Principles of Personal Data Processing (GDPR)

This document regulates the way in which the Lendeo Platform Operator processes users' personal data in connection with the provision of services via the online platform. The aim of this document is to provide transparent information about the scope, purpose and legal basis of the processing of personal data in accordance with the relevant legal regulations, in particular the General Data Protection Regulation (GDPR).

The Operator acts as a controller in relation to personal data, unless expressly stated otherwise in a specific case.

The controller of personal data is the commercial company operating the Lendeo platform, whose identification data is listed on the platform's web interface.

The controller can be contacted via the e-mail address listed on the platform, or in another way listed in the contact details.

The operator processes personal data that the user provides to it during registration, use of the platform or as part of communication. This includes in particular identification data, contact data and data on activity on the platform.

The platform may also process data on transactions, order history, communication between users and data related to user ratings and reputation.

The operator may also process technical data such as IP address, device information or access logs in order to ensure the security and functionality of the platform.

Personal data are processed for the purpose of providing platform services, in particular to enable registration, user account management, order processing and mediation of contracts between users.

The legal basis for processing is primarily the performance of the contract between the user and the administrator. Another legal basis may be the legitimate interest of the administrator, in particular in the area of ​​ensuring platform security, preventing fraudulent activities, protecting the rights of the administrator and third parties and developing services.

If required by law, the legal basis may also be the fulfillment of a legal obligation.

The platform processes personal data for the purpose of operating the user rating and reputation system. This system allows users to provide feedback and create a reputation profile.

The legal basis for this processing is the legitimate interest of the administrator in ensuring the credibility of the platform and the protection of users.

The user acknowledges that his activity on the platform may be evaluated and displayed to other users.

Personal data may be made available to other users of the platform to the extent necessary for the implementation of the contractual relationship, in particular identification and contact data.

Furthermore, personal data may be transferred to service providers who ensure the operation of the platform, such as providers of hosting, IT services or analytical tools.

In justified cases, personal data may be made available to public authorities.

Personal data are stored for the duration of the user account and for the period necessary to protect the rights of the controller and comply with legal obligations.

Transaction and communication data may be stored even after the account is closed, in particular for the purposes of resolving disputes and protecting rights.

The data subject has the right to access, rectify, erase or restrict processing of his or her personal data.

Furthermore, he or she has the right to object to processing and the right to data portability.

The data subject also has the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection.

The operator has taken technical and organizational measures to protect personal data, in particular against unauthorized access, loss or misuse.

The operator may use automated tools to evaluate user behavior, for example within the framework of a reputation system.

These decisions do not have legal effects on the user, unless otherwise stated.

This document may be updated. The current version is always available on the platform.