Privacy Policy

This Privacy Policy describes how Funds Flow s.r.o. (referred to as "we," "us," or "our") collects, uses, and safeguards personal information obtained through our website and services. This document has been prepared in accordance with the European Union’s General Data Protection Regulation (GDPR) and is intended to ensure that personal data belonging to our customers and users is handled lawfully, transparently, and securely.

Data We Collect

We gather various types of information to deliver our services and meet our obligations to users:

1.1 Information Provided by Users

When you engage with our products and services, you may share certain details with us. We will never request any data regarding your racial or ethnic origins, sexual orientation, political views, religious or philosophical beliefs, biometric or genetic information, or trade union membership.

1.1.1 Account Creation

During account registration, we may ask for contact information such as your full name, address, email address, and telephone number. In order to comply with legal obligations, including Act No. 253/2008 Sb. of June 5, 2008, on specific measures against money laundering and terrorist financing, we may also require additional identification details.

1.1.2 Communication with Us

If you choose to contact us directly, we may request supplementary information like your name, email address, home address, and phone number. We will always clarify why we need these details.

1.1.3 Payment Data

When you select a payment method for making transactions or placing orders, your payment information is transmitted directly to our third-party payment processors. We do not store this data on our servers.

1.2 Cookies and Log Files

We use cookies to understand how users interact with our website and services. These files can provide insights into pages visited, frequency of visits, and how certain features are utilized. Additionally, we maintain log files to analyze site traffic and enhance performance.

1.3 Data from Partners and Third Parties

We may obtain information from public databases, identity verification services, and financial institutions to confirm the data you provide. We process such information strictly in accordance with applicable laws and GDPR standards.

How We Use Your Information

We utilize the collected data for a variety of legitimate purposes, including:

Operating, maintaining, and supporting our services;
Processing payments, managing orders, and ensuring fair and transparent transactions;
Identifying and preventing fraud, financial loss, or other illicit activities;
Complying with regulations focused on preventing financial crimes, money laundering, and terrorism financing;
Communicating with users about service updates, modifications, and for marketing or promotional announcements;
Improving the quality of our offerings and developing new features or products.
Sharing of Information

We may share user data under the following circumstances:

3.1 Service Providers and Business Partners

We collaborate with various external providers who support our business operations—such as payment processors, website analytics firms, advertising partners, and IT service providers—to help us deliver and enhance our services.

3.2 Law Enforcement and Compliance

If required by law or regulation, we may disclose personal information to law enforcement or other authorized organizations to prevent financial crime or other unlawful activities.

3.3 International Data Transfers

Some of our external providers or partners may be located outside the EU/EEA. Whenever transferring data internationally, we adhere to GDPR mandates to maintain data security and legal compliance.

Legal Bases and Legitimate Interests

We process personal data for reasons including:
Your explicit consent;
Fulfilling our contractual commitments to you;
Meeting legal obligations and statutory requirements;
Safeguarding our legitimate interests, such as ensuring platform security and preventing illegal activities, without overriding your fundamental rights.
Your Rights as a Data Subject

Under GDPR, you have several rights concerning your data:

5.1 Access, Correction, and Deletion

You can request access to your data, ask for corrections, or request its deletion at any time by reaching out to us.

5.2 Restriction of Processing

You may request that we limit how your information is used.

5.3 Data Portability

You can ask us to transfer your data to another data controller if technically feasible.

5.4 Opt-Out from Marketing Communications

You can unsubscribe from marketing emails by following the “unsubscribe” link found in our communications.

5.5 Withdrawal of Consent

You can withdraw consent for data processing at any point. This will not affect the lawfulness of data processing prior to withdrawal.

5.6 Right to File a Complaint

If you believe your data was processed unlawfully, you have the right to lodge a complaint with your local data protection authority.

Automated Data Processing

We may use automated tools to evaluate risks related to fraud or financial misconduct. However, any pivotal decision that could significantly impact your rights will always involve human review.

Data Retention

We retain personal data only as long as it is needed to fulfill the purposes described above and to comply with legal requirements. For example, data relevant to anti-money laundering regulations is kept for five years after you cease using our services.

Policy Updates

We may revise this Privacy Policy periodically to align with changes in laws or improve our procedures. Any updates will be published on our website, and we may also notify you via email.

Contact Information

For any questions or concerns about this Privacy Policy, your data rights, or how we process personal information, please contact us at .moc.liamg%40lagel.wolfsdnuf We are committed to providing the necessary support and clarification.

Data Protection Measures

We implement rigorous measures to secure your personal data. All transmitted information is protected using Transport Layer Security (TLS) encryption, ensuring the security of data exchanged between your device and our servers. Emails and messages are also encrypted. We use the most recent TLS version (TLS v1.3) and will update our protocols if more secure versions become available.

Your transaction details and other personal information are encrypted and entrusted to reliable service providers who comply with stringent data protection standards. In cases where these providers operate outside the EU/EEA, we ensure adherence to GDPR requirements.

While we strive for the highest security standards, no system is entirely immune to risk. We strongly recommend creating strong passwords and maintaining the security of your account credentials.

Anonymization of Data

In certain situations, we may anonymize personal information so it can no longer be linked to any individual. Such anonymized data may be used for research, enhancing our services, and mitigating security threats. We guarantee that anonymized data cannot be traced back to you.

Children’s Privacy

We do not knowingly collect or process personal data from children under the age of 13 without explicit parental or guardian consent. If we learn that a child’s information has been provided without appropriate consent, we will promptly delete that data. If you believe a child under 13 has submitted personal data without proper authorization, please contact us.

Cross-Border Data Transfers

Some of our partners and service providers may be located outside the EU/EEA. In such cases, we ensure that all data transfers comply with the GDPR, maintaining equivalent levels of data protection and security.

Automated Decision-Making

We may employ automated processes to handle data and make certain assessments, for instance, in evaluating risks related to financial crimes. However, any significant decisions affecting your rights or interests will involve human oversight.

Policy Revisions

This Privacy Policy may be modified from time to time to reflect evolving legal requirements or to enhance our data handling practices. Any significant updates will be posted on our website, and we will notify you via email.

Contact Details

If you have any inquiries regarding this Privacy Policy, your rights as a data subject, or any questions about our data processing practices, please contact us at .moc.liamg%40lagel.wolfsdnuf We remain at your disposal to offer assistance and clarifications.