Confidențialitate

Purposes and scope of processing

• Operating the website and the indicative mortgage check (questionnaire answers used only for the immediate AI-style evaluation and to identify the most suitable licensed mortgage broker for your case — e.g. language, financing goal, or non-standard situations; not stored as a long-term profile).
• Optional processing of contact details you voluntarily submit so a partner mortgage broker can contact you.
• Compliance with legal obligations applicable to the controller (accounting, tax, responses to regulators or courts where relevant).

Legal bases (GDPR)

Depending on the situation, we rely on: performance of a contract or pre-contractual steps at your request (Article 6(1)(b) GDPR); compliance with a legal obligation (Article 6(1)(c)); legitimate interests such as fraud prevention, IT security, or improving the service, where not overridden by your interests (Article 6(1)(f)); and consent where required, e.g. for non-essential cookies or certain marketing analytics (Article 6(1)(a)).

Retention

Data are kept only as long as necessary for the given purpose. Indicative questionnaire data used solely for the live calculation and broker matching are not kept as a permanent customer dossier after the session ends. Contact details provided for broker handoff are kept for the period necessary to respond and to document the relationship, in line with internal policies and law. Technical logs may be kept for a limited security window.

Recipients and processors

Personal data may be disclosed to: partner mortgage brokers where you request contact; IT and hosting providers that process data on documented instructions (processors); and authorities where the law requires it. We do not sell your personal data.

Transfers outside the EEA

If tools with a non-EEA component are used (e.g. certain cloud or analytics providers), transfers take place on the basis of appropriate safeguards under GDPR (such as Standard Contractual Clauses) and provider documentation. You may request more detail via hello@hypo.online.

Your rights

Under the GDPR and, where applicable, Czech Act No. 110/2019 Coll. (personal data processing), you may request: access to your data; rectification of inaccurate data; erasure (“right to be forgotten”) where conditions are met; restriction of processing; data portability where processing is based on consent or contract and automated; objection to processing based on legitimate interests; and withdrawal of consent where processing is consent-based (without affecting prior lawful processing).

Where the service offers a self-service deletion action after you submit a lead, you can use that flow in addition to emailing hello@hypo.online.

Cookies and similar technologies

Essential cookies may be used to run the site. Optional analytics or marketing cookies are used only with your consent via the cookie banner or settings where available. You can change browser settings to block cookies, which may limit some features.

Right to lodge a complaint

If you believe processing infringes the law, you may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.