Privacy policy

In accordance with Act No 110/2019 on the processing of personal data („ the Data Processing Act“) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data(the General Data Protection Regulation,„GDPR”) company Amista investiční společnost, a.s. hereby announces

the following:

Who the personal data controller is

In relation to the data subjects for whom this document is intended, the personal data controller is:

AMISTA investiční společnost, a.s.
Registered office:	Pobřežní 620/3, 186 00 Praha 8
Registration number:	274 37 558
Represented by:	Ing. Ondřej Horák, Chairman of the Board of Directors
Incorporated:	at the Municipal Court in Prague, Section B, File 10626

(„the Company“)

The Company is the controller of the personal data of owners of securities of a participating nature issued by a fund, where such data has been collected in connection with the management or administration of investment funds.

Why we process your personal data

The Company processes personal data for the following purposes:

performance of contracts under which the Company provides investment services to the investor,
compliance with legal obligations laid down by legislation including Act No 253/2008 on certain measures to combat money laundering and terrorist financing, as amended (“the AML Act”); Act No 240/2013 on investment companies and investment funds, as amended (the “Investment Companies and Investment Funds Act”); Act No 256/2004 on business on the capital market, as amended (“the Capital Market Act”); and others;
marketing and business purposes (such as offers of products and services).

The processing of personal data may be necessitated by a contract or the law. If data is not processed for contractual or statutory reasons, the Company will seek the data subject’s consent. Under a contract already concluded with the data subject, the Company may also process personal data for purposes of direct marketing on the grounds that it has a legitimate interest in sending offers and services, or to make contact by email or telephone. The Company will normally use the data subject’s information for these purposes.

Do we process your data?

The Company processes the personal data of the following categories of data subjects:

owners of securities of a participating nature issued by investment funds,
counterparties to contracts under which assets are acquired for investment funds, or contracts relating to the assets of investment funds,
other persons in connection with the management or administration of investment funds.

The Company processes the above-mentioned data subjects’ personal data to the extent to which such data is provided upon conclusion of a contract or during contracting negotiations, or to the extent to which it is communicated by the data subject at a later stage of the contractual relationship.

What specific personal data we process

The Company processes the following categories of personal data:

in relation to investors, mainly the following personal data:

given name and surname, date and place of birth, personal identification number, permanent residential address or other contact address, nationality, telephone number, email address, number and expiration date of the investor’s identity card or other identification paper, information on the authority that issued the identity card or other identification paper, tax residence, the value of funds or investment instruments maintained by the Company on the investor’s account, the range of the investor’s annual income, the investor’s area of activity (employment, business), the value of the investor’s assets, etc.

in relation to counterparties mainly the following personal data:

given name and surname, date and place of birth, personal identification number, permanent residential address or other contact address, nationality, telephone number, email address, number and expiration date of the counterparty’s identity card or other identification paper, information on the authority that issued the identity card or other identification paper, etc.

The Company processes copies of identity cards or other identification papers if the holder thereof gives consent for the Company to make and process a copy of the identity card or other identification paper.

Who specifically processes your personal data

Personal data is processed by Company workers but only ever by those who need the personal data for their work.

“Company workers” may be employees or third parties used by the Company in the performance of its activities.

The Company may provide personal data to processors, i.e. to third parties who contractually perform activities requiring the processing of personal data on behalf the Company (e.g. bookkeeping).

In order to fulfil its statutory obligations, the Company may also provide personal data to public authorities (e.g. the Czech National Bank or law enforcement agencies).

Personal data is processed both manually and by automated means using computer technology.

How long we process your data

The Company processes personal data for the duration of the contractual relationship with the data subject and thereafter for the period it is statutorily required to retain personal data.

Where the Company processes personal data on the basis of consent given to process such personal data, it does so for the period for which the consent has been given or until the consent is withdrawn.

Your rights in connection with the processing of personal data

Right to object

A data subject has the right to object to the processing of personal data at any time. If the objection is justified, the controller will terminate the processing of the personal data without undue delay.

Right to information

A data subject has the right to access personal data processed about the data subject by the Company, including information on the purpose of processing, the categories of personal data concerned, the recipients of the personal data, the planned processing period, and the data subject’s rights in relation to the processing of personal data.

Right to rectification

A data subject has the right to the rectification of inaccurate personal data and to the supplementation of incomplete personal data.

Right to erasure

A data subject has the right to request the termination of the processing of personal data (the erasure thereof). The right to the termination of processing may be exercised in the following cases:

if there is no longer any purpose for such processing,
if the data subject withdraws consent to the processing of personal data and there are no other legal grounds for the processing,
if the data subject raises a justified objection to the processing,
if personal data is being processed unlawfully,
if erasure is necessary to fulfil a legal obligation or
if personal data has been collected in relation to an offer of information society services to a child under 13 years of age.

Right to restriction of processing

A data subject also has the right to the restriction of personal data processing. The right to the restriction of processing may be exercised in the following cases:

where the personal data being processed is inaccurate, including the period necessary to verify the accuracy of the personal data,
where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use thereof instead,
where the controller no longer needs the personal data for the purposes of the processing, but the personal data is required by the data subject for the establishment, exercise or defence of legal claims or
where the data subject has objected to processing pending verification of whether the legitimate grounds of the controller override those of the data subject.

Right to data portability

A data subject also has the right to the portability of personal data processed with consent or for contractual purposes. The data subject has the right to receive personal data which he or she has provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller, or the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Right to withdraw consent

Data subjects have the right to withdraw their consent at any time. Nevertheless, the withdrawal of consent will not affect the legality of processing that has been carried out on the basis of that consent before its withdrawal. Withdrawal of consent also has no effect on any mutual contractual relationship.

The data subject acknowledges that the withdrawal of the consent does not obligate the Company to destroy personal data, but only requires the Company to stop processing personal data for the purpose for which the consent was given, such being for the period specified by law.

Right to lodge a complaint with supervisory authority

Data subjects have the right to lodge a complaint at any time with the Office for Personal Data Protection at Pplk. Sochora 27, 170 00 Praha 7,if they believe that the law has been broken.

Further information and contact details

The provision of personal data to the Company is voluntary. In cases where the Company is obliged to comply with legal requirements for which the provision of personal data is necessary, failure to give consent may render the conclusion of a contract impossible.

Controller’s contact details

Company:

AMISTA investiční společnost, a.s.

International Business Center

Pobřežní 620/3, 186 00 Praha 8, Czech Republic

DPO’s email: gdpr@amista.cz

telephone: + 420 226 233 110

fax: + 420 226 251 020

Any enquiries concerning the processing of your personal data may be emailed to the Company’s data protection officer at: gdpr@amista.cz

If you want to get ahead, give us a go.

+420 226 233 110 amista@amista.cz

Contact form