Page number 2
- AGRO LEASING J.Hradec s.r.o. - Benefi a.s. - BNP Paribas Personal Finance SA, od š t ě pn ý závod - Caterpillar Financial Services Č R, s.r.o. - COFIDIS s.r.o. - CONSUMER FINANCE HOLDING Č ESKÁ REPUBLIKA, a.s. - Creamfinance Czech, s.r.o. - Credium, a.s. - Č SOB Leasing, a.s. - D.S. Leasing, a.s. - Erste Leasing, a.s. - ESSOX s.r.o. - Factoring Č eské spo ř itelny, a.s. (Erste Factoring) - Home Credit a.s. - IKB Leasing Č R, s.r.o. - IMPULS-Leasing-AUSTRIA s.r.o. - LeasePlan Č eská republika, s.r.o. - Mercedes-Benz Financial Services Č eská republika, s.r.o. - MONETA Auto, s.r.o. - MONETA Leasing, s.r.o. - PACCAR Financial CZ s.r.o. - PROFI CREDIT Czech, a.s. - Provident Financial s.r.o. - PSA FINANCE Č ESKÁ REPUBLIKA, s.r.o. - P&P Loan s.r.o. - Raiffeisen – Leasing, s.r.o. - RCI Financial Services, s.r.o. - Rerum Finance s.r.o. - s Autoleasing, a.s. - SG Equipment Finance Czech Republic s.r.o. - Š koFIN s.r.o. - Toyota Financial Services Czech s.r.o. - UniCredit Fleet Management, s.r.o. - UniCredit Leasing CZ, a.s. - UNILEASING a.s. - VFS Financial Services Czech Republic s.r.o. - Zonky s.r.o. The up-to-date list of NBCIR users is available on the information lines and web pages of individual NBCIR users and the NBCIR operator. CIBR Users The users of the CIBR are individual banks that have concluded the Agreement on Participation in the CIBR Project with CBCB. As of 1 July 2016, the following companies are the users of the CIBR: - Air Bank a. s. - Citibank Europe plc, organiza č ní slo ž ka - Č eská spo ř itelna, a.s. - Č eskomoravská stavební spo ř itelna, a.s. - Č eskoslovenská obchodní banka, a.s. - Equa bank a.s. - ERB bank, a.s. - Expobank CZ a.s. - Fio banka, a.s. - Hypote č ní banka, a.s. - Komer č ní banka, a.s. - mBank S.A., organiza č ní slo ž ka - Modrá pyramida stavební spo ř itelna, a.s. - MONETA Money Bank, a.s. - Oberbank AG pobo č ka Č eská republika - Raiffeisen stavební spo ř itelna a.s. - Raiffeisenbank a.s. - Sberbank CZ, a.s. - Stavební spo ř itelna Č eské spo ř itelny, a.s. - UniCredit Bank Czech Republic and Slovakia, a.s. - V š eobecná úverová banka a.s., pobo č ka Praha - Waldviertler Sparkasse Bank AG - Wüstenrot hypote č ní banka, a.s. - Wüstenrot-stavební spo ř itelna a.s. - ZUNO BANK AG, organiza č ní slo ž ka The up-to-date list of CIBR users is available on the information lines and web pages of individual CIBR users and the CIBR operator. CRIF S.p.A. Another party participating in the data processing in the NBCIR and CIBR is CRIF S.p.A., established in accordance with the law of the Italian Republic, with its registered office at Via M. Fantin 1-3, 40131 Bologna, Italian Republic (hereinafter the " CRIF "), which is in charge, under applicable contractual documentation, of automated technical processing of client information provided to CBCB by banks and to CNCB by creditor entities. CRIF provides this automated processing to CBCB in the case of CIBR and to CNCB in the case of NBCIR. We would like to emphasize again in this regard that although CRIF is the party in charge of final technical processing of client information (data) for both CNCB and CBCB, the CIBR database and the NBCIR database are two independently existing databases and remain independent even within the framework of the information (data) exchange between banks and creditor entities. CRIF – Czech Credit Bureau, a.s. CRIF – Czech Credit Bureau, a.s., Identification No. (I Č O): 262 12 242, having its registered office in Na Vít ě zné pláni 1719/4, Nusle, 140 00 Prague 4, entered in the Commercial Register administered by the Municipal Court in Prague, Section B, Entry 6853 (hereinafter the " CRIF CZ ") provides, under relevant agreements, services to CBCB in the case of CIBR and to CNCB in the case of the NBCIR connected with mutual information exchange regarding the payment prospects, credibility (and payment discipline) of their clients. CRIF CZ does not have access to information (data) on clients of creditor entities or banks. NBCIR and Its Content NBCIR is a database containing data on contractual relations between creditor entities and their clients. NBCIR is created on the basis of information (data) that creditor entities provide to CNCB and which separately or as a whole indicate the payment prospects, credibility and payment discipline of clients of creditor entities. 2
Page number 3
The following personal data on clients are processed in the NBCIR: - identification data on the client (such as the name, last name, last name given at birth, date of birth, place and country of birth and residential address of the client); - client’s birth registration number (see the Birth Registration Number chapter below); - personal data showing whether the client (or the applicant – in the case of a guarantor) and the creditor entities have entered into any contractual relationship or not; - personal data showing client’s financial obligations that have, will or may come into existence vis-à-vis the creditor entity in connection with the contractual relationship and on performance of these obligations by the client; - personal data showing security over the client’s obligations connected with the contractual relationship with the creditor entities; - personal data showing whether the receivable, which arose from the contractual relationship between the client and the creditor entities, was already assigned and following client´s performance of client´s obligations in relation to the respective assigned receivable; all this only if the creditor entities continues to administer the respective assigned receivable henceforth and with fulfilment of all others contractual terms; - any other personal data indicating the payment prospects, credibility (or payment discipline) of the client and made available by the client to the creditor entities or data acquired by the creditor entities in connection with performance or, as the case may be, a failure to fulfil any particular contractual relationship with the creditor entities. In case of natural person clients, the processing (in particular initial and ongoing entry or updating) of information (data) in the NBCIR is conditional upon provision of consent to data processing. Dealing with information (data) in the NBCIR (without making it available to the CIBR users) shall be subject to the following rules that do not apply to the mutual information (data) exchange between the banks and the creditor entities. Information (data) is entered and subsequently processed in the NBCIR in the extent in which it can serve for assessing the payment prospects, credibility and payment discipline of a client and in which the client provided to the creditor entity it in connection with a contractual relation or which may result from a contractual relation for the period of duration of such relation (see the list of personal data processed in the NBCIR above). The contents of the NBCIR thus include in particular basic identification data on clients, data on clients’ liabilities, on timeliness of performance thereof, on security over such liabilities, etc. (see the list of personal data to be processed in the NBCIR). In the NBCIR, sensitive personal data on clients (e.g. data regarding health status, etc.), who are natural persons, in the sense of Processing (in particular initial and ongoing entry or updating) of information (data) in the NBCIR shall not be processed, according to the applicable provisions of the Act No. 101/2000 Coll., on the protection of personal data and amending some acts, as amended (hereinafter the “ Personal Data Protection Act ”). Information (data) contained in the NBCIR shall be regularly once in a month updated and maintained for the needs of mutual information exchange between creditor entities throughout the duration of the contractual relation between a creditor entity and its client (including situation when the creditor entity exercises administration of the respective assigned receivable – see above mentioned specification of personal data which are processed in the NBCIR) and for a period of another four (4) years following the fulfilment of all the financial obligations of the client under the client agreement. If the requested agreement was not concluded with the client, information (data) is kept in the NBCIR for a period of six (6) months from the date of filing a client’s (or user’s) request for conclusion of the relevant agreement (including an agreement relating to assignment of factored debts of an assigned debtor). Upon expiration of the relevant period of time, such information (data) shall be blocked (which means that it shall be in an inaccessible form and it shall not be possible to process it) and shall no longer be provided in any manner for the purposes of mutual information exchange between creditor entities; following the five-year blocking period the information (data) shall be automatically liquidated. Information (data) on contractual relations with clients are provided by creditor entities to CNCB, which processes such data in the NBCIR using the system for final automated technical data processing of the Italian company CRIF. In Italy, the information is finally technically processed in an automated manner, which is in compliance with Personal Data Protection Act, since in Italy the same rules apply to dealing with data (with personal data on clients – natural persons) as in the Czech Republic. CNCB makes the information (data) processed in this manner available in the form of credit reports to credit entities that use the services of the NBCIR on the basis of their requests, exclusively for the purpose of mutual information exchange between credit reports on the payment prospects, credibility and payment discipline of their clients. CNCB provides or may provide the creditor entities also with the score, which is the synthetic value predicating the information (data) evaluation about the client, included always in relevant credit report, which the creditor entities use for evaluation of payment prospects, credibility and payment discipline of their clients; the score is provided within the scope of credit reports. In accordance with the relevant provisions of the Personal Data Protection Act, personal data on natural person clients can be processed for the purposes of mutual information 3
