MoneySky

Privacy Policy for moneysky.app

Last updated: 03.07.2024

Privacy Policy

Before using MoneySky.app, you are required to acquaint yourself with the Terms of Use ("Terms") and this Privacy Policy ("Policy") regulating the collection, processing, and use of your Personal Data. The Policy forms an integral part of the Terms, and all definitions and names shall have the respective meaning defined therein. You agree to provide NewTech Builders s.r.o. ("Provider") with accurate, truthful, and current Personal Data and keep it up to date.

Service Provision

You acknowledge that NewTech Builders s.r.o., with its registered office at Příčná 1892/4, Nové Město (Praha 1), 110 00 Praha ("Provider"), may, as a data controller, process your Personal Data in the scope specified hereunder as necessary for the performance of a contract arising out of these Terms (legal basis: Article 6(1)(b) GDPR). The purpose of this Personal Data processing is service provision, which includes setting up and maintaining your MoneySky account, ensuring MoneySky features, and providing support. The minimum scope of your Personal Data required includes your first name, last name, e-mail address, login credentials, language, currency, and subscription details. The provision of other Personal Data is voluntary and depends on the MoneySky features you want to use.

The Provider is obliged to process your Personal Data to identify you in accordance with applicable laws on anti-money laundering (legal basis: Article 6(1)(c) GDPR). The scope of the collected data includes your first name, last name, sex, birth number or date of birth, place of birth, permanent address, and citizenship. The purpose of this Personal Data processing is to comply with legal obligations. Data on potentially suspicious transactions are stored for 10 years, even after deleting your MoneySky account.

When using the financial tracking and budgeting feature of MoneySky, the Provider will process your personal financial information (such as incomes, expenses, budgets, etc.) based on your input. If you use the payment account synchronization feature, the Provider will process credentials to access the payment account, transaction details, and payment account details.

For a more personalized experience and better financial advice, you can fill out additional details in your MoneySky account, including profile photo, property details and economic situation.

The Provider may use profiling to analyze or predict aspects concerning your property details and economic situation to deliver the best personalized experience. This profiling does not result in any automated decision-making that would produce legal effects or have similarly significant consequences.

Sending Marketing Communications

You acknowledge that the Provider may use your e-mail address and details obtained during registration to send you direct marketing communications regarding MoneySky (legal basis: Article 6(1)(f) GDPR, legitimate interest in marketing own services). Your e-mail may be used for marketing until you opt out. You can opt out at any time by clicking the "unsubscribe" link in the respective e-mail.

Marketing

You can give the Provider consent to process your Personal Data for marketing purposes, including creating audiences and personalizing your ad experience (legal basis: Article 6(1)(a) GDPR). The Personal Data will be processed for marketing purposes until you withdraw your consent, which you can do at any time within the MoneySky application. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

As part of Personal Data processing for marketing purposes, the Provider may use profiling to analyze or predict aspects concerning your property details and economic situation to deliver the best ad experience. This profiling does not result in any automated decision-making that would produce legal effects or have similarly significant consequences.

Service Improvement and Development

You acknowledge that the Provider may process your Personal Data for legitimate interests in improving and developing MoneySky (legal basis: Article 6(1)(f) GDPR). Where possible, the Provider will use anonymized data. The Personal Data will be processed for the purposes of service improvement and development until you or the Provider terminate the Agreement.

As part of Personal Data processing for service improvement and development, the Provider may use profiling to analyze or predict aspects concerning your property details and economic situation to develop new features and test them. This profiling does not result in any automated decision-making that would produce legal effects or have similarly significant consequences.

Recipients and Transfers to Third Countries

The Provider may appoint third parties (data processors) to perform some of the Personal Data processing operations for the specified purposes, based on written agreements and under statutory conditions. The Provider does not transfer or disclose your Personal Data to any third parties unless you have consented otherwise or except as required by applicable laws.

Data processors used by the Provider include:

  • Google Commerce Limited, 70 Sir John Rogerson's Quay, 2 Dublin, Ireland
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • GoCardless Ltd., Sutton Yard, 65 Goswell Road, London, EC1V 7EN, United Kingdom
  • Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA

Transfers of Personal Data to the USA are carried out based on the EU-US Data Privacy Framework, where applicable, and appropriate safeguards in the form of standard data protection contractual clauses approved by the European Commission. A copy of your Personal Data can be obtained from the data processors through the Provider.

Your Rights

Under the GDPR, you have the following rights regarding your Personal Data:

  • Right of access (Article 15 GDPR). You have the right to obtain confirmation as to whether your Personal Data is being processed and, if so, to access that data along with information about the processing.
  • Right to rectification (Article 16 GDPR). You have the right to have inaccurate Personal Data corrected and incomplete Personal Data completed.
  • Right to erasure (Article 17 GDPR). You have the right to request the deletion of your Personal Data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the data has been unlawfully processed.
  • Right to restriction of processing (Article 18 GDPR). You have the right to request restriction of processing where you contest the accuracy of the data, the processing is unlawful, or the Provider no longer needs the data but you require it for legal claims.
  • Right to data portability (Article 20 GDPR). You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller. Where technically feasible, you have the right to have your Personal Data transmitted directly from the Provider to another controller. The export feature of MoneySky allows you to receive your personal financial information at any time.
  • Right to object (Article 21 GDPR). You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests, including profiling. You also have the right to object to processing for direct marketing purposes. If you object, the Provider will no longer process your Personal Data for the respective purposes.
  • Right to withdraw consent (Article 7(3) GDPR). Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you find or presume that the Provider or any data processor is processing your Personal Data in contradiction with the protection of your private and personal life or the law, you are entitled to contact them with a complaint and ask for an explanation or require them to remedy the situation.

You can also lodge a complaint with the Office for Personal Data Protection of the Czech Republic (www.uoou.cz).

Payment Information and Online Banking Credentials

When you make purchases through MoneySky, your credit card information and other data are collected and stored by third-party payment processors. If you use the payment account synchronization feature, your online banking credentials are used only upon manual entry and are not stored by the Provider or GoCardless unless you choose to have them stored.

Technical Data

The Provider may collect and use technical data about your mobile device, system, Internet connection, or your use of MoneySky. The purpose is to ensure quality, increase comfort, and further analyze and develop MoneySky. Technical data is anonymous and stored separately from Personal Data.

Cookies

MoneySky uses cookies and similar technologies. Cookies are categorized as follows:

  • Strictly necessary cookies. Required for the operation of MoneySky, such as session management and security. These cookies cannot be disabled.
  • Analytics cookies. Used to understand how visitors interact with MoneySky, helping us improve functionality and user experience.
  • Marketing cookies. Used to deliver relevant advertisements and measure the effectiveness of advertising campaigns.

You can manage your cookie preferences through the cookie consent banner displayed when you first visit MoneySky. You can also block or delete cookies by changing your browser or device settings, but disabling strictly necessary cookies may affect functionality.

Data Retention

The Provider retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected:

  • Account data (name, e-mail, login credentials). Retained for the duration of your account and deleted within 30 days of account deletion, unless longer retention is required by law.
  • Financial data (transactions, budgets, connected accounts). Retained for the duration of your account and deleted within 30 days of account deletion.
  • Anti-money laundering data. Retained for 10 years after the termination of the Agreement, as required by applicable law.
  • Marketing data. Retained until you withdraw your consent or opt out, or until the termination of the Agreement, whichever comes first.
  • Technical and analytics data. Retained in anonymized form for up to 26 months.

Data Security

Your Personal Data is stored and processed on secure servers with firewall protection and physical security measures. The Provider's primary database servers are located within the European Union (Belgium). Certain data processors located in the USA may process Personal Data as described in the "Recipients and Transfers to Third Countries" section above. Personal Data is transferred using secure SSL/TLS connections. Despite standard security measures, the security of your Personal Data cannot be 100% guaranteed.

Contact Information

If you have any queries regarding the protection and security of your data, please contact the Provider at [email protected] or at the following postal address: Příčná 1892/4, Nové Město (Praha 1), 110 00 Praha.