Privacy Policy
Data Privacy Terms for Lidya
Lidya Poland sp. z o.o. with its registered office in Warszawa, address: 13-Krakowskie-Przedmieście, 00-071 Warszawa, Polska, entered into the register of entrepreneurs of the National Court Register kept by the District Court for the Capital Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS no. 0000834880, NIP: 5252819162, takes all necessary steps to ensure that your Personal data is safe and to prevent misuse of your Personal data. Detailed information on how we do it, as well as why and how we collect, store and use your Personal data, could be found below.
Data Privacy Terms covers your use of https://www.lidya.info/pl/pl/home/ (“Website”).
Data Privacy Terms do not apply to any products, services, websites, or content that are offered by third parties or have their own privacy notice.
I. Definitions
Controller – the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of Personal data.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Personal data – any information relating to an identified natural person or a natural person that is identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including IP address, location data and Internet identifier.
Privacy Terms – those Data Privacy Terms.
Services – any services provided by Lidya through the Website, including granting a loan.
Website – https://www.lidya.info/pl/pl/home/
II. Processing your Personal data – general rules
If you use our Website, we collect and process your Personal data as a Controller:
To communicate with you. We use the information that you provide us through signing up with the Lidya platform to share more information about our services and send you a newsletter. Additionally, if you have applied for a job with Lidya in Poland, we will process your information to review your application. - the legal basis for this purpose is taking steps at your request prior to entering into a contract, performance of our contract with you, our justified interest or your consent;
To provide, personalize and improve our Products. We use the information that you provide us to grant you a loan, to manage your user account, personalize ads, and to provide personalized ads, offers and other sponsored content for your benefit - the legal basis for this purpose is performance of our contract with you and our justified interest in conducting marketing activities;
To promote safety, integrity and security. We use the information we have to verify accounts and activity, combat harmful conduct, detect and prevent spam and other bad experiences, maintain the integrity of our products and services, and promote safety and security on and off of the Lidya platform. For example, we may establish and enforce claims or defend against them to prevent fraud or violations of our terms or policies – the legal basis for this purpose is our legitimate interest to protect our rights and necessity to comply with our legal obligation .
To comply with other of our legal obligations. In particular, in order to comply with our obligations that sterns from regulations regarding anti-money laundering and counteracting terrorist financing as well as regulations on accounting;
III. Data that we collect about you
We collect the following data about you:
Information and content you provide. We collect contact details that you provide through our website, such as your full name, email and phone number. If you apply for a job through Lidya, we collect your full name, date of birth, contact details, and any information that you have included on your CV, such as country where you were studying and university that you attended.
Platform credentials. To ensure your security and provide account management, we collect your log in and password.
Business Information. If you get a loan from Lidya, we will collect your full name; citizenship; date of birth; contact details (e-mail address & telephone number), passport, driver’s license and/or PESEL details; utility, phone, or gas bill, bank account information; series and number of a document evidencing your identity, and financial data from your bank statements, information about you from CRIF and BIK.
IV. Technologies that we use
We place the following icons that enables you to visit our profiles in different social media channels:
Twitter;
Instagram;
LinkedIn;
Facebook.
Please note that the social media channels could collect your personal data both if you enter a particular social media channel and even before that, when you enter our Website. Please read more about it on the following websites: https://twitter.com/en/privacy, https://help.instagram.com/519522125107875, https://www.linkedin.com/legal/privacy-policy, https://www.facebook.com/about/privacy.
V. Term of Personal data processing
Personal data processing time by Lidya depends on the purpose for which we process your Personal data. As a rule, Personal data is processed for the time of provision of our services to you.
We process your personal data that we collected about you when you applied for a job in Lidya only for the time necessary to process your application. If you agreed to process your data for the purposes of future applications, we process your data for 2 years after you have sent those Personal data to us.
Term of Personal data processing may be also extended if the processing is necessary to establish any claims or defend against them (in principle, we will process those data for 3 years), and after that time only if, and to the extent required by law (tax and accountancy rules in particular). After the processing period has expired, Personal data is irreversibly deleted or anonymized.
VI. Your rights related to your Personal data 1. You have the following rights:
right to access information about processing of Personal data – on this basis, we provide the person making such a request with information about the processing of her Personal data, in particular about the purposes and legal grounds for the processing, the scope of Personal data possessed, entities to which Personal data are disclosed and the planned date of Personal data removal;
right to obtain a copy of data – on this basis, we provide you with a copy of Personal data being processed that relates to the person making the request;
right to rectify data – on this basis, we remove any non-conformities or errors regarding the Personal data being processed, and supplements or updates the Personal data if it is incomplete or has changed;
right to delete data – on this basis, you can request deletion of your Personal data, the processing of which is no longer necessary for any of the purposes for which it was collected;
right to limit processing – on this basis, we cease to carry out operations on Personal data, with the exception of operations for which you consented, and ceases to store them in accordance with accepted retention rules (i.e. data retention);
right to transfer data – on this basis, to the extent that the Personal data is processed in connection with the concluded contract between you and us, we transfer Personal data provided by you in a format that allows reading of these data by computer. It is also possible to request that Personal data is sent to another entity - provided, however, that there are technical possibilities in this respect both on the part of Lidya and that other entity;
right to object to the processing of Personal data for marketing purposes – you may at any time object to the processing of your Personal data for marketing purposes, without the need to justify such objection;
right to object to other purposes of processing – you may at any time object to the processing of Personal data based on the justified interest of Lidya; such objection should include justification and is subject to the Lidya’s assessment;
right to withdraw consent – if your Personal data is processed on the basis of your consent, you have the right to withdraw it at any time, but this does not affect the lawfulness of the processing carried out prior to the withdrawal of the consent;
right to file a complaint – if it is deemed that processing of Personal data violates GDPR or other provisions on the protection of personal data, you may file a complaint to our principal supervisory authority, the President of the Office for the Protection of Personal Data in Poland https://uodo.gov.pl/, or with a local authority in other EU countries, as provided by GDPR.
In case you wish to exercise any of the aforementioned rights, you can contact us:
in writing by sending a letter to the following address:
Lidya sp. z o.o. ul. 13 Krakowskie Przedmieście, 00-071 Warszawa, Polska, Warsaw;
by sending an e-mail to the following address: dpo@lidya.info.
In your request you should, if possible, precisely indicate in particular:
which right of those mentioned in paragraph VI.1. of the Privacy Terms you want to exercise;
to what type of processing operation the request refers to (e.g. using a specific feature of the Website);
what type of purpose, for which the processing is carried out, your request refers to (e.g. analytical purposes).
If the submitted request is formulated in such a way that it is not possible to determine its content or for other reasons it is not possible to respond to it, we will ask you for additional information.
Lidya’s response to your request will be given without unnecessary delay.
Response to the request will be provided to an e-mail address from which it was sent, and in the case of requests submitted to the address of the office given in point. VI.2. (a) by regular mail - to the address provided by in such request, unless in the request you indicated that you want to receive a response to your e-mail address (provided such e-mail address is indicated in the request).
VII. Disclosure of Personal data
To support the rendering of our Services, we may use multiple resources in various countries, also provided by subcontractors. For this reasons, subject to paragraph VII., Lidya may disclose your Personal data to other countries and our trusted subcontractors that are the following:
Lidya Portugal and Lidya US – IT activities of Lidya are outsourced to this entity;
an entity that manages our e-mail campaigns,
an entity that provides us with our email boxes,
an entity that provides us with cloud services,
entities that verify financial information about you before granting you a loan by Lidya,
entities that process payments and enable you to repay your loan,
an entity that verifies your bank statements before granting you a loan,
entities that we use to recover our debts,
an entity that we use to conclude a loan agreement with you.
If we obtain your consent to this end, we could make your Personal data available also to other entities for their own purposes.
If required by law, the Lidya will disclose Personal data to other entities, mainly public, including in response to a court order, subpoena or other request or legal inquiry carried out in the exercise of public authority and only if a relevant request is based on an appropriate legal basis
Apart from the situations described above, we do not sell or transfer Personal data to any third parties.
VIII. Data transfers
We inform you that we will transfer your Personal data outside of the EEA.
In any case, we transfer Personal Data outside the EEA only when necessary, while ensuring an adequate level of protection, primarily through:
cooperation with entities processing Personal Data in countries in relation to which an appropriate decision of the European Commission has been issued;
the use of standard contractual clauses issued by the European Commission;
applying binding corporate rules approved by the competent supervisory authority;
in case of transferring data to the USA - cooperation with entities participating in the Privacy Shield program, approved by the decision of the European Commission.
IX. How we ensure your Personal data is secured
We conduct risk analysis on an on-going basis to ensure that Personal data is processed in a secure manner – ensuring, first of all, that only authorized persons have access to Personal data and only to the extent necessary for the tasks performed. Lidya makes sure that all operations on Personal data are registered and made only by authorized employees and associates.
We will take all necessary measures to ensure that our subcontractors and other entities cooperating with us guarantee that appropriate security measures are applied whenever they process Personal data on our behalf.
X. Changes and updates to this Privacy Terms
This Privacy Terms may be updated. In such case, the date of entry into force, which is provided below, will be changed. Any previous versions of the Privacy Policy will be available upon request.