Porta Invest s.r.o., Company ID No.: 04998391, with its registered office at Lucemburská 2136/16, Vinohrady, 130 00 Prague 3 (hereinafter referred to as “PORTA INVEST”), is the controller of personal data, which it manages and processes in accordance with the GDPR and, where applicable, in accordance with the professional and ethical rules applicable to the activities of PORTA INVEST.
PORTA INVEST sends information about new offers and other information that it considers useful to the data subjects whose data it holds in its database. The data of these subjects is also used by PORTA INVEST for the purposes listed below.
Below you will find brief information about:
(i) Personal data collected by PORTA INVEST.
(ii) The purposes for which PORTA INVEST processes personal data, and the related legal grounds.
(iii) Persons who have access to personal data.
(iv) The rights and safeguards provided to data subjects, in particular by the GDPR.
PORTA INVEST collects the following data on data subjects:
(i) First name and surname.
(ii) Academic degree(s).
(iii) Telephone number.
(iv) Email address.
(v) Other data that may be necessary in certain cases for the provision of services by PORTA INVEST, such as address, date of birth, information for the purposes of compliance with requirements relating to the anti-money laundering laws (nationality, ID card/passport/residence permit number, etc.) and other data provided to PORTA INVEST by the data subject.
Personal data is processed by PORTA INVEST for the following purposes:
(i) Provision of services.
(ii) Performance of obligations arising from agreements or other arrangements and statutory obligations.
(iii) Management and coordination of relationships with (prospective) clients and customers.
(iv) Responding to questions and requests from data subjects.
(v) Feedback on PORTA INVEST offers, and for the purpose of further information and communication, including communication regarding the services provided.
(vi) Sending of service offers.
(vii) Other legitimate business purposes, including the development of the business activities of PORTA INVEST and relationships with (prospective) clients and customers, persons and entities that cooperate with PORTA INVEST, for the purpose of providing information about the services of PORTA INVEST, protecting the interests of clients and customers of PORTA INVEST and fulfilling obligations arising from the law and obligations imposed by the competent authorities or applicable legislation.
If the data subject refuses to provide the personal data necessary for the above purposes, PORTA INVEST may not be able to provide the relevant services or to comply with the relevant statutory requirements (e.g., to enable the data subject to exercise his/her rights under the GDPR).
Personal data is processed by PORTA INVEST on the basis of its legitimate interests for the purpose of carrying out its business activities, the performance of a contract or agreement to which the data subject is a party, steps carried out at the request of data subjects prior to the conclusion of a contract or agreement, or the fulfilment of statutory obligations (e.g., obligations relating to the anti-money laundering laws and the obligation to provide information to the authorities exercising supervision).
PORTA INVEST obtains personal data directly from data subjects or from other persons, including its (current or former) clients, customers, prospective clients or customers, business partners, persons and entities that cooperate with PORTA INVEST, employees, as well as their representatives or other persons acting on their behalf, as well as from public sources or public authorities in the framework of the provision of services.
PORTA INVEST generally retains data for a maximum period of 25 years, if that period is reasonable, or for a shorter period according to applicable law, or if a shorter period is required by legal interest. However, in the case of potential legal claims or liability, that period may be extended accordingly if there is a possibility that legal claims or claims arising from liability may be made. Where PORTA INVEST processes personal data on the basis of the data subject’s consent, it retains the data for the period of validity of the consent.
The data is accessible to contractual partners who need it for the purpose of fulfilling statutory obligations and providing services or conducting their business. A contractual partner is an entity that participates in the services provided to clients and customers of PORTA INVEST on the basis of a business arrangement with PORTA INVEST, as well as an entity that provides services to PORTA INVEST and assists it in fulfilling its contractual and statutory obligations (e.g., legal representatives, tax advisors, accountants, IT service providers, service organisations and other entities from the PORTA INVEST Group).
Data may also be provided to public authorities on the basis of applicable law or a relevant request.
The data subject is entitled to exercise the rights arising from the GDPR by contacting PORTA INVEST by email to firstname.lastname@example.org and exercising any of the following rights in that email:
(i) Requesting access to his/her personal data. This means that the data subject is entitled to request information on whether we are processing his/her personal data and ask for a copy of his/her file. However, there are certain exceptions, i.e., the data subject is not always entitled to receive all the information that PORTA INVEST processes.
(ii) Requesting the rectification of his/her personal data if the data subject considers it inaccurate or incomplete.
(iii) Requesting, under certain circumstances, the erasure of personal data from the PORTA INVEST database (e.g., if the personal data is no longer necessary for the purposes stated or if it has been processed unlawfully). PORTA INVEST cannot erase personal data that it is obliged to keep by law.
(iv) Withdrawing (revoking) his/her consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of the processing prior to its withdrawal.
(v) Requesting a restriction on the processing of personal data, which means that the data subject may restrict the way in which his/her personal data is used by PORTA INVEST if he/she has concerns about its accuracy or the way in which it is used. However, certain limited data may still be used by PORTA INVEST in certain circumstances (e.g., personal data necessary for the purposes of legal claims or to protect the rights of another data subject).
(vi) Requesting the transfer of personal data to another controller if the data was provided by the data subject and is stored in electronic form.
(vii) Objecting to the processing of his/her personal data. In such a case, PORTA INVEST will cease to use the data subject’s personal data for the purpose in question, unless it has compelling legitimate grounds for using it further. The data subject is always entitled to object to the processing of his/her personal data for direct marketing purposes.
If, at the request of the data subject, PORTA INVEST erases his/her personal data from its database, it will retain only the information that may be necessary for the purpose of protecting its legitimate interests as defined above or for public authorities.
If PORTA INVEST is requested to transfer personal data to another controller, to rectify data or to grant access to personal data, it may first request further information in order to verify the identity of the data subject.
PORTA INVEST considers the data and information provided to be confidential and treats it in accordance with the relevant legislation and contractual arrangements. It never trades in personal data.
In order to protect personal data and prevent its disclosure to third parties and access to it by unauthorised persons, PORTA INVEST has introduced organisational, administrative, technical and physical measures, such as the use of user names and passwords to protect personal data stored in electronic forms and the storage of data carriers in lockable cabinets to which only authorised persons have access.
If the data subject considers that his/her rights related to the protection of personal data have been violated, he/she may lodge a complaint with the competent data protection authorities (Office for Personal Data Protection). The data subject may also choose to go to court and seek protection of his/her personal data in litigation.