.advanto.cz (hereinafter referred to as the "Application") and what security measures are in place to ensure their necessary protection.

‍

By visiting and/or using the App, the Customer agrees to this Privacy Policy. The Provider reserves the right to change or modify the terms of the Privacy Policy at any time.

‍

The protection of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "Regulation").

‍

1. Processed personal data

The processed personal data of the Customer are in particular: (i) identification data (name and surname, date of birth and birth number) and (ii) address and contact data (telephone and e-mail, address, IP address of the facility), (iii) descriptive (employee) data (employee personal number), (iv) bank data (bank account number), (v) payroll information (information on the amount of wages, hours worked, withdrawals made), (vi ) information on the Provider's communication with Customers and (vii) information on the use of the Application by Customers (hereinafter referred to as "Personal Data").
Personal data is transmitted to the Provider directly by the Customer or his employer, as this term is defined in the General Terms and Conditions.
The Customer acknowledges that he is obliged to always state the Personal Data correctly and truthfully and without undue delay to inform the Provider of any changes thereto.

2. Purposes of Personal Data Processing

The Provider processes Personal Data on the basis of:

performance of the contract concluded with the Customer (hereinafter referred to as the "Contract");
compliance with legal obligations; and/or
legitimate interests of the Provider.

2. Personal data are processed by the Provider for the following purposes:

Identification and verification of the Customer: The Provider needs to identify and verify the identity of the Customer when providing services on the basis of the Contract. These Personal Data are processed by the Provider as part of the performance of the Contract. Personal data are processed for the duration of the Contract and subsequently for three years after its termination.

To use the App: To ensure the functionality of the Application, the Provider needs to process Personal Data in order to allow the Customer full access to and use of the Application, to find out in what amount it is possible to make a withdrawal and to ensure the submission of the withdrawal request itself and its processing by the Provider. These Personal Data are processed by the Provider as part of the performance of the Contract. Personal data are processed for the duration of the Contract and subsequently for three years after its termination.

Communication with the Customer and resolution of complaints: The Provider processes Personal Data for the purpose of handling the Customer's requests, suggestions and complaints. These Personal Data are processed by the Provider within the framework of the performance of the Contract.Personal data are processed for the duration of the Contract and subsequently for three years after its termination.

Fraud control and prevention: The Provider processes the Personal Data of Customers and possibly other persons for the purpose of controlling the use of the Application and possibly detecting fraud, in order to protect its own interests and those of customers. These Personal Data are processed by the Provider on the basis of its legitimate interest. Personal data are processed for the duration of the Contract subsequently three years after its termination, in the event of fraud detection for the duration of its subsequent resolution.

To improve the App: The Provider processes Personal Data for the purpose of improving the Application in order to meet the expectations of Customers as much as possible and to correspond to market developments. These Personal Data are processed by the Provider on the basis of its legitimate interest. Personal data are processed for the duration of the Contract.

Dispute Resolution: The Provider may process the Personal Data of Customers and possibly other persons for the purpose of determining its legal claims and their possible enforcement, or their defense. These Personal Data are processed by the Provider on the basis of its legitimate interest. Personal data are processed for the duration of any dispute

Direct marketing: The Provider processes Customers' Personal Data for the purpose of informing the Customer about its services and products. These Personal Data are processed by the Provider on the basis of its legitimate interest. Personal data are processed for the duration of the Contract.

3. The Provider will retain data and information, including Personal Data, for the above period, unless a longer retention period is required by law. After the expiration of the specified retention period, the Provider will delete the Personal Data.

‍

4. In the event that the Customer does not complete his registration within the Application, the Personal Data will be deleted no later than 365 (three hundred and sixty-five) days after the last step in the incomplete registration process.

In the event that the Customer deletes his account in the Application without making a withdrawal or using other Advanto services, the Personal Data will be deleted no later than 90 days after the cancellation of the account by the Customer.

‍

5. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner. The Provider does not make automatic individual decisions within the meaning of Article 22 of the Regulation.

‍

3. Cookies and use of anonymous data

When using the Application, the Provider uses so-called cookies, which are small data files stored on the Customer's device after visiting the Website and which increase the user experience when visiting the Website. As part of the use of cookies, the Provider records the Customer's URL, IP address, browser type and language, host name, screen resolution, location and time zone, type of device and date and time of visit to the Application, as well as information about which part of the Application the Customer visited.
If the Customer visits the Application and the settings of his browser allow the storage of cookies on his end device, the Provider considers such a setting as consent to the processing of Personal Data and the storage of cookies. If the Customer does not want cookies to be stored on his device, he can disable this function on his device.

4. Transfer of Personal Data

The Provider does not transfer Personal Data to any third party, with the exception of:

the Customer's employer, as this term is defined in the General Terms and Conditions, according to the Contract,
payment service providers for withdrawal administration,
providers of accounting, tax and/or legal services,
server service providers,
providers of web analysis and evaluation tools,
SMS gateway providers (phone number)
customer centre service providers.

Personal data in these cases will be provided only to the minimum (necessary) extent. The Provider may entrust a third party (as a processor) with the processing of Personal Data.

‍

The Provider does not transfer Personal Data to a third country outside the European Union or an international organization.

‍

5. Security

Customers' personal data are sufficiently secured against loss, destruction, alteration, misuse, unauthorised disclosure, transmission and/or processing, by means of appropriate technical and organisational measures taken taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as the level of risks to the rights and freedoms of natural persons.
In order to achieve the necessary level of security, the Provider has implemented in particular the following technical and organizational measures, internal control systems and means of information technology protection:

Antivirus protection
computer security (e.g. username and password),
data encryption (SSL certificate),
restrictions on storage, disposition and/or disposal of data,
physical security of the premises (e.g. lockable entrance doors, entrance cards, lockers),
regular backup and recoverability of data, etc.

6. Customer Rights

The Customer has the following rights in connection with the processing of Personal Data:

Right of access to Personal Data.
The Customer is entitled to request information from the Provider, e.g. whether his Personal Data are processed or not and, if so, he has the right to access information about the purposes of processing, the categories of Personal Data concerned, the recipients or categories of recipients, etc. The Customer has the right to provide copies of the processed Personal Data.
Right to rectification of Personal Data.
The Customer has the right to correct inaccurate or complete incomplete Personal Data.
Right to erasure of Personal Data ("right to be forgotten").
In specified cases – for example, when the processed Personal Data are no longer needed for the specified purposes – the Customer has the right to request that the Provider delete his Personal Data.
Right to restriction of processing.
In certain cases, the Customer has the right to restrict the processing of Personal Data concerning him/her, e.g. if he/she denies the accuracy of the Personal Data.
Right to data portability.
The right to the portability of Personal Data applies only to cases where Personal Data are provided by the Customer to the Provider (i) on the basis of a Contract or consent to processing and (ii) are processed automatically. When exercising the right to portability, the Provider shall transmit Personal Data to the Customer or to a controller designated by the Customer in a structured, commonly used and machine-readable format.
Right to withdraw consent.
If Personal Data are processed on the basis of consent to the processing of Personal Data, the Customer may revoke it from the Provider at any time.
Right to object.
If the processing of Personal Data is carried out for the purposes of the Provider's legitimate interests or for the purpose of performing a task in the public interest or in the exercise of public authority, including automated decision-making and/or profiling, the Customer has the right to object to the processing.

2. The Customer may exercise his rights upon request at the e-mail address of the kolbl@advanto.cz. The Provider shall process the request as soon as possible, but no later than within one (1) month. The Provider is entitled to extend the deadline by up to two (2) months if necessary and taking into account the complexity and number of requests. The Provider will inform you about the extension.

‍

3. All communications and statements (including the handling of Customer requests) are provided free of charge. However, if the Customer's request is manifestly unfounded or disproportionate, in particular repeated, the Provider is entitled to charge a reasonable fee for its processing, corresponding to the administrative costs associated with the provision of the requested information.

‍

4. If the Customer believes that the processing of his Personal Data has violated the relevant legal regulations, he has the right to file a complaint with the Office for Personal Data Protection (address: Pplk. Sochora 27, 170 00 Prague 7, el. filing room: posta@uoou.cz).

‍

7. Contact

Advanto Group s.r.o.

Address: Běhounská 5/18, Brno-město, 602 00 Brno

Phone: +420 607 149 025

Email: kolbl@advanto.cz

‍