EN

Privacy Policy

Information on the processing of personal data

The purpose of this document is to provide visitors to the website, potential Clients and Clients (hereinafter referred to as the "Client") of the Administrator PRESTON Capital a.s., ID No. 095 14 287, with its registered office at Nad Rokoskou 2361/2A, 182 00 Prague (hereinafter referred to as the "Administrator"), in particular about what personal data the Administrator processes, how and for what purpose it handles them, or what the Client's rights are in relation to the processed personal data. When processing personal data, the Administrator acts as a personal data Administrator.

Processing of personal data

The processing of personal data generally means the systematic handling of personal data, in particular the collection of data, the recording and storage of such data on data carriers, their adaptation or alteration, retrieval, consultation, use, transmission, dissemination or any other disclosure, sorting or combination, blocking, restriction, erasure or destruction of personal data.In order to provide services to its Clients, the

Administrator is obliged to process their personal data. The processing of Clients' personal data is necessary for the conclusion of a contractual relationship, or for negotiations on its conclusion, for the performance of contractual obligations, as well as for the purposes of unambiguous identification of a specific Client.

The Administrator processes the personal data of its Clients both manually and in the electronic information system. Personal data is thus under constant physical, technical and electronic control. The Administrator's security mechanisms are set up to ensure the maximum possible protection of all data and personal data processed by the Administrator in such a way as to prevent, in particular, their misuse, damage, loss or destruction. Only authorized employees of the Administrator, who are bound by confidentiality, have access to the processed personal data of the Clients.

In specified cases, the Administrator shall notify the Client of the fact that there is a risk of a personal data breach that will result in a high risk to the Client's rights and freedoms.

Legal grounds for personal data processing

The Administrator processes the personal data of its Clients with their consent. Without their consent, the Administrator processes personal data only in cases stipulated by law, on the basis of the Administrator's legal obligation, for the purpose of fulfilling obligations arising from the contractual relationship with the Client, for the reason of the Administrator's legitimate interests or for another legitimate purpose of processing.

Processing of personal data with the Client's consent

Providing the Client's consent to the processing of his/her personal data is entirely voluntary. The Client may give consent to the Administrator to process his/her personal data for the purposes specified directly in the consent.

Processing of personal data without the Client's consent

As part of the provision of its services, the Administrator is obliged (when concluding and lasting a contractual relationship) to ascertain and process personal data about its Clients stipulated by law. The Administrator is not obliged to obtain the consent of Clients for the processing of personal data for the purpose of providing services. If the Client refuses to provide the Administrator with his/her personal data, he/she cannot be provided with the Controller's services in accordance with the requirements of legal regulations.

The Administrator is entitled to process the personal data of its Clients even without their consent, in particular for the purposes of:

  • fulfilment of the Administrator's obligations arising from legal regulations,
  • fulfilment of obligations arising from the contract concluded with the Client,
  • legitimate interests of the Administrator,
  • protection of the rights and legally protected interests of the Administrator.

Processed personal data

The Administrator processes the following data about its Clients, which serve in particular for the purpose of contacting a potential Client, his/her identification and for further communication when concluding a contractual relationship with the Administrator, i.e.:

  • basic identification data, in particular name, surname, date of birth, birth number, company name, identification number
  • contact details, in particular telephone, e-mail, postal address, home address, registered office address

For the purposes of providing services, the Administrator also stores and processes other data to the extent necessary for the provision of services, the performance of a contract and the fulfilment of legal obligations.

The above-mentioned personal data of the Clients are used for the above-mentioned purposes or for the purposes within the framework of the consent granted by the Client.

Sources of personal data

The Administrator processes only the personal data of the Clients that they provide to the Administrator during the negotiations on the conclusion of the contractual relationship and during its duration.

Time limits

The Controller will process the Client's personal data for the duration of the provision of services and the performance of the contract. Thereafter, the Controller is obliged to keep the personal data of Clients or potential Clients for the period stipulated by law. In the case of processing on the basis of consent, the Controller will process the data for the period for which the Client has given consent to the processing of the Client's personal data.

As soon as the deadlines for the processing of personal data have expired, all personal data of Clients or potential Clients are deleted from the Controller's systems.

Accessibility

Clients' personal data may be disclosed to third parties without their consent, in particular:

  • within the framework of fulfilling obligations stipulated by legal regulations,
  • other persons for the purpose of protecting the rights and legally protected interests of the Controller,
  • persons authorized by the Administrator to perform its contractual and legal obligations,
  • with the Client's consent, or on the basis of the Client's order to hand over to other entities.

Client's rights related to the processing of personal data

Right of access

The Client is entitled to request information on whether and what personal data the Administrator processes about him and access to such personal data, to the extent stipulated by legal regulations. The Administrator shall provide the Client with the necessary cooperation without undue delay after the Client's request has been made.

Right to rectification

The Client is also entitled to request an explanation from the Administrator if he/she believes that the Administrator or Processor processes e.g. inaccurate personal data about the Client.

In this context, the Client is also entitled to request correction/completion of his/her personal data.

Right to data portability

The Client has the right to obtain from the Administrator personal data concerning him in a structured, commonly used and machine-readable format, and the right to transmit such data to another Administrator (or to request that the Administrator transmit such data directly to another Administrator, if technically possible) without hindrance from the Administrator, in the event that the processing of his/her personal data by the Administrator is based on the Client's consent, on the contractual relationship with the Administrator or in the event that the processing is carried out by automated means.

Right to object

The Client is entitled to object to the processing of his/her personal data.

Following the objection, the Administrator undertakes to inform the Client of the reasons that authorize the Administrator to process the Client's personal data.

If the Client objects to the processing of their personal data for direct marketing purposes, their personal data will no longer be processed for these purposes.

Right to restriction of processing

The Client is entitled to request that the Administrator restrict the processing of his/her personal data if he/she contests the accuracy of the personal data, if the processing is unlawful and the Client refuses the erasure of the personal data, if the Administrator no longer needs the Client's personal data for the purposes of processing, but the Client requires them for the establishment, exercise or defense of legal claims, or if the Client has raised an objection against the processing of his/her personal data.

The restriction of the processing of personal data by Clients will last for the period stipulated by law. The Administrator shall notify the Client in advance of the fact that the restriction of processing will subsequently be lifted.

Revocation of consent to the processing of personal data

The Client is entitled to withdraw his/her consent to the processing of personal data at any time.

Upon withdrawal of consent, the Administrator shall cease to process the personal data of Clients for the purposes for which the consent was previously granted.

However, the Administrator is obliged to further process the Clients' personal data for the purpose of fulfilling the obligations imposed by legal regulations, such as Act No. 563/1991 Coll., on Accounting, etc., for the purpose of fulfilling obligations within the contractual relationship with the Client, as well as for the purpose of determining, exercising or defending any legal claims.

Clients' personal data will continue to be processed only for the above-mentioned reasons, for the period stipulated by law.

The withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing of such data that took place before the withdrawal of the previously granted consent.

With the exception of cases stipulated by legal regulations where the processing of personal data does not require the Client's consent (see Article 6 (1) of Regulation (EC) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data – GDPR), the Administrator processes Clients' personal data exclusively with their voluntary consent.

After the termination of all contractual relations with the Administrator, the Client is entitled to withdraw his/her consent to the processing of personal data and personal identification number for those purposes that do not follow from legal regulations.

If the Client withdraws his/her consent to the processing of his/her personal data, the Administrator shall continue to store only the Client's personal data that are necessary for the fulfilment of the Administrator's obligations arising from legal regulations.

Right to rasure

The Client is also entitled to request the liquidation of his/her personal data if he/she believes that the Administrator processes his/her personal data in violation of the protection of his/her private life or in violation of legal regulations.

The Client is also entitled to ask the Administrator to delete his/her personal data if they are no longer necessary for the purposes for which they were processed, if they were processed unlawfully, if the Client withdraws his/her previously granted consent and there is no other legal reason for their processing, and also if the Client raises objections to the processing of his/her personal data and there are no prevailing legitimate reasons for the processing.

Exercising the Client's rights

The Client may exercise his/her rights by contacting the Administrator via e-mail info@prestoncapital.cz or by sending a letter to the Administrator's registered office at Nad Rokoskou 2361/2A, 182 00 Prague.

The Client shall be informed by the Administrator about the settlement of his/her request without undue delay, except in cases where it proves impossible or requires disproportionate effort.

If the Client's requests are manifestly unfounded or unreasonable, in particular because they are repetitive, the Administrator may charge the Client a fee taking into account the administrative costs associated with providing the requested information or communication or taking the requested actions, or refuse to comply with the request.

The Client is also entitled to address his/her complaint to the supervisory authority in the area of personal data, which is the Office for Personal Data Protection, with its registered office at Pplk.