Processing and protection of personal data

    Processing and protection of personal data

    We would like to acquaint you with the principles of personal data processing of the company AKCENTA CZ a.s. (hereafter referred to as „AKCENTA“ or „we“) and as-sure you that we follow legal principles in ensuring the confidentiality and security of your personal information.

    The protection of privacy and the personal data of our clients is a priority for us. We hold the privacy of your personal information in the highest regard. We focus upon safety in its processing, careful selection of contractual partners and strict compli-ance with the rules.

    1. Contact Information Relating to the Protection of Personal Data

    Personal data controller:

    • Company name: AKCENTA CZ a.s.
    • ID No.: 25163680, Tax ID No.: CZ25163680
    • Registered office: Prague 1, Salvátorská 913/8, post code 110 00, Czech Republic

    Data protection officer:

    2. Scope of Personal Data Processing

    Your personal data and the processing of your personal information are handled in accordance with the instructions you gave when providing the data to us; generally in connection with a contractual relationship with our company. Data gleaned dif-ferently, (i.e., from public records or from third parties an authority or other body) is handled in a manner compliant with valid and effective regulations on the pro-cessing of such data. Depending on the situation, these may be:

    • identification data (e.g., name, surname, ID number, date and place of birth, position, identity card number, by whom and when the card was issued,
    • card validity, gender, place of birth, nationality, whether the person is politically exposed, tax residence and tax ID),
    • address / contact details (e.g., address of permanent residence, telephone number, mobile phone number, e-mail),
    • data on the services used (e.g., bank account numbers, internal payment account balances, transaction data, telephone call records, other communication records), or
    • other data (e.g., information of a commercial and marketing nature).

    These principles of personal data processing are intended for natural persons who-se personal data we process (so-called data subjects). These may be:

    • clients and potential clients of our organization
    • website visitors and users of other communication channels
    • other entities in whose personal data we have a legitimate interest in processing.

    In principle, the following applies: if we require your personal data, you are obliged to provide it to us; failure to provide data would lead to the impossibility of estab-lishing a contractual relationship with our company. An exception is the case in which we need your consent to process your personal data. Giving consent is com-pletely voluntary.

    3. Duration for Which Your Personal Data is Stored

    Your personal data is stored only for the necessary amount of time and is archived for the allowed time period as per legal regulations:

    • data that is necessary for us to have in order to fulfill our legal obligations is kept for the period required by the relevant legal regulations. Unless the re-tention period for the personal data is explicitly stated, the data is stored for as long as the obligation lasts.
    • data that we have for the conclusion and fulfillment of contracts is stored for the duration of the contractual relationship;
    • data that we have for ongoing or imminent legal disputes shall be stored for the maximum limitation or preclusion periods (i.e, six months after the expira-tion of such limits). This takes into account the fact that a summons may be served by the court several months after filing;
    • data processed on the basis of our legitimate interest is stored for the duration of such interest (e.g., data stored on a recording from the camera system is stored for a maximum of ten days, commercial messages sent on the basis of our legitimate interest are sent only until you unsubscribe);
    • data processed on the basis of your consent is stored for the period for which you have given your consent.

    We have internal rules in place that verify the lawfulness of the possession of per-sonal data, and we do not hold data for longer than we are entitled to.

    4. Legislative Framework

    The processing of your personal data is done in accordance with valid and effective legal regulations, a basic overview of which is given below :

    Regulation of the European Parliament and Council (EU) 2016/679 of the 27. April 2016 on the protection of individuals with regard to the processing of personal data, and on the free movement of such data and repealing of the Directive 95/46/ES (General Data Protection Regulation), hereinafter referred to as “GDPR",

    • Act No. 21/1992 Coll., on banks,
    • Act No. 370/2017 Coll., on payment systems,
    • Act No. 256/2004 Coll., on doing business on capital markets,
    • Act No. 164/2013 Coll., on international cooperation in tax administration, and
    • Act No. 253/2008 Coll., on certain measures against the legalization of pro-ceeds from crime.

    5. Purposes of Processing Your Personal Data

    We collect and process personal data only if there is at least one legal justifi-cation for the specified purpose, and this only to the extent and for the time period necessary to fulfill the aforementioned purpose, which may be:

    PURPOSE OF PROCESSINGLEGAL JUSTIFICATION

    Fulfillinglegal obligations (e.g., storage of records and documents relating to investment services and transactions, or the fulfillment of a payment institution's obligations)

    compliance with applicable legal obligations

    Negotiating on the conclusion or amendment of a contract to which you are a party, the fulfillment of a concluded contract

    fulfillment of a contract or implementation of measures taken at your request before concluding the contract

    conducting a selection procedure to fill vacancies

    implementation of measures taken at your request before concluding a contract

    Sending promotional materials

    legitimate marketing interest of our company, or if you have given us consent

    Using your photo or likeness for the purpose of promoting our company

    if you have given us consent

    recording incoming customer phone calls in order to fulfill our company's legal and contractual obligations (especially under the Capital Market Business Act and the Payment System Act), and to regulate how our employees fulfill their obligations to you

    compliance with legal obligations that apply to our company; fulfillment of a contract or implementation of measures taken at your request before the conclusion of a contract and for reasons of legitimate interest to inspect employees

    Using a camera system for the protection of property and individuals

    legitimate interest of our company, our customers and employees in the protection of property and health

    determining, enforcing and defending legal claims for ongoing or imminent lawsuits and insurance events, or if a tort has occurred

    legitimate interest of our company, our customers and employees in the protection of rights in the event of legal disputes and insurance claims

    using cookies for data collection during use of our website

    some types of cookies require your consent, more information can be found in our Policy on the use of Cookies

    RETO - Connecting with potential partners in order to obtain new business opportunities for AKCENTA clients and at their request.

    By submitting the enquiry form, the client agrees to disclose his/her contact details within the "RETO" project to other clients of AKCENTA CZ a.s.

    6. Use of the website

    Consent to send marketing news

    By subscribing to our newsletter (marketing news) and then confirming your sub-scription via the link sent to you, you agree to the processing of your personal data for the purpose of sending newsletters. Your data is not passed on to third parties and will be kept until revoked.

    The provision of personal data is voluntary. You are not obliged to provide your per-sonal data, however, the newsletter cannot be sent to you without it.

    In the event that your consent to receive commercial communications from us is re-voked, we will continue to store your e-mail address. This is in order to prevent us from contacting you again to offer goods or services. However, as part of the revoca-tion of your consent, you may inform us that you do not wish us to process your per-sonal data for the purpose of such follow-up.

    Information provided actively - contact form

    Some parts of our website may ask you to provide information that will allow us to contact you (e-mail, and/or telephone number, name or company name). The admi-nistrator has a legitimate interest in the processing of the above contact details in order to provide an offer and the possible future conclusion of a framework agree-ment. You will be informed as to which information is mandatory and which is opti-onal. The provided contact details are kept for the period of one year.

    Information provided passively – cookies

    When navigating our company's website, certain information may be passively coll-ected (i.e., obtained without being actively provided by you) using various technolo-gies (such as cookies, pixels and javascript measuring systems, especially Google Analytics, and standard server logging of your HTTP requests).

    Your internet browser automatically shares anonymously listed information, such as the URL of the web portal or search engine you just left (the so-called "referrer URL"), your IP address, the version of the browser and the operating system that your computer is currently using, the default language settings, or information about installed browser add-ons. This site requires the storage of cookies in your browser for its operation. You can set it to inform you when a cookie is sent, or you can reject or disable cookies altogether, but certain parts of this website may not work properly without cookies. You can find more information in our Policy on the use of Cookies.

    7. Personal Data Recipients

    There are some cases in which the following external entities have access to your personal data:

    • banks / designated individuals (usually in connection with the confirmation of identification to meet the requirements of AML “anti-money laundering” laws). List of our banking partners;
    • legal authorities and legally designated bodies;
    • our professional advisors (i.e., auditors, legal, financial or tax advisors);
    • support service providers (IT service providers including web hosting and Cloud services, providers of postal and communication services and electro-nic communications services);
    • external collaborators and contractors, as necessary for contract fulfillment;
    • law enforcement agencies and insurance companies, as necessary (in-cidents, insured events).

    We process your personal data either independently or in accordance with the GDPR. We use the professional services of "personal data processors" on the basis of personal data processing agreements. Key processors who are subject to all security measures do have access to certain personal data of clients to the extent necessary for the agreed purpose. They are listed below:

    TYPERECIPIENT / COMPANY ID

    Software solutions for internal systems, OLB and the authentication application AkcentaKey

    TESCO SW a.s.

    ID: 25892533

    Software solutions for client applications

    RYANT, s.r.o.

    ID: 26249871

    Service

    Interactive Marketing, s.r.o.

    ID: 24814075

    Information System

    INFOMATIC s.r.o.

    ID: 24828441

    Trading partners

    RETO

    AKCENTA CZ a.s. clients using the RETO supplementary service.

    In order to ensure the implementation of the offered services that are provided (i.e., payment systems / investment services), in certain exceptional cases and under certain circumstances, you could require that we transfer your personal data for pro-cessing outside the EU / EEA to a so-called third country. In such cases, the transfer would take place in accordance with relevant legal requirements and the protection of your personal data would be ensured throughout. As a rule, however, no transfer of your personal data to a third country takes place unless the data is stored with a Cloud / communication service provider from the USA. (Transfer to the USA is pos-sible on the basis of “binding corporate rules").

    8. Information on data subjects rights

    We process your personal data transparently and in accordance with legal requirements. Please note that under the GDPR you have the right to the following:

    • request access to your personal data, i.e., you have the right to obtain information from us on whether we process your personal data, and if so, what the data is and how it is processed;
    • request the correction of any personal you deem to be inaccurate, and supplement incomplete data at any time;
    • in certain cases, you may request the following: restrictions on the processing of your personal data or the deletion of your personal data, or you can raise an objection to the processing itself (see Articles 17, 18 and 21 of the GDPR);
    • you have the right to revoke consent at any time of any processing that was based on your consent. Withdrawal of consent does not affect the legality of previous data processing;
    • in certain cases you have the right to obtain the personal data you have provided to us in a standard and machine-readable format (see Article 20 of the GDPR). You can then pass this information on to another administrator, or if technically possible, you can ask the administrators to pass it on to each other.

    You can exercise your rights by sending your application or objection to the registered office address of our company, or by e-mail to dpo@akcenta.eu. You also have the right to lodge a complaint with the Office for Personal Data Protection, in particular if we have not complied with your request.

    Last update: 03/07/2023

    Become a client