Basic information
This privacy policy (the “Privacy rules”) governs how we approach the handling of personal data and secure its protection. We follow Czech Act No. 101/2000 Coll., on the protection of personal data and amending certain acts, as amended (the “Act”).
We undertake to protect information about our Clients and to take care to preserve their privacy.
Together with the Terms and Conditions and other rules, these Privacy rules govern the operation of the GoPay Payment System. The Privacy rules set out the conditions under which, the way in which and the extent to which we will collect personal data about you and how we will handle it further, including data obtained through our website.
The terms used in these Privacy rules have the meaning defined in the Terms and Conditions, unless expressly stated otherwise here.
When processing personal data we take care to ensure that no harm is caused to your rights, in particular the right to preserve human dignity, and we also take care to protect you from unauthorised interference in your private and personal life.
You hereby give us your consent to the processing of your personal data under the conditions set out in these Privacy rules.
If you request information about the processing of your personal data, we are obliged to provide this information without undue delay. The information always includes a statement about:
the purpose of processing the personal data,
the personal data or categories of personal data being processed, including all available information about its source,
the nature of automated processing in connection with its use for decision-making, where acts or decisions are made on the basis of such processing whose content is an interference with your rights and legitimate interests,
the recipients or categories of recipients.
The information under this point of the Privacy rules is set out further in this document.
You acknowledge that providing personal data is voluntary.
We take the greatest possible care over the protection of personal data and comply with the obligations relating to handling personal data. If you nevertheless find or believe that we are processing your personal data in a way that conflicts with the protection of your private and personal life or conflicts with the Act, in particular where the personal data is inaccurate with regard to the purpose of its processing, you can:
ask us for an explanation,
require us to remedy the situation that has arisen. This may in particular involve blocking, correcting, supplementing or destroying the personal data.
. If your request under the previous point of these Privacy rules is found justified, we will remedy the defective situation without delay.
Your further rights in the processing of your personal data are set out in Section 21 of the Act.
What personal data we collect
We generally collect, store and process the following data obtained in the course of using the GoPay Payment System:
your full first name and surname, including the level of education attained,
your e-mail address,
your mobile phone number,
your home address,
copies of any personal documents proving your identity, including the photograph and the information given on those documents,
your bank account number, including the bank statement of transactions and the name of the account holder,
data on any transaction carried out,
data on any credit, debit or other payment card, including the PAN number, expiry date and the name of the payment card holder,
all communication that has taken place,
information obtained from questionnaires or similar forms you may be asked to complete,
information obtained using cookies,
information about your device's operating system and the type of internet browser,
the IP address and connection times of your device,
data about your visits to our website, in particular operational data, location data, weblogs and so on, as well as data about your behaviour on the internet.
In order to fulfil our statutory obligation to prevent fraud and the legalisation of the proceeds of crime, we may obtain certain information about you from third parties when a GoPay account is opened, and at any time when we consider it appropriate or necessary to prevent fraud and minimise financial risks, but always provided that the information about you was collected and held lawfully and in accordance with legislation and that it is also permissible for us to obtain that information.
In order to improve the quality of our services, we store cookie variables on the device you use to access our website.
We use various types of cookies for the following purposes:
to identify your device,
to strengthen the security of the GoPay Payment System,
to optimise our website,
to provide or offer individualised services,
for third-party services such as Google, Facebook and others that we use. For the specific rules on the use of cookies you need to consult the third parties' websites.
By using our website you acknowledge that we may use some or all types of cookies, and you agree that we may store cookies on the device you use to access our pages. If you do not agree with this, do not access our website or adjust the settings of your internet browser.
If you still want to use our services but want to limit the use of cookies, you can block them in your browser settings, which allow you to refuse to accept all or some cookies. If you use your internet browser settings to block all cookies, you may not be able to access our website or parts of it.
Our website may use some types of cookies as soon as you visit it, unless your internet browser is set to block cookies.
What we use the personal data obtained for
We use the information we hold about you as follows:
to operate and administer your GoPay account,
to make or receive payments and internal messages according to your instructions,
for mutual communication,
to comply with statutory measures,
for internal analysis of transaction risk, including the obligation not to carry out a transaction or to block payment transactions,
to improve and secure the services provided,
to ensure that the content of our website is presented as effectively as possible on your device, and
so that you are provided with the information, products or services you request from us or that you might be interested in.
You also acknowledge and agree that we may occasionally send information to your e-mail address about the GoPay Payment System, about newly provided services, information about innovations and recommendations or tips for using the GoPay Payment System and other services we operate, as well as business tips and information about offers or services provided by our business partners. You can set whether or not you want to receive such information or communications in your GoPay account settings.
What we do for the security of personal data
We have taken all the measures necessary to ensure that personal data is handled securely and in accordance with these Privacy rules, regardless of where the data is held.
We apply a system of management and control procedures to prevent unauthorised or accidental access to personal data, its alteration, destruction or loss, unauthorised transfers, other unauthorised processing, and other misuse of personal data; these measures are described in documentation submitted to the relevant supervisory authorities. This obligation continues even after the processing of personal data ends.
All internet communication through our website is secured using SSL/TLS technology with a high level of encryption.
You acknowledge that even with the greatest care and despite every effort to secure communication and to hold personal data securely, absolute security of the transmission of information and data over the internet cannot be guaranteed.
Under Czech Act No. 368/2016 Coll. we are obliged to retain certain records and data for at least five or ten years after the end of the contractual relationship. We will delete and destroy the other personal data and information we have collected about you as soon as the contractual relationship ends.
Who we are entitled to disclose personal data to
You agree that we may pass or make over the data collected to companies or other persons that are part of the same holding as our company, and where applicable also to companies in which the partners of GOPAY or persons close to them act as partners, shareholders or members of bodies.
When transferring Electronic Money to another GoPay account holder we are entitled to pass the recipient of that money at least the e-mail address, physical address and/or mobile phone number of the sender of the money. Depending on the type of payment used, we may receive your personal data from third parties, such as your first name, surname, physical address, e-mail address, mobile phone number and country of residence, where this information is needed to improve the payment process or to carry out our own checks against fraud or the legalisation of the proceeds of crime. You agree to the receipt of personal data within the meaning of the previous sentence.
You agree to the transfer of identification under Section 11(1), (2) and (3) of Czech Act No. 368/2016 Coll., provided that the recipient of the identification protects the personal data and information at least to the same extent as corresponds to our standards. The recipient of the identification may be an obliged entity under Section 2 of Czech Act No. 368/2016, provided it meets the conditions under this point and provided applicable legislation does not preclude it. You also agree that we may receive your identification under the conditions otherwise governed by Section 11(1), (2) and (3) of Czech Act No. 368/2016 Coll.
. We are also entitled to disclose personal data to:
a potential buyer of GOPAY's business or a party interested in acquiring a significant ownership interest in GOPAY,
the police, law enforcement authorities, other authorised state authorities or public authorities and the courts, provided that the obligation to disclose the personal data arises from the law or from a relevant decision, or where the disclosure of the personal data serves to protect our rights, property or security, or those of the group we are part of, or of Clients or other contractual partners,
third parties, where you have expressed an interest in receiving information about their goods or services.
We are entitled to pass aggregated information about how you use our website and our services to third parties for statistical, research or analytical purposes, but it is not possible to identify you on the basis of that information.
Final provisions
We are entitled to amend these Privacy rules unilaterally according to the rules and conditions set out in this article, and you agree to this entitlement.
If we amend the Privacy rules, we are obliged to notify you of the change in advance by an e-mail message containing a link to the new Privacy rules, from where you can print them or save them in electronic form.
The Privacy rules are issued in electronic form and are available on the GOPAY website.
The Privacy rules take effect on 1 January 2017.