Processing of personal data

  1. The company MAN CREDIT sro, IČO: 06319416, with its registered office at Jablonecká 706/26, 190 00 Prague, hereby informs you as a controller of personal data about the rights you have in connection with their processing on the basis of Regulation of the European Parliament and of the Council (EU) no. 2016/679, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), (hereinafter referred to as the “pouc”).
  2. In matters of managing your personal data, you can contact us with questions via:
  1. e-mail addresses info@mancredit.cz, petr.stepanek@mancredit.cz
  2. by phone at +420 722 600 100
  3. data box ID 6k7ny9g
  4. in writing at MAN CREDIT s.r.o. Senovážné náměstí 977/24, 110 00 Prague
  5. on the internet portal, www.mancredit.cz

The right to access your personal data

  1. As a data subject, you have the right to ask us to tell you whether we are processing your personal data.
  2. If we process your personal data, you have the right to access this personal data. You may also request some additional information regarding the processing of your personal data, such as the purposes of their processing, communication of the categories of personal data concerned or communication of the planned period for which personal data will be stored, and if it cannot be determined, at least the criteria used to determine it.

The right to withdraw consent to the processing of personal data

  1. If the processing of your personal data is based on your voluntary consent, you have the right to withdraw your consent at any time.
  2. Withdrawal of consent does not affect the lawfulness of processing based on the consent given before its revocation, nor the lawfulness of processing based on a legal reason other than your voluntary consent.

Right for correction

  1. One of the basic principles of personal data processing is their accuracy. Pokud se domníváte, že jsou Vaše osobní údaje, které zpracováváme, nepřesné, můžete žádat jejich opravu. We will verify the personal data in question at your request and correct any inaccuracies.
  2. Taking into account the purpose of processing, you can also request the addition of incomplete personal data.

Right of deletion

  1. If any of the reasons set out in the instructions are given and at the same time the processing of your personal data is not necessary with regard to any of the circumstances that the exercise of this right under the instructions precludes.
  2. The reasons why you can request the deletion of your personal data include, in particular, the fact that your personal data is no longer needed for the purposes for which it was collected or otherwise processed, and that you have revoked the consent to the processing of your personal data. , and there is no other legal reason for their processing (see also “right to withdraw consent to the processing of personal data”) or if your personal data has been processed illegally.
  3. The exercise of the right of cancellation excludes e.g. the fact that their processing is necessary for the exercise of the right to freedom of expression and information or for the determination, exercise or defense of legal claims or for the fulfillment of a legal obligation imposed on us by generally binding legal regulations.

Right to restrict processing

    1. If any of the following occurs, you have the right to limit the processing of your personal data:
  • if you deny the accuracy of your personal data, for the time necessary for us to verify the accuracy of your personal data,
  • the processing is illegal and you would refuse to delete your personal data and request that their use be restricted instead,
  • we would no longer need your personal data for processing purposes, but you would request it to determine, enforce or defend legal claims,
  • if you raise an objection to processing under Art. 21 par. 1 pouc, until it is verified whether our legitimate reasons outweigh your legitimate reasons (see also “right to object”).
  1. If the processing of your data is restricted, this personal data, with the exception of its storage, may be processed only with your consent, or for the purpose of determining, exercising or defending legal claims, for the protection of the rights of another natural or legal person or for important reasons. public interest of the European Union or one of its Member States.

The right to be notified of the rectification, erasure or restriction of the processing of personal data

  1. If the processing, deletion or restriction of the processing of your personal data has occurred, you may require us to inform you of the recipients of your personal data to whom we have notified this fact, except where such notification is impossible or requires a disproportionate effort.

The right to be notified of the rectification, erasure or restriction of the processing of personal data

  1. Thanks to the right to data portability, you can obtain personal data from us that relates to you and that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transfer this data to another administrator, in the case of personal data that we process on the basis of your voluntary consent or on the basis of a contract, and at the same time the processing of this personal data takes place automatically. If technically feasible, you can also request that we pass your data directly to another administrator.
  2. However, the right to data portability must not adversely affect the rights and freedoms of others.

The right to object

  1. For reasons relating to your specific situation, you have the right to object to the processing of your personal data, if the processing is for reasons of public interest, in the exercise of public authority, or for the purposes of the legitimate interests of the relevant controller or third party. If you raise such an objection, your data will continue to be processed only if there are demonstrable serious legitimate reasons for the processing that outweigh your interests or rights and freedoms, or for the purpose of determining, enforcing or defending legal claims.
  2. If your personal data is processed for the purposes of direct marketing, you have the right at any time to object to the processing of personal data concerning you for this marketing, which includes profiling as far as this direct marketing is concerned.

The right not to be the subject of automated individual decision-making, including profiling

  1. As a personal data subject, you have the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way.
  2. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the administrator, or if it is based on your express consent, or if it is permitted by generally binding legal regulations.

The right to file a complaint with the Supervisory Authority

  1. Without prejudice to any other means of administrative or judicial protection, you have the right to file a complaint with a supervisory authority, in particular in your State of habitual residence, place of employment or place of alleged breach, if you believe the processing of your personal data is GDPR violated.
  2. In the Czech Republic, this supervisory authority is the Office for Personal Data Protection, www.uoou.cz.
  3. The supervisory authority with which you lodge a complaint will inform you about the progress in resolving the complaint and its outcome.

Reporting personal data breaches

  1. The protection of your personal data is also ensured by the obligation of each administrator to notify you without undue delay of a breach of security of your personal data, if it is probable that a certain case of breach will result in a high risk to your rights and freedoms. This obligation to provide information is not required when implementing the designated safeguards or would require a disproportionate effort to comply with it.