GDPR/Protection of Personal Data

In this section, you will find information on how the company FinCORTEX s.r.o., Identification No.: 09373152, with its registered office at Malešická 2855/2b, Žižkov (Praha 3), 130 00 Praha, registered in the Commercial Register maintained by the Municipal Court in Prague (hereinafter referred to as "FinCORTEX" or "we", "us", "our"), processes personal data in connection with its activities.

When processing personal data, FinCORTEX proceeds in accordance with the relevant legal regulations, particularly the General Data Protection Regulation (hereinafter referred to as the "GDPR"). Therefore, FinCORTEX is committed to processing personal data only in accordance with this Protection of Personal Data section, and part of this commitment comprises our obligation to duly inform you of processing activities and your rights.

Information on Personal Data Processing

Within all personal data processing activities carried out by FinCORTEX, the company is the administrator of personal data in the sense of the GDPR, as it independently determines the purposes and means of processing such personal data.

What kind of personal data does FinCORTEX process?

FinCORTEX's activities are related to the provision of IT services, consulting, analysis, education, and event organization. Therefore, our activities cannot be carried out without the processing of personal data. We may process your personal data to the following extent:

• Clients, Partners, and Suppliers: In relation to business counterparts, we process the identification data of the organization (name, identification number, address) and the identification and contact data of contact persons (name, surname, position, contact information), as well as data related to contract performance (order history, communication).

• Software and Web Portal Users: When using our software products and web portals, we may process data necessary for registration, authentication, and use of the service (login, email, usage data, technical logs).

• Course, Training, and Event Participants: If you register for our courses, training, or events (including cultural and educational events), we process your identification and contact data for the purpose of organizing your participation. If photographs or videos are taken at events, you will be notified in advance.

• Job Applicants: If you contact us regarding employment, we will process your CV, contact details, and other information you provide.

• Data from Public Sources: In the context of our consulting and analytical activities, we may process publicly available information about companies and professionals from public sources (e.g., professional social networks, registers), but only for purposes compatible with the original purpose of publication.

Why do we process your data?

FinCORTEX processes personal data for the following purposes:

• Performance of contracts for the provision of software, consulting, analytical, and other services.

• Marketing and promotion of our services (sending commercial offers, event invitations – only with your consent).

• Organization and conduct of educational courses, training, and cultural-educational events.

• Management of client and partner relationships, support, and consulting.

• Testing, analysis, and quality control of our services and products.

• Administrative and operational purposes (accounting, administration of IT systems, hosting, compliance with legal obligations).

• Processing job applications.

What are our legal grounds for processing personal data?

We process your personal data on the basis of the following legal grounds:

• Your Consent: When you give us explicit consent (e.g., for receiving marketing communications or the use of photographs).

• Performance of a Contract: When processing is necessary for the performance of a contract with you or for taking steps at your request prior to entering into a contract.

• Legitimate Interests: When processing is necessary for our legitimate interests, which do not override your interests and fundamental rights. Our legitimate interests include: marketing our products, IT system security, fraud prevention, service quality improvement, and business development.

• Legal Obligation: When we are obliged to process data in accordance with the law (e.g., accounting laws).

From which sources do we obtain data?

• Directly from you (when concluding a contract, registering on a portal, communicating with us).

• From the organization you represent.

• Through forms on our website.

• From public sources (as mentioned above).

Who has access to your personal data?

• Within FinCORTEX: Data is accessible to our employees who need it to perform their job duties.

• Data Processors: Our service providers who assist us in our operations (hosting providers, mailing services, IT support, consultants). They all act on our instructions and are bound by data protection obligations.

• Public Authorities: In cases required by law.

Can your personal data be transferred outside of the European Economic Area?

Transfer of data to third countries may occur, for example, when using cloud services with servers outside the EEA. Any such transfer will be carried out in strict compliance with the GDPR (on the basis of adequacy decisions or using standard contractual clauses).

For how long do we retain your data?

The retention period depends on the purpose of processing. We retain data:

• For the duration of the contract and the time necessary for asserting claims after its termination.

• For the duration of the given consent (if processing is based on consent).

• For the period required by applicable law (e.g., for accounting documents).
  After the relevant periods expire, the data is securely deleted.

How is your personal data secured?

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, or misuse. These measures are regularly reviewed.

What rights do you have as a data subject?

You have the right to:

• Access your data.

• Rectify inaccurate data.

• Erase your data ("right to be forgotten").

• Restrict processing.

• Data portability.

• Object to processing, especially for direct marketing purposes.

• Withdraw your consent at any time (this does not affect the lawfulness of processing based on consent before its withdrawal).

To exercise your rights, please send a request to: v@fincortex.cz or by post to our address.

You can unsubscribe from marketing communications at any time by using the "Unsubscribe" link in each of our email messages.

If you believe that we are violating data protection rules, you have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů).

Amendments to this Information on Protection of Personal Data

This policy may be updated periodically. The current version will always be available on our website. We will notify you of significant changes.

Contact us

For all inquiries regarding personal data protection, please contact us via email: v@fincortex.cz.

Last updated: 23 September 2025