Privacy Policy

The operator of the Corrency system, the operator of the website Corrency.cz (hereinafter referred to as the "Website") and at the same time the administrator of personal data is the company CorCo Systems a.s., IČO: 119 686 13, with its registered office at Sokolovská 394/17, Karlín, 186 00 Prague 8, registered in the commercial register maintained by the Municipal Court in Prague, section B, file 26744 (hereinafter referred to as "CorCo" or "We").

The Corrency system is a system of efficient distribution of money through a currency with adjustable convertibility (so-called Corrents). As part of the Corrency system, CorCo provides Correncies to specific natural persons (hereinafter referred to as "Beneficiaries''). These Beneficiaries can subsequently redeem Correnty at sellers of goods and service providers who are involved in the Corrency system (hereinafter referred to as "Merchants'').

CorCo attaches great importance to protecting the privacy of all natural persons involved in the Corrency system or visiting our website (hereinafter referred to as "You") and takes care to protect their personal data. The processing of your personal data takes place in accordance with generally binding legal regulations, in particular Regulation of the European Parliament and Council No. 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95 /46/EC (hereinafter referred to as the "Regulation").

The aim of these policies is to inform you about how we can process your personal data, in particular about their categories, scope and purpose for which they are processed, and about the persons to whom your personal data is transferred. Here you will also find information about your rights in connection with the processing of personal data.

By providing us with your personal data, you accept this policy and acknowledge that we may process your personal data in the manner and for the purposes set out below. If you do not agree with this policy, please do not provide us with your personal information.

What is personal data?

Personal data is all information about an identified or identifiable physical person, such as name, place of residence, e-mail address, telephone number or IP address.

What personal data we collect about you and how we use it

CorCo only collects personal information that you voluntarily provide to us or that we obtain in connection with your involvement in the Corrency system, through our website, or through written or telephone communications with you.

We process the personal data of the Recipients for the following purposes:

Purpose of processing

Categories of processed data

The legal basis of processing

Your registration on the website

Your request to conclude a contract and control of personal data for the purposes of concluding a contract

Identification information

Contact information 

ID number

Conclusion and fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations

Management of your Corrent account, continuous information on the status of the Corrent account, fulfilment of our other obligations according to the concluded contract

Identification information

Contact information 

Corrent account balance

Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations

Checking your identity and account status during a transaction with the Merchant (verification of the ID number / check of the generated code, in both cases sent by the Merchant), related communication with the Merchant

Identification information

Contact information 

ID number

(In case you do not provide your mobile phone contact when registering for the Corrency system)

Corrent account balance

Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations


Maintaining accounting records and fulfilling our legal obligations

Identification information

Corrent account balance

Fulfilment of our legal obligation according to Article 6 paragraph 1 letter c) Regulations

Protection of our rights and legitimate interests

Identification information

Contact information 

ID numbers

Corrent account balance

Our legitimate interest in legal and other protection, possibly in the detection of misuse of the Currency system and the identification of persons responsible for such misuse in accordance with Article 6 paragraph 1 letter f) Regulations

Communication with you

Identification information

Contact information 

Our legitimate interest in the functionality of the Corrency system and ensuring the satisfaction of persons involved in the Corrency system in accordance with Article 6 paragraph 1 letter f) Regulations

Performance of the contract according to Article 6 paragraph 1 letter b) Regulations

Sending offers, news about planned events, promotion, our services (hereinafter referred to as "Newsletter")

Identification information

Contact information

Legitimate interest consisting in direct marketing according to Article 6 paragraph 1 letter f) Regulations

We process the personal data of Merchants who are natural persons for the following purposes:

Purpose of processing

Categories of processed data

The legal basis of processing 

Registration on the website (request to send a draft contract and check personal data for the purpose of concluding a contract)

Identification information

Contact information 

Banking information 

Conclusion and fulfilment of the contract according to Article 6 paragraph 1 letter b) Regulations

Realization of Corrent transaction (sending an SMS to the Merchant approving the transaction)

Contact information

Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations

Reimbursement of Corrents to the Merchant

Payment information

Banking information

Fulfillment of the contract according to Article 6 paragraph 1 letter b) Regulations

Keeping accounting and tax records and fulfilling our legal obligations

Identification information

Contact information 

Banking information 

Payment information

Fulfillment of our legal obligation according to Article 6 paragraph 1 letter c) Regulations

Protection of our rights and legitimate interests

Identification information

Contact information 

Banking information 

Payment information

Our legitimate interest in legal and other protection, possibly in the detection of misuse of the Corrency system and the identification of persons responsible for such misuse in accordance with Article 6 paragraph 1 letter f) Regulations 

Communication with you

Identification information

Contact information 

Our legitimate interest in the functionality of the Corrency system and ensuring the satisfaction of persons involved in the Corrency system in accordance with Article 6 paragraph 1 letter f) Regulations

Performance of the contract according to Article 6 paragraph 1 letter b) Regulations

Sending the Newsletter

Identification information

Contact information 

Legitimate interest consisting in direct marketing according to Article 6 paragraph 1 letter f) Regulations

Consent to the use of your electronic contact for the purposes of disseminating our business communications in accordance with Article 6 paragraph 1 letter a) Regulation and § 7 paragraph 2 of Act No. 480/2004 Coll.

 

We process the personal data of website users for the following purposes:

Purpose of processing

Categories of processed data

The legal basis of processing

Sending the Newsletter

Identification information

Contact information

Your prior consent expressed by subscribing to the Newsletter according to Article 6 paragraph 1 letter a) Regulations

Technical security of website operation

Electronic data (e.g. IP address, cookies, browser type)

Legitimate interest in the functional operation of the website according to Article 6 paragraph 1 letter f) Regulations

Evaluating the use of our site, improving its content, customer support and user experience

Marketing and remarketing (profiling) through cookies

Electronic data (e.g. IP address, cookies, browser type)

Your consent according to Article 6 paragraph 1 letter a) Regulations

You are not obliged by law to provide us with your personal data, the provision of personal data is completely voluntary. However, without providing your personal data, we will not be able to enter into a contractual relationship with you and your involvement in the Corrency system will not be possible. Likewise, we will not inform you about our news or provide you with our other services (at all or in the required quality).

If we require your consent to process your personal data, you are entitled to refuse consent or revoke consent already granted. However, revocation of consent will not affect the legality of processing in the period before its revocation.

If you are a Recipient, please note that the personal data you enter as part of your request to join the Corrency system will be subject to automated processing. This processing is necessary for the purposes of deciding whether you meet the criteria for participation in the Corrency system and whether we can enter into a contract with you. The automated processing of your personal data also takes place during a transaction with the Merchant. In this case, our system verifies whether you are a participant of the Corrency system and whether there is a sufficient number of Corrents in your account necessary to carry out the transaction. We process your personal data for these purposes automatically due to the efficient functioning of the Corrency system. If you believe that our system has evaluated any transaction incorrectly, please do not hesitate to contact us via the contact provided below.

We will not sell or rent your personal information to any third party.

Security and retention period of your personal data

We use strict physical, electronic and administrative security measures to protect your data from unauthorized persons and against unlawful processing, accidental loss, destruction and damage.

We will keep your personal data only for the time necessary for the purpose of their processing. If your personal data is used simultaneously for several different processing purposes, we will process them until the purpose with a longer processing time ceases to exist. However, we will stop using them for a purpose with a shorter processing time once that time has passed.

We use the following criteria to determine the processing time of your personal data:

Transfer of personal data

In order to ensure the operation of the Corrency system, we will transfer the personal data of the Beneficiaries to the Merchant with whom the relevant Beneficiary redeems the Correnty. Such Merchant will process the Personal Data of the Recipients as a separate controller and at its own risk. If you have any questions regarding the processing of your personal data by the Merchant, please always contact the Merchant directly.

We will transfer your personal data to public authorities, to which we are obliged to transfer them according to generally binding legal regulations. These recipients will process your personal data independently of us as independent administrators.

We will further transfer your personal data to our processors with whom we have entered into a contract for the processing of personal data (this may be, for example, a provider of IT or other services). Upon request, we will provide you with an up-to-date list of processors who process your personal data for us. Based on CorCo's legitimate interest, we may transfer your personal data to other companies in the CorCo group, exclusively for internal administrative purposes. Upon request, we will be happy to provide you with an up-to-date list of members of our group with whom we share your personal data.

Your personal identification data will not be transferred to third countries outside the European Union, or outside the European Economic Area. In the event of the transfer of non-identifying personal data to third countries, we will adopt appropriate safeguards to ensure that such data is processed in accordance with the Regulation, in particular through standard contractual clauses. At your request, we will be happy to inform you whether your non-identifying personal data is transferred to third countries.

Policy on the use of cookies

In order to be able to constantly improve our services, our website uses cookies. Cookies are short text files that are created by a web server and stored on your computer via your browser. If you return to our website, we will use cookies to obtain information about your previous visit and other information that our server has stored on your computer.

Information about specific cookies used on our website can be found in our CMP (consent management platform) form. This form is automatically displayed when you first visit the website and serves to easily set and manage your preferences in relation to the cookies used.

The CMP form or the bar referring to this form will be displayed to you until you save your preferences. If you wish to subsequently change your choices, you can do so by calling up the CMP form again. You can call up the CMP form by clicking on the "[Cookies]" link located in the footer of the website.

In the CMP form, you can set your preferences (agree or disagree) in relation to the use of cookies on your device. You can express your consent or disagreement both (a) for specific cookies that are or may be used on the website, and (b) in general for a certain category of cookies. Within the CMP form, these are divided into marketing, statistical and necessary (technical) cookies.

In the case of marketing and statistical cookies, the default setting is your refusal and these cookies will not be used on your device until you give your consent. Necessary cookies, on the other hand, are automatically enabled and their use cannot be refused via the CMP form.

You can also manage the use of cookies on your device within the settings of your web browser. If you deactivate the necessary cookies in this way, it will result in a limitation of the functionality of our website or the complete non-functionality of some of its parts.

Your rights 

In connection with the processing of your personal data, you have the following rights. However, certain exceptions may apply to the exercise of these rights and therefore may not be applicable in all situations. In the event that you exercise your rights and your request is found to be justified, we will take the required measures without undue delay, within one month at the latest (in justified cases, this period can be extended by up to another two months).

·       Right to information

You have the right to be informed in a concise, transparent, understandable and easily accessible manner about how your personal data is processed.

·       Right of access to personal data

You have the right to obtain confirmation from us as to whether or not personal data relating to you is being processed and, if so, to obtain access to and a copy of that personal data (including related information).

·       Right to repair

You can ask us to correct inaccurate personal data. You can also request the completion of incomplete personal data, including by providing an additional statement.

·       Right to delete

You can ask us to delete the personal data processed; under the conditions specified in Article 17 of the Regulation. Please note that in some cases this right cannot be exercised and we may continue to store your data.

·       Right to restriction of processing

In certain cases, you can request that we limit the processing carried out (e.g. until the resolution of your objections).

·       Right to data portability

You can ask us to transfer personal data to you or a third party that we process about you in electronic form on the basis of a contract or your consent.

·       Right to withdraw consent

If the processing of personal data is based on your consent, you can revoke such consent at any time and thus prevent further processing for the purpose stated in the given consent. However, revocation of consent will not affect the legality of processing in the period before its revocation.

·       Right to object

If we process your personal data based on our legitimate interests, you have the right to object to such processing. However, we can demonstrate that there are serious legitimate reasons for further processing on our side.

If your personal data is processed for direct marketing purposes, you have the right to object to the processing of this data at any time. If you object to processing for direct marketing purposes, personal data will no longer be processed for these purposes.

·       The right to request redress and the right to file a complaint

If you believe that your personal data is being processed in violation of the law, please contact us and we will promptly remedy the situation. This does not affect your right to file a complaint regarding the processing carried out directly with the Office for Personal Data Protection.

Our contacts

You can contact us at the e-mail address gdpr@corrency.cz for questions about the processing of your personal data or for the purpose of exercising your rights. Alternatively, you can contact our personal data protection officer directly at the e-mail address povenerec@corrency.cz

Changes to this policy

CorCo reserves the right to modify or supplement this policy as necessary. We recommend that you check these policies regularly to be informed of any changes. Updated versions of this policy will always be available on the website.