Privacy Policy

1. Data controller

The controller of personal data is VESPR Advisory s.r.o., Company ID (IČO) 29616336, with its registered office at Nýdecká 444, Letňany, 199 00 Praha 9 (the “Controller”).

Contact for data protection matters: kontakt@vespr.cz

2. What personal data we process

We process only the personal data that is necessary to provide our services or that you provide to us yourself. This includes in particular:

• Identification data: first name, surname, company name, Company ID (IČO)
• Contact data: email address, telephone number
• Engagement data: the content of our communications with you, materials provided for the performance of the contract
• Billing data: address, bank details (for invoicing purposes only)
• Technical data: IP address, browser type, behaviour on the website (only if analytics tools are active; see the current version of this policy)

3. Purposes and legal bases of processing

4. How long we retain data

• Contract documentation and billing data: for the term of the contract and for a further 10 years after its termination, in accordance with tax regulations
• Communications: for the duration of the engagement and for 3 years after it ends
• Processing based on consent: until consent is withdrawn

5. Who we disclose data to

We do not sell your personal data or provide it to third parties for marketing purposes. Data may be disclosed only to:

• Our accounting or tax advisory firm: to the extent necessary for bookkeeping
• IT service providers: the administrators of our website, email systems and cloud storage, on the basis of data processing agreements
• Public authorities: where required by law

All recipients are bound by a duty of confidentiality and process the data solely on the Controller’s instructions.

6. Transfers of data to third countries

We process your personal data primarily within the European Economic Area (EEA). If data were to be transferred outside the EEA (for example through cloud tools), we ensure appropriate safeguards in accordance with Chapter V GDPR.

7. Your rights

Under the GDPR, you have the following rights:

• Right of access: you may ask us at any time to tell you which of your data we process
• Right to rectification: if your data is inaccurate or incomplete
• Right to erasure: under the conditions laid down in Art. 17 GDPR
• Right to restriction of processing: in the cases laid down in Art. 18 GDPR
• Right to data portability: where the processing is based on consent or a contract and is carried out by automated means
• Right to object: to processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

Please send requests to: kontakt@vespr.cz. We will respond to your request without undue delay and in any event within 30 days.

8. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
www.uoou.cz

9. Cookies and analytics tools

The vespradvisory.com website does not currently use tracking cookies or third-party analytics tools. If this changes in future, we will update this policy and give website visitors the option to give their consent in accordance with applicable law.

10. Changes to this policy

We may update this policy from time to time, in particular in response to changes in legislation or in our services. The current version is always available on the vespradvisory.com website. The date of the last update is shown at the top of this document.