​

Privacy Policy and GDPR Compliance Welcome to pujckanazlato.com. The protection of your personal data is a priority for us. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and relevant Czech national laws when you use our short-term loan services secured by gold collateral.

1. Personal Data We Collect To provide our financial services safely and legally, we may collect the following data:

• Identification Data: First name, last name, date of birth, personal identification number (rodné číslo), and ID card/passport details.

• Contact Data: Residential address, email address, and phone number.

• Financial and Transaction Data: Details regarding the pledged gold, loan amounts, interest rates, repayment history, and bank account information.

2. Purpose and Legal Basis for Processing We process your data exclusively for the following purposes:

• Contractual Necessity: To evaluate your gold collateral, draft the pledge agreement, and process the loan payout and repayments.

• Legal Obligations: Financial services are strictly regulated. We process identification and transaction data to comply with Anti-Money Laundering (AML) laws and mandatory tax/accounting regulations.

• Legitimate Interests: To protect our business against fraud and manage outstanding debt collections.

3. Data Retention Your personal data is retained only for as long as necessary. Active loan data is kept for the duration of the agreement. Following the termination of the contract, transaction and identification records are archived for up to 10 years as mandated by Czech tax and AML legislation.

4. Data Sharing We treat your personal data with strict confidentiality. It is only shared with:

• State authorities (such as the police or financial administration) if strictly required by law.

• Trusted third-party service providers (e.g., accounting firms, IT hosts) who are bound by strict data processing agreements.

5. Your GDPR Rights Under the GDPR, you have the right to:

• Access the personal data we hold about you.

• Request the correction of inaccurate or incomplete data.

• Request the erasure of your data (Note: this right is limited where we are legally obligated to retain the data for financial compliance).

• Restrict the processing of your data under certain conditions.

• Object to processing based on legitimate interests.

• Lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).