The controller of your personal data within the meaning of the General Data Protection Regulation 2016/679 (“GDPR”) is the companies within the Arbol Group (hereinafter collectively referred to as “Arbol” or “we”). Arbol protects all the personal data that is processed as strictly confidential and treats it in accordance with the applicable personal data protection laws and regulations.
The Arbol companies are joint controllers within the meaning of Article 26 of the GDPR, i.e. they jointly determine the purposes and means of the processing, retention and use (and other processing) of your personal data for conducting their business (the individual purposes for which personal data is processed are further defined below).
We mainly process your personal data if:
|Data of the data subjects||Purposes of the processing|
|First name and surname||
Performance of a contract, Compliance with a legal obligation, Protection of our legitimate interest, Handling your requests, Sending commercial messages and targeted advertising
|Contact address||Performance of a contract, Compliance with a legal obligation, Protection of our legitimate interest|
Performance of a contract, Compliance with a legal obligation, Protection of the legitimate interest of the controller, Handling your requests, Sending commercial messages and targeted advertising
Performance of a contract, Compliance with a legal obligation, Protection of our legitimate interest, Handling your requests
Depending on the purpose of the processing, we are authorised to process the following personal data concerning you:
Personal data is processed both manually and by automated means. Personal data is processed by automated means mainly to support our internal administrative processes that are necessary for the performance of a contract. Personal data is also processed by automated means where you have given us your consent to receiving commercial messages and targeted advertising.
If you give us your consent to the processing of your personal data for the purpose of sending commercial messages and targeted advertising, you acknowledge that your consent is voluntary and can be withdrawn at any time, including by email sent to privacyMarbolcapital.cz or by sending a written notice to the address of our registered office at U Hellady 697/4, Michle, 140 00 Praha 4., Czech Republic. The consent is given for the period of five years or until withdrawn.
We process and retain your personal data for the time necessary to ensure compliance with all the rights and obligations arising from the relevant contractual relationship and for the period for which we as the controller of the personal data are obligated to retain the data in accordance with the law, or for the period for which you have given us your consent. In other cases, the retention period depends on, and must be appropriate to, the purpose of the processing, or is set by the applicable data protection legislation.
Depending on the purpose of the processing, we process the personal data for the following period:
|Purpose of the processing||Retention period|
|Performance of a contract||for the term of the contract and for ten years following the termination of the contract|
|Compliance with a legal obligation||for the period specified by the applicable law or regulation|
|Protection of the controller’s legitimate interest||
Protection of the controller’s legitimate interest for a maximum of three years from the beginning of the processing of the personal data unless otherwise specified by speciallaws or regulations or unless justified reasons exist for the need to retain the data for a longer period in connection with a specific case
|Handling your requests||for the time required for handling the request in question|
|Sending commercial messages||
for the duration of the consent granted to the sending of commercial messages and targeted advertising or until the consent to the processing is withdrawn, or as prescribed by the applicable laws and regulations*
|Steps taken prior to the execution of a contract||for the duration of the contractual negotiations|
* We are authorised to process your email address within the meaning of Section 7 (3) of Act No. 480/2004 on certain information society services and on amendments to certain other acts (Information Society Services Act), as amended, with a view to disseminating commercial messages concerning our own products or services (e.g. in the form of a newsletter) unless you have declined to be sent such messages.
The personal data of third parties, meaning the personal data of our employees, business partners, and other individuals involved in cooperating with us, or other data that we receive from our business partner in association with the conclusion or performance of a contract, shall always be processed in accordance with the GDPR. We will use this personal data only for the purpose of performing contracts with the business partners. The business partner hereby acknowledges that we will process the third party’s personal data for the term of the contractual relationship and beyond for the time specified by special laws and regulations, if any. The data will be retained for a longer period if justified reasons arise for the need to retain the data in connection with a specific case. The business partners shall duly inform their employees and other individuals involved in working with us on behalf of the business partner about such processing.
Your personal data is disclosed only to the authorised employees and associates or to the individual processors of personal data with whom we have a contract, or to other controllers. They include, for example, processors or controllers who participate in providing services or payments or those who provide us with administrative, transport, communication, software or marketing products and services. However, your personal data can only be disclosed to these entities to the extent necessary for the fulfilment of the individual purposes of the processing under the corresponding legal basis for the transfer and processing of the personal data. The current list of the recipients of personal data is available upon request by email at privacyMarbolcapital.cz.
In specific cases defined by law, we may, or have to, transmit some of your personal data in accordance with the applicable laws and regulations, e.g. to law enforcement or other public authorities.
Subject to the conditions of the GDPR, you, being a data subject, have and can exercise at any time the following rights in connection with the processing of your personal data:
You also have the right to withdraw your consent to the processing of your personal data if you have given us this consent.
You can exercise your rights by email at privacyMarbolcapital.cz or by sending a written notice to U Hellady 697/4, Michle, 140 00 Praha 4, Czech Republic. You can also use the contact details provided above if you have any questions or comments regarding the processing of your personal data.