Privacy Policy
Information and Guidance on Personal Data Processing for the Šumavská Project
We hereby inform you about the processing of your personal data and your rights related to data protection, which you, as data subjects, have in connection with personal data processing.
This information relates exclusively to personal data processing for the Šumavská project and is specific compared to the general information and guidance on personal data processing available at www.rl.cz.
Who is the data controller, and whom can you contact?
Data Controller:
Raiffeisen – Leasing, s.r.o.
Address: Hvězdova 1716/2b, 140 00 Prague
Phone: +420 221 511 611
Email: rl@rl.cz
Website: https://www.rl.cz/
(hereinafter referred to as the “Company”)
What data is processed, and from what sources does this data come?
The Company processes personal data received from you during the negotiation and performance of a business relationship. Additionally, it processes data obtained in a permissible manner from publicly available sources and third parties (e.g., information agencies like KSV1870 Holding AG), data legitimately transferred from other Raiffeisen group companies (e.g., corporate client management departments, group employee directories), or data provided as part of contract processing by our contractors.
Personal data includes your identification and contact information (name, address, date and place of birth, nationality, etc.), identity verification data (e.g., ID document information). It may also include payment details related to the business relationship, creditworthiness information, income verification documents (if required, e.g., for support purposes), marketing and distribution data, electronic log and identification data (e.g., cookies on websites or specific applications), and other data comparable to the mentioned categories. To protect our publicly accessible buildings, we use video cameras that record individuals entering and leaving the building. These recordings are reviewed only in justified cases. Cameras are also used for monitoring construction progress on real estate properties as part of our projects.
For what purposes and on what legal basis is the data processed?
- To fulfill contractual obligations:
This processing is necessary for pre-contract negotiations, contract conclusion, and performance of the contractual relationship with the Company. For this purpose, your identification, contact information, and contract-related details will be processed as needed.
- To comply with legal obligations:
Personal data processing may arise from various legal obligations (e.g., Civil Code, Act on Business Corporations, Consumer Protection Act, Anti-Money Laundering and Terrorism Financing Act, etc.).
- Based on your consent (Article 6(1)(a) GDPR):
If you have given us consent to process your personal data for specific purposes (e.g., sharing data within the group, needs analysis, and direct customer engagement), we process the data solely in accordance with the purpose stated in the consent declaration and within the agreed scope. Consent can be revoked at any time with future effect.
- To protect legitimate interests (Article 6(1)(f) GDPR):
If necessary, we or third parties may process data beyond fulfilling contracts to protect the legitimate interests of the Company or third parties. Such data processing includes:
- Video surveillance to protect buildings, people, and valuables, with prior notice;
- Advertising or market and opinion research unless you object to such use under Article 21 GDPR;
- Call recordings (e.g., for complaints) based on explicit consent;
- Measures to manage business activities and develop services and products;
- Measures to protect customers, suppliers, employees, and Company assets;
- Legal disputes;
- Assertion of legal claims and defense in legal proceedings;
- Ensuring IT and operational security.
If your personal data is processed to protect the Company’s legitimate interests, you have the right to object. Upon objection, the Company will stop processing your data unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
Who receives my data?
Within Raiffeisen–Leasing, employees needing data to fulfill contractual and legal obligations and legitimate interests will receive it. Additionally, service providers and contract processors (e.g., legal representatives, construction engineers, tax consultants, IT service providers, accounting firms, office service providers, or telecommunication providers) will receive data to fulfill their tasks. All processors are contractually obligated to maintain confidentiality and process data solely for service provision.
Public authorities and institutions (e.g., tax offices, courts, etc.) may also receive your data.
Other recipients may include entities authorized by you in your consent as legitimate data recipients.
How long will my data be retained?
We process your personal data as necessary throughout the entire business relationship (from initiation to execution and termination of the contract) and beyond, depending on retention and documentation periods derived from laws (e.g., Civil Code, Business Corporations Act, Consumer Protection Act, Anti-Money Laundering Act, etc.).
What data protection rights do I have?
Under Regulation (EU) 2016/679, you have the right to request information about the purposes of processing, the extent of personal data processed, their categories, and the source from which they were obtained. You also have the right to know the planned processing period, whether automated decision-making, including profiling, occurs, and details about recipients or categories of recipients of personal data. You can request rectification or erasure of inaccurate data or data no longer required for processing purposes.
If data is transferred to a third country or international organization, you have the right to be informed about the safeguards related to the transfer.
You have the right to receive your personal data provided to the Company based on consent or contract. Upon request, the Company will provide this data promptly in a structured, commonly used, and machine-readable format. This right does not apply to non-automated data processing.
If you believe the processing of your personal data violates your privacy or the law, you can object, seek clarification, or request rectification, restriction, or deletion of the data. Complaints can also be filed with the supervisory authority in the Czech Republic, the Office for Personal Data Protection (www.uoou.cz).
For inquiries or data protection requests, you may contact the Data Protection Officer at Raiffeisenbank a.s., Hvězdova 1716/2b, 140 78 Prague 4, poverenec@rb.cz.
Is automated decision-making applied?
Automated decision-making under Article 22 GDPR is not used to establish and conduct business relationships. If applied in specific cases, we will inform you accordingly.
Is profiling conducted?
No personal data is processed for profiling purposes.
Use of Cookies
Cookie Information
I. What are cookies?
Cookies are small text files, typically containing a unique identifier, sent to a user’s browser and stored on their device. They contain anonymous information like an identifier, website name, or expiration time. Cookies can be temporary (session-based) or persistent, remaining on the device until deleted by the user or expired.
II. Reasons for Using Cookies
Cookies ensure the proper functioning of the website, determine user preferences, and tailor website content. They are also used to analyze service interest and offer related products. Cookies are not used to gather additional personal data but may be linked with personal data provided or obtained through other means.
III. Types of Cookies and Their Purpose
The website uses the following cookies:
-
Technical (necessary) cookies: Essential for proper website display and functionality.
-
Analytical cookies: Analyze website usage and traffic to improve quality and content.
-
Conversion and tracking cookies: Analyze sales channel performance.
-
Marketing cookies: Collect data for targeted advertising and user interest-based content.
You can manage your preferences using the cookie banner.
Cookies used by the website are classified as:
- First-party cookies: Created by the website, mainly technical cookies.
- Third-party cookies: Managed by third parties for analytics, marketing, etc.
Details about cookie management are available in your browser settings.
IV. Cookie Management
Technical cookies are stored without user consent, but other types require user agreement via the cookie banner. Users can accept all, some, or only necessary cookies. Consent lasts for one year.
Cookies can also be managed through browser settings, allowing for deletion or setting preferences. Deleting cookies permanently removes stored information, potentially affecting website functionality.
We collaborate with third-party processors who may use cookies.
Using cookies may involve processing personal data. Raiffeisen – Leasing’s data processing practices are outlined above.
Cookie Overview
Cookie | Domain and Tool | Purpose | Use |
CookieConsent | bydlenisumavska.cz | Necessary | Stores user cookie consent for the current domain. |
1.gif | bydlenisumavska.cz | Necessary | Counts site visits for product optimization. |
maps/gen_204 | maps.googleapis.com | Preference | Stores user interaction with maps to optimize functionality. |
wp-wpml_current_language | bydlenisumavska.cz | Preference | Determines language based on user IP for localized content. |
_ga | bydlenisumavska.cz | Marketing | Sends data to Google Analytics about user behavior across devices and marketing channels. |
_ga_# | bydlenisumavska.cz | Marketing | Sends data to Google Analytics about user behavior across devices and marketing channels. |