Privacy Policy

Who is the administrator?

The company PTT Czech s.r.o. ID number 11777460, with its registered office at Karolinská 654/2, 186 00 Praha 186 00, registered at the Municipal Court in Prague, file number: C 180846, operating the website https://pttrustees.cz .We process your personal data as an administrator, i.e. we determine how the personal data will be processed and for what purpose, for how long and we select any other processors who assist us with the processing.

Contact details

If you would like to contact us during the processing, you can contact us at +420 212 249 419 or by e-mail: info@pttrustees.cz

Declaration

As the controller of your personal data, we are committed to processing personal data in accordance with applicable legal requirements, including the GDPR and relevant Czech data protection legislation. Therefore:

We will process your personal data only on the basis of a valid legal reason, primarily legitimate interest, performance of a contract, legal obligation or consent granted,

We fulfill the information obligation according to Article 13 of the GDPR before starting the processing of personal data,

We will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and GDPR

Scope of personal data and purposes of processing

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

a. Identity Data

This includes data relating specifically to your identity, such as your first name, maiden name, last name, marital status, title, date of birth and gender.

b. Contact Data

This includes data relating to how you may be contacted, such as your address, email address and telephone numbers.

c. Payment Data

This include data relating to your means and methods of payment, such as your bank account and payment card details.

d. Financial Data

This includes data relating to audit, regulatory, statutory accounting, tax, employment and related terms that is public available or through credit reference agencies.

e. Transaction Data

This includes data relating to the transactions you have carried out with us, such as details about payments to and from you and other details of professional services you have purchased from us.

f. Technical Data

This includes more technical data that we may obtain when you make use of our website, such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

g. Usage Data

This includes information about how you use our website, products and services.

h. Communications Data

This includes your communication preferences, such as how you would like us to contact you, and records of our correspondence with you.

We also collect and use Aggregated Data, such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law, as it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data, which will be used in accordance with this privacy policy.

Special Categories of Personal Data and Criminal Convictions and Proceedings Data

We do not generally collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Where such data is required, we will only process it where permitted or required by law, to comply with a legal or regulatory obligation, or where another applicable condition for processing under data protection legislation applies; where we are required to collect special categories of personal data owing to the requirements of a regulatory body, we will inform you accordingly. We will share data with interested party as set out in the trust or escrow deeds.

For anti-money laundering purposes and in connection with investigations in the event of actual or suspected wrongdoing (including fraud or other criminal activities) we may collect or otherwise process personal data about criminal convictions and/or actual or suspected offences. This may involve collecting personal data from public news sources like Companies House and from third party providers such as Creditsafe, as part of our client and counterparty due diligence.

If you fail to provide personal data

Where we require details from you to provide you with professional services that you have chosen to engage us to provide, if you do not provide us with the necessary details then we will not be able to provide the services in question.

Marketing

We do not currently use personal data for direct marketing purposes. However, we may contact individuals regarding our services, contractual obligations, regulatory requirements, and matters relating to our business relationship with them.

You can contact us at any time to discuss this further at info@pttrustees.cz

Photographic documentation

With your consent, we process photos from live events, workshops or seminars for marketing purposes (event promotion, website, etc.).

We retain your personal data for the duration of the limitation periods, unless the law provides for a longer retention period or we have stated otherwise in specific cases.

Security and protection of personal data

We protect your personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

i. Service providers acting as processors who provide cloud hosting and infrastructure, database, storage, business productivity and collaboration, and cloud accounting services.

ii. Software development and technical support providers who may access our systems while developing and maintaining our platform.

iii. Professional advisers acting as either processors, controllers or joint controllers including lawyers, bankers, auditors and insurers based in the United Kingdom, EEA. and United States, Australia and/or such other countries as necessary for the purposes of your instructions who provide consultancy, banking, legal, insurance and accounting services.

iv. Financial Administration of the Czech Republic, regulators and other authorities acting as controllers or joint controllers based in the Czech Republic who require reporting of processing activities in certain circumstances.

v. Regulatory bodies and other authorities acting as controllers or joint controllers and based in the United States, Australia and/or such other countries as necessary for the purposes of your instructions and who require reporting of processing activities in certain circumstances.

v. Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

vi. Any competent law enforcement body, regulatory, government agency, court or other third party (such as our professional advisers) where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights or so a third party can defend theirs, or (iii) to protect your vital interests or those of any other person;

vii. Any other person with your consent to the disclosure (obtained separately from any contract between us).

Cookies, changes and contact

Cookies. Our website uses strictly necessary cookies to work, and analytics cookies from Google Analytics only if you accept them through our CookieYes banner. You can change your choice at any time through the cookie settings link on our website.

Children. Our services are for businesses, and we do not knowingly collect personal data from anyone under 18.

Changes to this policy. We review this policy at least once a year and when our processing changes. The date at the top shows when it was last updated, and we will tell customers directly about significant changes.

Contact us. For questions about this policy or to exercise your rights:

Email: info@pttrustees.cz

Post: Data Protection, PTT Czech s.r.o., Karolinská 654/2, 186 00 Praha 186 00

Transfer of data outside the European Union

We process data in the European Union or in countries that ensure an adequate level of protection based on the standards applicable in the EU.

Your rights in relation to the protection of personal data

You have a number of rights in relation to the protection of personal data. If you would like to exercise any of these rights, please contact us by e-mail: info@pttrustees.cz

You have the right to information , which is already fulfilled by this information page with the principles of personal data processing.

Thanks to the right of access, you can contact us at any time and we will provide you with evidence of what personal data we are processing and why within one month of receiving the request

If something changes for you or you find your personal data outdated or incomplete, you have the right to supplement and change your personal data.

You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, you believe that we are processing it unlawfully, but you do not want to delete all the data, or if you have objected to the processing.

You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications).

Right to portability

If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access – the only difference is that we will send you the information in a machine-readable format within one month of receiving the request.

Right to erasure (to be forgotten)

Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In this case, we will delete all of your personal data from our system and from the systems of all sub-processors and back-ups. We need 30 days to ensure the right to erasure.

In some circumstances, we are required by law to retain certain personal data, for example for tax, accounting, anti-money laundering, or other regulatory purposes. In such cases, we will retain only the personal data necessary to comply with those obligations and will delete it once the applicable retention period has expired. Data contained in backup systems will be securely overwritten in accordance with our normal backup retention procedures.

Complaint to the Personal Data Protection Office

If you feel that we are not handling your data in accordance with the law, you have the right to complain to the Office for Personal Data Protection at any time. We would be very happy if you would first inform us of your concerns so that we can correct any errors.

Commercial communications

From time to time, we may contact our clients regarding events, seminars, or other matters relating to our services. If you do not wish to receive such communications, you may contact us at any time to opt out.

Confidentiality

We would like to assure you that our employees who will process your personal data are obliged to maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. We share personal data only as described in this notice or as required by law.

Glossary

Lawful Basis

Legitimate Interest

means the specific and necessary interests of our business. For example, our legitimate interests may include provision of administration and IT services and to develop. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Performance of Contract

Means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Comply with a legal or regulatory obligation

means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Consent

means that we will process your personal data where you have clearly agreed to us doing so (separate to any contract between us).

These personal data processing principles apply from October 15 2026.