Processing of personal data

The company Eurovalley s.r.o., with its registered office at Příkop 6, 602 00 Brno, ID No.: 293 68 324, file reference C 75913 maintained by the Regional Court in Brno, as the personal data controller (hereinafter referred to as the “Controller”) hereby, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”), informs its clients – natural persons, and also natural persons representing legal entities (hereinafter individually referred to as the “Data Subject”) that:

• Personal data to the extent necessary for the intermediation of an insurance contract or other financial product (identification data, contact data, other personal data according to the specific financial product) provided by the Data Subject or obtained by the Controller will be processed by the Controller for the purpose of intermediating insurance or other financial products and subsequent administration, including the handling of any claims of the Data Subject arising from the contract. The legal basis for processing the Data Subject's personal data is therefore the performance of a contract with the Data Subject and also the fulfillment of the Controller's legal obligations under legal regulations governing the intermediation of insurance and other financial products, and primarily legal obligations related to consumer protection, accounting, tax administration, and document archiving. The legal basis for processing special categories of personal data (health status) is the Data Subject's voluntary consent. This also applies to marketing purposes.
• If processing is based on the Controller's legitimate interests, it involves processing for the purpose of conducting litigation, administrative or similar proceedings, or debt collection.
• The reason for providing personal data of the Data Subject to the Controller is the identification of the contracting parties, which is necessary for the intermediation of insurance or other financial products, including their subsequent administration and the assertion of claims arising from such contracts, which would not be possible without the provision of the relevant personal data.
• The Data Subject's personal data will be processed for the duration of the intermediated contract or its administration by the Controller, and for the duration of the limitation period for performance under the contract (max. 10 years) from its termination or from the date of termination of administration, furthermore, for the period of the Data Subject's consent to processing, if consent was granted, furthermore, for the period of existence of a legal obligation applicable to the Controller (financial administration, supervisory authority, archiving regulations) or for the purposes of the Controller's legitimate interests (litigation). The Controller processes personal data exclusively for the defined purposes in accordance with the existing legal basis for processing.
• For the purpose of intermediating insurance or other financial products, the Data Subject's personal data may be provided to entities operating insurance or reinsurance activities, banking services, building savings, supplementary pension savings, and other financial institutions in a contractual relationship with the Controller within the territory of the Czech Republic, to the Controller's subordinate insurance intermediaries, authorized employees of the Controller, and also to persons who provide IT, legal, accounting, and consulting services to the Controller in order to ensure proper fulfillment of obligations stipulated by generally binding legal regulations and contractual commitments. Personal data may also be provided by law to law enforcement authorities, courts, the Czech National Bank (ČNB), tax administrators, financial administration, bailiffs or insolvency administrators, the Czech Insurers' Bureau (ČKP), and other public authorities.
• During the processing of the Data Subject's personal data, there will be no automated decision-making or profiling.
• The Controller does not intend to transfer the Data Subject's personal data to a third country, an international organization, or to third parties other than those mentioned above.
• The Data Subject has the right to request from the Controller access to their personal data, their rectification or erasure, or restriction of processing, and to object to processing, they have the right to data portability to another controller, as well as the right to lodge a complaint with the Office for Personal Data Protection (tel: +420 234 665 111, postauoou.cz) if they believe that the Controller is processing personal data in violation of the Regulation.
• The data subject has the right to withdraw their consent to the processing of their personal data or explicit consent to the processing of special categories of personal data at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
• The Controller's contact details for personal data processing are:
  • Luděk Peter, 733 621 069, gdpr@eurovalley.cz
• The Controller has not appointed a data protection officer nor designated a representative for fulfilling obligations under the Regulation.

In Brno, on May 24, 2018

‍