Privacy Policy

Before using GroupPay you are required to acquaint yourself with the Terms of Use ("Terms") and this Privacy Policy ("Policy") regulating the collection, processing and use of your personal data. The Policy forms an integral part of the Terms and all definitions and names shall have therespective meaning defined therein.

You agree to provide the Provider always only accurate, truthful and current personal data and keep it up to date.

Service provision

You acknowledge that GroupPay as a data controller, process your personal data in a scope specified hereunder as necessary for the performance of a contract arising out of these Terms. The purpose of this personal data processing is service provision which includes, but is not limited to, setting up and keeping your GroupPay account, ensuring GroupPay features and providing support. Minimum scope of your personal data required for a conclusion of a contract with the Provider and setting up and keeping your GroupPay account include your first name, last name, e-mail address, login credentials, language, currency. Provision of other personal data is completely voluntary and therefore the scope of the data being processed by the Provider depends mainly on the GroupPayfeatures you want to use.

The Provider is obliged to process your personal data in order to identify you in accordance with the act no. 253/2008 Coll., on Selected Measures against Legitimization of Proceeds of Crime and Financing of Terrorism (the “AML Act”). The scope of the collected data is first name,last name, sex, birth number, or date of birth if the birth number is not applicable, place of birth, permanent address, and citizenship. The purpose of this personal data processing is to comply with the legal obligation to which GroupPay is subject. The data on potentially suspicious transactions within the meaning of the AML act are stored for the period of 10 years, even after the deletion of your GroupPay account.

In case you want to use login through Google account, the Provider willprocess identification details of the respective social media account.

As long as you will use the financial tracking and budgeting feature of GroupPay the Provider will process your personal financial information (such as incomes, expenses and their details, budgets etc.) based on your input. In case you will use the payment account synchronization feature of GroupPay the Provider will process also credentials to access the payment account, transaction details (such as amount, description, note, date and currency) and the payment account details (such as account number, account name, balance, currency, and type of account).

In order to get more personalized experience and better financial advice,you can also fill out your GroupPay account and let us process your personal data including profile photo, birth date, sex, family status, place of residence, housing situation, education and employment details, property details and economic situation.

You furthermore acknowledge that as a part of the personal data processing for the purpose of service provision the Provider may use profiling to analyze or predict aspects concerning your family status, housing situation, education and employment, property details and economic situation, as well as behavior in order to deliver you the best personalized experience and financial advice. This profiling doesn't result in any automated decision-making which would produce legal effects to you or would have similarly significant consequence.

All personal data categories mentioned above in this section can be hereinafter referred to as "Personal data". The Personal data will be processed by the Provider for the purpose of service provision until you delete it or until you or the Provider will terminate the Agreement.

Sending marketing communications

You acknowledge that the Provider, as a data controller, may use your e- mail address and its details it has obtained in the course of registrationto send you direct marketing communications regarding GroupPay. Youre-mail may be used by the Provider until you opt out. You can opt out at any time by clicking on the "unsubscribe" link in the respective e-mail orby another action described therein.

Service improvement and development

You acknowledge that the Provider may, as a data controller, process your Personal data for the purposes of legitimate interests in improving and developing GroupPay pursued by the Provider, which includes also anonymization of the data. Where possible the Provider will use for thispurpose only anonymized data. The Personal data will be processed bythe Provider for the purposes of legitimate interests in improving and developing GroupPay only for the necessary period of time, maximum until you or the Provider will terminate the Agreement.Recipients and transfers to third countries

The Provider may appoint third parties – data processors to perform some of the personal data processing operations, however only for the purposes specified in this Policy, on a basis of written agreement and under statutory conditions.

Otherwise the Provider does not transfer or disclose your Personal Datato any third parties unless you have consented otherwise under this Policy or initiated the disclosure or except as required by the applicable laws.

Sharing your Personal Data with other users of GroupPay is completely under your control.

Data processors being used by the Provider include:

Google Commerce Limited, 70 Sir John Rogerson's Quay, 2Dublin, Ireland

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

For the transfer of personal data to the USA, there is no Commission decision on adequate protection and therefore the transfer is carried outon the basis of appropriate safeguards in the form of standard data protection contractual clauses as approved by the European Commission. A copy of your Personal data can be obtained from the data processors through the Provider.

Your rights

You acknowledge that in relation to the Personal data processing you have the right to access your Personal data. If you find or presume that the Provider or any of data processors is carrying out processing of your Personal data which is in contradiction with the protection of your private and personal life or with the law, you are entitled to contact them with a complaint concerning the processing of your Personal data and ask for explanation and/or require them to remedy the arisen state of affairs, in particular by blocking (from 25. 5. 2018 "restriction of the processing"), rectification, supplementing or liquidation (from 25. 5. 2018 "erasure") ofyour personal data.

You acknowledge that you have also right to object, on grounds relating to your particular situation, to processing based on legitimate interest (service improvement and development), including profiling (from 25. 5. 2018). You furthermore acknowledgethat you have also right to object to processing for direct marketing purposes (from 25. 5. 2018). Where you object to processing, the Provider will no longer process your Personal datafor the respective purposes.

Payment information

When you make purchases through GroupPay, your credit card information and other data are not collected and stored by the Provider,but only by third party payment processors.

Location

Some of the GroupPay features may access and collect your currentlocation data, including GPS coordinates or other similar informationregarding the location of your device. Some features of GroupPay may not function properly if use of location data is blocked or disabled.

Sign in with Apple

You acknowledge and agree that if you have chosen to anonymize your user data as part of Sign In with Apple and later you decide to link your GroupPay account with your Google account or you connect your bank

account or other financial service to your GroupPay account, your anonymized data may get linked with information that directly identifies you.

Technical Data

You acknowledge that Provider may collect and use technical data, including but not limited to information about your mobile device and system, Internet connection or your use of GroupPay application. The purpose of the collection of technical data is to ensure quality, increase your comfort and further analyze and develop GroupPay and related services.

Technical data is anonymous and stored separately from the Personal Data, therefore it cannot be linked back to you in any way in order to identify you.

Data security

Your Personal Data is stored and processed automatically in electronic form on secure servers with firewall protection and physical security measures.

You acknowledge, that even Provider and other data processors use all standard security measures, the security of yourPersonal Data and other information can't be 100% guaranteed.

Contact information

If you have any queries relating to the protection and security of your data, please contact Provider's data protection officer

at hi@grouppay.app