Your personal data will be processed for the following purposes:

1. to conclude and perform the employee loan agreement – pursuant to Article 6(1)(b) GDPR;
2. to comply with legal obligations related to the settlement and documentation of the granted loan – pursuant to Article 6(1)(c) GDPR.

Your personal data may be shared with: entities authorized under applicable laws, entities processing data on behalf of the controller to support its day-to-day business operations (subcontractors, suppliers, including providers of external systems). Such entities process personal data on the basis of a contract with the controller and only under the controller’s instructions.

Your personal data will not be transferred outside the EEA.

Your personal data will be retained for the duration of the loan agreement and subsequently for the archiving period required by applicable law.

In relation to the processing of your personal data, you have the right to:

1. access your personal data and request rectification;
2. request the erasure of your data, under the conditions provided in Article 17 GDPR;
3. request restriction of processing, under the conditions provided in Article 18 GDPR;

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Providing your personal data is voluntary, but necessary in order to conclude the loan agreement.

We do not make any decisions that significantly affect you through automated means, including profiling.