Privacy

Controller

The controller is PHENDHEY LING a.s., IČO 10864938, Loretánské náměstí 109/3, 118 00 Praha 1 – Hradčany, Czech Republic. Privacy enquiries may be submitted through the Contact page or through another contact channel formally published by PHENDHEY LING.

Data we process

Depending on how you use the website, we may process identification, business-contact and communication data, investor-access information, account identifiers, authentication and security data, and technical request or security-log data.

• Contact forms: name, email address, selected topic and message.
• Investor access: name, business email, company, request context, account status, roles and document permissions.
• Protected access: session identifiers and security/audit events.
• Technical operation: information required to deliver and secure web requests, which may include IP address, user-agent and timestamps.

Purposes and legal bases

We process personal data only for defined purposes and on an appropriate legal basis under the GDPR.

• To respond to enquiries and take steps requested before a potential business relationship.
• To administer investor access, document permissions and protected accounts.
• To secure the website, prevent abuse, investigate incidents and maintain audit records based on legitimate interests in protecting systems and information.
• To comply with legal, accounting, regulatory or court obligations where applicable.

Recipients and processors

Access is limited to authorised persons and service providers that need the data for the relevant purpose. These may include hosting, infrastructure, private-file storage, security, professional-advisory and IT-support providers acting under appropriate contractual or legal arrangements.

International transfers

If a service provider processes personal data outside the European Economic Area, PHENDHEY LING will use an applicable transfer mechanism and safeguards required by data-protection law. Public third-party links and embedded external resources are governed by the respective provider’s own privacy terms.

Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, for the duration of an authorised account or business relationship where relevant, and thereafter only as required for security, evidence, statutory obligations or the establishment, exercise or defence of legal claims. Records that are no longer required should be deleted or anonymised in accordance with internal retention rules.

Your rights

Subject to the conditions of the GDPR, you may request access to personal data, rectification, erasure, restriction of processing, data portability where applicable, or object to processing based on legitimate interests. You may also lodge a complaint with the competent supervisory authority.

• Requests may require reasonable identity verification before information is disclosed or changed.
• Some rights are subject to statutory exceptions, including record-retention or legal-claims requirements.

Security

PHENDHEY LING uses technical and organisational measures intended to protect personal data, including restricted roles, protected sessions, permission-controlled Data Room access, rate limits, private storage controls and audit logging. No internet service can guarantee absolute security.

Supervisory authority

In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ). Information about data-subject rights and complaints is available at uoou.gov.cz.

Changes to this notice

This notice may be updated when processing activities, service providers or legal requirements change. The date shown at the top identifies the current website version.