Privacy Statement

1. The data controller pursuant to Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) is each of the companies belonging to the LitFin Group (hereinafter: “LitFin”).
2. The contact details of the controller are:
   Hybernská 7, Nové Město, 110 00 Prague 1, Czech Republic email: info@litfin.cz
3. The data controller has not appointed a data protection officer.

The personal data LitFin collects about you when you visit and use this website include the following:

1. Information you provide to LitFin. We collect data that you choose to provide to LitFin, whether as an individual or as a legal entity, when filling out claim form on our website, when subscribing to digital newsletter or when otherwise corresponding with us through contact information on our website. Such data includes your first name and surname, date of birth, bank connection, contact details, and other data necessary for the claim and the following contractual acts.
2. Information automatically collected. Whenever you visit or interact with this website, we automatically collect data about your visit. Such information includes IP address and other unique identifiers for the computer, mobile or other device you use to access this website and any referring website. We gather such information through cookies and other web technologies. More information on the use of cookies can be found in our Cookie Policy.

LitFin processes personal data base on the following legal grounds:

1. Consent. We may collect your express consent for one or more specific purposes to achieve our services, including marketing communications. We provide the possibility of withdrawing consent as easily as you give it. You can withdraw your consent through the contact details that can be found under digital newsletter or claim registration form, or through the opt-out instruction on our website at any time;
2. Contractual relationship. We may collect and process your personal data when it is necessary for the performance of a contract to which the data subject is a party or for the measures taken before the conclusion of the contract at the request of the data subject;
3. Legal obligation. We may collect and process your personal data when it is necessary for compliance with a legal obligation to which the data controller is subject, including bookkeeping, tax compliance and etc.;
4. Legitimate interest. We may collect and process your personal data when meet the following legitimate interests:
   • sending commercial communications and newsletters;
   • understanding our clients' behavior, activities, preferences, and needs;
   • improving existing services and developing new services;
   • preventing, investigating and detecting crime, fraud or anti-social behavior and prosecuting offenders, including working with law enforcement agencies;
   • handling clients and staffs contacts, queries, complains or disputes.

LitFin retains the personal data processed through our website for as long as necessary for the purposes for which the data was originally collected, unless a longer retention period is applicable under any applicable laws:

1. For the period necessary for the exercise of the rights and obligations arising from the contractual relationship between the data subject and the controller and the exercise of claims arising from that contractual relationship (for a maximum period of 10 years from the termination of the contractual relationship);
2. For as long as the consent to the processing of personal data for direct marketing or other purposes is not withdrawn, if the personal data are processed on the basis of consent.
3. If direct marketing is solely based on legitimate interest, we retain until we receive your request to exercise your right to object.

After the expiry of the retention period, LitFin will delete the relevant personal data, unless (i) data protection laws, (ii) any law, statute, order, regulation, rule, requirement, practice and guidelines of any government, regulatory authority or self-regulating organization that applies to the services in the country where the services are being provided, or (iii) competent court, supervisory or regulatory body, require the retention of such personal data by LitFin.

1. LitFin does not share your personal data other than as described below:
   • Data controllers within LitFin Group. Your personal data will be shared between the responsible LitFin Group companies that may use your personal data as described in this Policy. An overview of the LitFin Group affiliates can be found Legal disclaimer - LitFin.
   • Website hosting partners and processors. LitFin engages third party technical service providers to provide services on behalf of us, such as support for the internal operations of our website, data storage, marketing services and other services.
   • Third parties in case of legal requirement. LitFin may disclose your personal data if required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process served on us.
   • Third parties with consent. LitFin may disclose your personal data where you have expressly consented, to the third parties jointly perform our service, including the assigned legal advisers.
   • Third parties in case of a corporate transaction. In addition, your personal data may be disclosed as part of any merger, sale, transfer of LitFin's assets, acquisition, bankruptcy, or similar event.
2. LitFin may transfer your personal data to a third country (a country outside the EU) or an international organization, for perform our services, the recipients include mailing services or cloud services or persons involved in negotiating contract opportunities with the controller. LitFin will seek to ensure that all adequate safeguard are in place and that all applicable laws and regulations are complied with in connection with such transfer, and it has entered into the Data Processing Agreement.

1. Under the conditions set out in the GDPR, your rights are as follows:
   • the right of access to your personal data and information about how we process it;
   • the right to have your personal data corrected if it is inaccurate or incomplete;
   • the right to have your personal data erased (the 'right to be forgotten');
   • the right to restrict processing of your personal data;
   • the right to object to processing of your personal data (in particular in the case of processing for direct marketing purposes);
   • the right to move, copy or transfer your personal data ('data portability');
   • right in relation to automated decision-making including profiling (there is no automatic individual decision-making by LitFin).
   • To exercise these rights, you may contact us via info@litfin.cz.
2. In addition, you also have the right to withdraw consent to the processing of personal data at any time by filling this form and sending it to the email address above.
3. If you consider that your right to data protection has been infringed, you can make a complaint to us by sending an email to info@litfin.cz, or via the contact number you can find in your claim registration form. You also have the right to lodge a complaint with the competent Data Protection Authority, particular in the Member State of your habitual residence, place of employment or place of alleged infringement.

In order to protect your personal data LitFin has implemented various appropriate technical and organizational measures to ensure the security of personal data. Your personal data is contained behind secured on-line and off-line devices, and is only accessible by a limited number of people, who are authorized and are required to keep the information confidential.

1. By ticking the consent box or signing the agreement, you confirm that you have read the privacy policy and accept it in its entirety.
2. The data controller is entitled to change these terms and conditions. It will publish the new version of the privacy policy on its website or, where applicable, send the new version of the privacy policy to the data subject at the email address provided to the controller.