Privacy Policy
This document explains what personal data is processed on janrezanka.cz, why, for how long, and what rights you have.
The Czech version is the authoritative one; this is a translation for convenience.
1. Who the controller is
The data controller is Broker Trust, a.s., Company ID 26439719.
Jan Řezanka, Company ID 03101941, acts as a tied agent and subordinate insurance intermediary under Broker Trust, a.s. (insurance agent no. 032585PA), registered with the Czech National Bank.
Contact for data protection matters: j.rezanka@fair-life.cz.
2. What data is processed
From the contact form: name, email, phone, the area you selected and your message.
From the questionnaires (mortgage, life insurance, motor insurance, property insurance, EnergoLead): whatever you enter in that particular questionnaire — typically identification and contact details, income, liabilities and assets, and details of a property or vehicle.
The life-insurance questionnaire also collects health data (diagnoses, medication, past surgery, height and weight, high-risk sports). This is a special category of personal data under Article 9 GDPR.
Uploaded documents: tax returns, financial statements, bank statements and any other attachments you add yourself.
Technical data: IP address and browser information, kept for security and to protect the forms from abuse.
3. Why it is processed
To contact you, prepare an offer, and arrange the financial, credit or insurance product you are interested in.
The legal bases are performance of a contract and steps taken before entering into one, legitimate interest in handling your enquiry, and the intermediary’s statutory obligations.
For health data in the life-insurance questionnaire we follow the rules of the insurers the intermediation is carried out for; by submitting the questionnaire you consent to that data being processed for the purpose of arranging insurance.
4. How long it is kept
Submitted questionnaires, contact-form enquiries and uploaded documents are kept for 12 months from submission, then automatically and irreversibly deleted, attachments included.
Longer retention applies only where the law requires it — for example where business was actually concluded.
5. Who it is shared with
Banks, insurers and investment companies whose product is being arranged for you, to the extent necessary for that offer.
And with processors who run the website for us:
Vercel Inc. — website hosting and traffic measurement
Supabase — database and document storage, EU region (Frankfurt)
Resend — transactional email
The database and document storage are operated within the European Union. Personal data is never sold, and never passed on for third-party marketing.
6. Cookies and traffic measurement
The site uses no advertising or tracking cookies, and therefore needs no cookie consent.
Traffic is measured with Vercel Web Analytics, which stores no cookie and no identifier in your browser. It collects only aggregate information about pages visited and where visits came from.
Strictly necessary cookies are used only in the administration area, to keep its users signed in.
7. Your rights
You have the right of access to your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest.
Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect processing carried out beforehand.
Requests can be sent to j.rezanka@fair-life.cz.
You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
8. Security
Uploaded documents are held in private storage and served only through short-lived signed links.
The administration area requires a username and password, every person has their own account, and every access to a submitted questionnaire is logged.
Notification emails about a new questionnaire contain only a link into the administration area, never the answers themselves.
9. Changes
This document may be updated if the scope of processing changes. The date of the last update is shown above.