Privacy protection policy

This privacy protection policy is intended to provide information about what personal data Click2Claim, Ltd. CRN 28791215, based in Jičínská St. 1748/5, Vinohrady, 130 00 Prague 3 (also referred to as "C2C"), processes regarding natural persons (excluding employees) in their activities. Information obligations regarding C2C employees are the subject of separate documentation.

This Privacy Protection Policy is valid from 25 May 2018 and is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data ("GDPR") to fulfill the information obligation of C2C as an administrator within the meaning of Articles 13 and 14 of the GDPR.

WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

The administrator of your personal data is Click2Claim, Ltd., CRN 28791215, based in Jičínská St. 1748/5, Vinohrady, 130 00 Prague 3.

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DOES PERSONAL DATA PROCESSING TAKE PLACE?

We process your personal data only for the purposes listed below and on the following legal bases:

a) Processing is necessary in order to be able to provide you with a user-friendly Internet service and is also necessary for the realization of rights and obligations in connection with the supplying of your requested services or the purchase of our products (Travel Standard, Travel Assistant) in accordance with Article 6, section (1), letter b) of the GDPR.

b) Processing is based on your consent for marketing, advertising and statistical purposes (sending information and business communications) in accordance with Article 6, section (1), letter a) of the GDPR.

c) Processing is necessary for the purposes of the legitimate interests of C2C in a way that protects your interests as well as fundamental rights and freedoms. This pertains to data about your behavior on the www.click2claim.eu website that we process to collect information which will subsequently be used to improve our website and our services, and which will serve as a basis for creating traffic monitoring statistics on www.click2claim.eu and individual sites, measuring advertising effectiveness, as well as preventing attacks on the website www.click2claim.eu and threats to its functionality and the security of your data.

WHO IS THE RECIPIENT OF YOUR PERSONAL DATA? TO WHOM WILL THE DATA BE PROVIDED?

The recipient of your personal data is C2C.

Personal data may also be made available to persons providing C2C services as data processors (IT entities, marketing platforms through which newsletters and other business communications are distributed; lawyers securing claim recovery, and external accountants). We will screen all of these individuals to ensure that they provide sufficient assurance that your personal data is confidential and protected. With these persons, we will have written agreements in which they will commit to protecting your personal data and complying with our privacy protection standards, as well as maintaining confidentiality.

In justified cases, personal data may also be provided to competent public authorities or similar institutions (e.g. tax offices, banks, insurance companies, courts and law enforcement agencies).

WHAT PERSONAL DATA CATEGORIES DO WE PROCESS?

Data in relation to you as our valued customers

name, surname, date of birth, telephone number, e-mail address, contact address, signature (on a power of attorney for the purpose of claim recovery), bank account for the purpose of sending the recovered claim.

Data in relation to our business partners (natural persons)

title, name, surname, ID number, VAT number, billing address, contact address

Data in relation to business partners - contact information of a body corporate representative

title, name, surname, telephone number, e-mail address, contact address

DOES TRANSFERRING OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS TAKE PLACE?

In a vast majority of cases, your personal data will not be transferred to any third country or any international organization; if it is strictly necessary to do so in connection with the recovery of your claims, it only takes place upon your explicit consent.

FOR HOW LONG WILL THE PERSONAL DATA BE STORED?

The personal data will be processed by C2C for the duration of the contractual relationship and for the time necessary to meet legal obligations and defend the rights in case of any disputes, but no later than 5 years after the termination of the contractual relationship.

WHAT ARE YOUR RIGHTS IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA?

You have the following rights in connection with the processing of your personal data:

The right of access to your personal data

You have the right to request information about whether your personal data is being processed, or for what purpose, to what extent, for how long it will be stored and the source from which it was obtained; and whether your personal data is being processed for the purpose of automated decision-making, including potential profiling. You also have the right to request a copy of your personal data, with the first copy being free of charge.

The right to correct your personal data

In case your personal data is inaccurate or incomplete, you may request it to be corrected or added to at any time.

The right to the deletion of personal data (the so-called right to be forgotten)

If (i) your personal data is no longer needed for the purposes for which it was processed, (ii) the processing is unlawful, (iii) you object to the processing, and there are no overriding legitimate reasons for processing, or (iv) if dictated by a legal obligation, the administrator must erase your personal data.

The right to limit the processing of personal data

If any contentious questions arise in connection with the processing of your personal data, the administrator is obliged to restrict the processing of the data in such a way that it can only be stored and possibly used for the purpose of determining or enforcing legal claims.

The right to object to the processing of personal data

If your personal data is processed for purposes of direct marketing or due to a legitimate interest, you have the right to object to such processing. If an objection is raised against the processing for direct marketing purposes, personal data will no longer be processed for such purposes.

The right to personal data portability

In the case of automated processing of personal data based on a contract or your consent, you are entitled to provide data in a structured, commonly used and machine-readable format.

The right to withdraw consent to the processing of personal data

You have the right to revoke previously granted consent to the processing of your personal data at any time. The processing of personal data that occurred prior to the withdrawal of consent is in accordance with legal regulations.

The right to file a complaint with the Supervisory Authority

If you believe that violations against personal data protection have been incurred while processing your data, you have the right to file a complaint with the Office for Personal Data Protection, Pplk. Sochora St. 27, 170 00 Prague 7

DOES AUTOMATED DECISION-MAKING, INCLUDING PROFILING, TAKE PLACE?

Personal data of natural persons are not subject to any C2C's decision based solely on automated processing, including profiling.

DOES THE PROCESSING OF PERSONAL DATA BY MEANS OF C2C WEBSITE TAKE PLACE?

On the www.click2claim.eu website, C2C processes personal data through cookies, as well as through the registration forms that you fill in so that we can properly provide you with required service. If you visit www.click2claim.eu and allow cookies to be read, we store and then read cookies on your device, that is, small files of letters and numbers that we store in your Internet browser or on your computer's hard drive.

Cookies assist in identifying you when surfing between the individual sites (sub-pages) of the www.click2claim.eu website and during repeated visits; they also serve to ensure security, for example, to reveal that someone has abused your connection to our website and acts instead of you.

Cookies are necessary for the proper functioning of the www.click2claim.eu website. If cookies are blocked, the www.click2claim.eu website may not work properly.

In addition, for the purpose of traffic monitoring of the www.click2claim.eu website, generating statistics and reports, measuring advertising effectiveness, and customizing the content of our website according to specific needs, we store cookies from our website on your device.

In case you choose to check the eligibility of your claim via the www.click2claim.eu website or through the application, data files from your browser will be collected and stored when you visit the website or when you use the application; these data files may contain the form you have filled in, your IP address, browser type, browser language, date and time of the form completion, and cookies that unequivocally identify your browser.

WHAT SOURCE DOES THE PERSONAL DATA ORIGINATE FROM?

In a vast majority of cases, personal data is obtained by C2C directly from you as our customers in connection with your request to provide our services or in connection with the sale of our products (Travel Standard, Travel Assistant). If we receive your personal information from third parties, we assume in good faith that you have given these third parties the consent to share your personal data. If you did not give your consent, please contact us, we will remedy the situation.

HOW IS YOUR PERSONAL DATA PROTECTED?

Our databases are secured against third-party access, and login credentials are encrypted with a strong algorithm. Our employees do not have the opportunity to inspect your login information.

DO YOU HAVE ANY QUESTIONS? WRITE TO US!

If you are interested in detailed information about your rights in the area of personal data protection, including the right to access and correct inaccurate data, or any other query or complaint regarding its processing, please contact us by post at the address of the C2C headquarters or by sending an email to a personal data processing contact info@click2claim.eu.

Note:

This document is updated as of 23/05/2018. As of this date, the so-called Adaptation Act to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Individuals with regard to the Processing of Personal Data ("GDPR") has not come into effect; C2C reserves the right to further alter and modify the document following the progress of legislation.