Privacy Policy
Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Controller: KREDO Digital Finance a.s., Company ID No. 09062530, registered office [to be completed], e-mail [email protected].
What data and why
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Waiting list and offer of membership | e-mail, language, date of registration | performance of a contract / pre-contractual steps (Art. 6(1)(b)) | until dealt with or withdrawn, at most 24 months |
| Membership and operation of the account | name, e-mail, login credentials, settings, virtual portfolios, instructions to the Analyst and its outputs | performance of a contract (point (b)) | duration of membership + 3 years (limitation period) |
| Operation and security of the website | IP address, technical data of the browser, logs | legitimate interest (point (f)) | 12 months |
| Service information to members | legitimate interest (point (f)), with the possibility to object | duration of membership | |
| Commercial communications to others | consent (point (a)) | until withdrawn | |
| Accounting and tax documents | billing data | legal obligation (point (c)) | 10 years |
Recipients
The hosting and CDN provider [to be completed after selection – e.g. Cloudflare, Inc.], the e-mail provider [to be completed], the language model provider (Anthropic PBC – instructions to the Analyst are transmitted without identification of the member), the accountant and tax adviser, and public authorities on the basis of law.
Transfers outside the EU/EEA
Data may be transferred to the USA on the basis of the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses; we will provide a copy of the safeguards on request.
Your rights
The right of access, rectification, erasure, restriction of processing, data portability, the right to object (in particular to processing based on legitimate interest and to the sending of information), the right to withdraw consent, and the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ) (Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz). Requests: [email protected].
Automated decision-making
No automated decision-making with legal or similarly significant effects takes place. Indicators and predictions concern instruments, not persons.
The Czech version of this document is authoritative; this English translation is provided for convenience.