Legal information
Company and privacy
Who operates Malnus and how this internal finance service handles personal data.
Company
- Legal name
- Malnus
- IČO
- Not configured
- DIČ
- Not configured
- Register entry
- Not configured
- Registered office
- Not configured
- Privacy contact
- Not configured
Privacy notice
Controller. Malnus is the controller of personal data processed in this application.
Data we use
- Account details, contact information and multi-factor authentication status.
- Contractor, company, IČO, DIČ, project, rate and invoice details.
- Work entries, descriptions, time ranges, expenses, approvals and payment status.
- Bank accounts, transfers, movements, budgets, reconciliations and related records.
- Session and security information needed to protect access.
Why we use it
- Provide the service and manage accounts and permissions.
- Record work, prepare invoices, approve payments and manage budgets.
- Meet accounting, tax, contractual, funding and audit obligations.
- Prevent misuse, investigate incidents and keep the service secure.
Legal basis
Processing is based on performing contracts, complying with legal obligations and pursuing legitimate interests in operating, securing and auditing the business. Where consent is required, it is requested separately.
Sharing and international transfers
Data is shared only with hosting, email, accounting and technical providers when their work requires it, and with advisers, funders, auditors or public authorities where law or an applicable agreement requires it. Malnus does not sell personal data or use it for advertising. If a provider processes data outside the European Economic Area, Malnus uses the safeguards required by applicable data protection law.
Retention
Accounting, tax and funding records are retained for the periods required by law or the relevant agreement. Other records are kept only while needed for the contract, an audit, security or a legal claim. A legal hold suspends deletion of affected records.
Your rights
Subject to the conditions and exceptions in applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Use the privacy contact below. You may also complain to the Czech Office for Personal Data Protection.
Cookies and browser storage
Necessary session cookies keep you signed in securely. The browser stores the selected colour theme and last custom date range for up to 180 days. The application does not use advertising or analytics storage.
Security
Malnus uses multi-factor authentication, role-based access, encrypted connections and operational safeguards designed to protect the data. Access is limited to people and providers who need it for their work.