Who the personal data controller is
In relation to the data subjects for whom this document is intended, the personal data controller is:
AMISTA investiční společnost, a.s.
Pobřežní 620/3, 186 00 Praha 8
274 37 558
Ing. Ondřej Horák, Chairman of the Board of Directors
at the Municipal Court in Prague, Section B, File 10626
The Company is the controller of the personal data of owners of securities of a participating nature issued by a fund, where such data has been collected in connection with the management or administration of investment funds.
Why we process your personal data
- performance of contracts under which the Company provides investment services to the investor,
- compliance with legal obligations laid down by legislation including Act No 253/2008 on certain measures to combat money laundering and terrorist financing, as amended (“the AML Act”); Act No 240/2013 on investment companies and investment funds, as amended (the “Investment Companies and Investment Funds Act”); Act No 256/2004 on business on the capital market, as amended (“the Capital Market Act”); and others;
- marketing and business purposes (such as offers of products and services).
Do we process your data?
The Company processes the personal data of the following categories of data subjects:
- owners of securities of a participating nature issued by investment funds,
- counterparties to contracts under which assets are acquired for investment funds, or contracts relating to the assets of investment funds,
- other persons in connection with the management or administration of investment funds.
The Company processes the above-mentioned data subjects’ personal data to the extent to which such data is provided upon conclusion of a contract or during contracting negotiations, or to the extent to which it is communicated by the data subject at a later stage of the contractual relationship.
What specific personal data we process
The Company processes the following categories of personal data:
in relation to investors, mainly the following personal data:
- given name and surname, date and place of birth, personal identification number, permanent residential address or other contact address, nationality, telephone number, email address, number and expiration date of the investor’s identity card or other identification paper, information on the authority that issued the identity card or other identification paper, tax residence, the value of funds or investment instruments maintained by the Company on the investor’s account, the range of the investor’s annual income, the investor’s area of activity (employment, business), the value of the investor’s assets, etc.
in relation to counterparties mainly the following personal data:
- given name and surname, date and place of birth, personal identification number, permanent residential address or other contact address, nationality, telephone number, email address, number and expiration date of the counterparty’s identity card or other identification paper, information on the authority that issued the identity card or other identification paper, etc.
The Company processes copies of identity cards or other identification papers if the holder thereof gives consent for the Company to make and process a copy of the identity card or other identification paper.
Who specifically processes your personal data
Personal data is processed by Company workers but only ever by those who need the personal data for their work.
“Company workers” may be employees or third parties used by the Company in the performance of its activities.
The Company may provide personal data to processors, i.e. to third parties who contractually perform activities requiring the processing of personal data on behalf the Company (e.g. bookkeeping).
In order to fulfil its statutory obligations, the Company may also provide personal data to public authorities (e.g. the Czech National Bank or law enforcement agencies).
Personal data is processed both manually and by automated means using computer technology.
How long we process your data
The Company processes personal data for the duration of the contractual relationship with the data subject and thereafter for the period it is statutorily required to retain personal data.
Where the Company processes personal data on the basis of consent given to process such personal data, it does so for the period for which the consent has been given or until the consent is withdrawn.
Your rights in connection with the processing of personal data
Right to object
A data subject has the right to object to the processing of personal data at any time. If the objection is justified, the controller will terminate the processing of the personal data without undue delay.
Right to information
A data subject has the right to access personal data processed about the data subject by the Company, including information on the purpose of processing, the categories of personal data concerned, the recipients of the personal data, the planned processing period, and the data subject’s rights in relation to the processing of personal data.
Right to rectification
A data subject has the right to the rectification of inaccurate personal data and to the supplementation of incomplete personal data.
Right to erasure
A data subject has the right to request the termination of the processing of personal data (the erasure thereof). The right to the termination of processing may be exercised in the following cases:
- if there is no longer any purpose for such processing,
- if the data subject withdraws consent to the processing of personal data and there are no other legal grounds for the processing,
- if the data subject raises a justified objection to the processing,
- if personal data is being processed unlawfully,
- if erasure is necessary to fulfil a legal obligation or
- if personal data has been collected in relation to an offer of information society services to a child under 13 years of age.
Right to restriction of processing
A data subject also has the right to the restriction of personal data processing. The right to the restriction of processing may be exercised in the following cases:
- where the personal data being processed is inaccurate, including the period necessary to verify the accuracy of the personal data,
- where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use thereof instead,
- where the controller no longer needs the personal data for the purposes of the processing, but the personal data is required by the data subject for the establishment, exercise or defence of legal claims or
- where the data subject has objected to processing pending verification of whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
Right to withdraw consent
Data subjects have the right to withdraw their consent at any time. Nevertheless, the withdrawal of consent will not affect the legality of processing that has been carried out on the basis of that consent before its withdrawal. Withdrawal of consent also has no effect on any mutual contractual relationship.
The data subject acknowledges that the withdrawal of the consent does not obligate the Company to destroy personal data, but only requires the Company to stop processing personal data for the purpose for which the consent was given, such being for the period specified by law.
Right to lodge a complaint with supervisory authority
Further information and contact details
Controller’s contact details
AMISTA investiční společnost, a.s.
International Business Center
Pobřežní 620/3, 186 00 Praha 8, Czech Republic
DPO’s email: firstname.lastname@example.org
telephone: + 420 226 233 110
fax: + 420 226 251 020