PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
(pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 – GDPR)
1. Data Controller
The Data Controller is International Tax Planning s.r.o., with registered office at Vinohradská 1786/122, 130 00 Prague 3 – Czech Republic, ID No.: 28976771, e-mail: info@itpcz.com (hereinafter referred to as the “Controller” or the “Company”).
2. Scope of Application
This notice governs the processing of personal data carried out by the Company in the context of providing accounting, tax, corporate, financial and technical-professional coordination services, as well as in relation to related legal obligations.
3. Categories of Personal Data Processed
The Company may process the following categories of personal data:
a) Identification and contact data
Name, surname, date and place of birth, address, identification number, tax identification number, telephone contacts and e-mail address.
b) Tax, accounting and financial data
Bank details, tax documentation, tax returns, financial statements, accounting records, economic and financial information.
c) Contractual and professional data
Documentation and information provided by the client for the performance of professional assignments.
d) Data required by anti-money laundering (AML) regulations
Data necessary for fulfilling customer due diligence obligations under applicable legislation. Such data is processed pursuant to Czech Act No. 253/2008 Coll., on certain measures against the legalization of proceeds of crime and terrorist financing, as amended, implementing applicable European AML legislation. Processing is carried out in compliance with the principles of minimization, relevance and proportionality.
4. Purposes of Processing
Personal data are processed for:
• Performance of professional assignments entrusted to the Company;
• Compliance with accounting, tax, corporate and regulatory obligations;
• Fulfillment of obligations under anti-money laundering legislation;
• Technical coordination with external professionals where required by the nature of the assignment;
• Administrative and organizational management of the contractual relationship;
• Protection of the Company’s rights in judicial or extrajudicial proceedings.
5. Legal Basis for Processing
Processing is based on Article 6 GDPR and is carried out for the performance of professional assignments, compliance with legal obligations and the legitimate interest of the Controller. Where necessary, processing may be based on the data subject’s consent. For AML-related data, the legal basis is compliance with legal obligations.
6. Disclosure of Data and Involvement of External Professionals
Personal data may be disclosed, where strictly necessary, to:
• authorized external professionals (e.g. lawyers, auditors, technical consultants);
• administrative, IT or management service providers;
• credit institutions;
• tax, judicial or administrative authorities.
Such parties act, as applicable, either as Data Processors pursuant to Article 28 GDPR or as independent Data Controllers. Disclosure takes place exclusively for purposes related to service provision or legal obligations.
7. Transfer of Data Abroad
Personal data are primarily processed within the European Union. Any transfer to third countries will take place in compliance with Articles 44–49 GDPR.
8. Methods of Processing and Security
Data processing is carried out by paper and electronic means. The Company adopts appropriate technical and organizational measures to ensure data security and confidentiality in accordance with Article 32 GDPR.
9. Data Retention Period
Data are retained for the time strictly necessary to achieve the purposes indicated above and in any case in compliance with the retention periods required by tax, accounting and civil legislation applicable in the Czech Republic. AML-related data are retained in accordance with applicable anti-money laundering legislation.
10. Rights of the Data Subject
The data subject may exercise at any time the rights provided for in Articles 15–22 GDPR (access, rectification, erasure, restriction, objection and portability) by writing to: info@itpcz.com.
A complaint may also be lodged with the competent supervisory authority.
11. Nature of Data Provision
Provision of personal data is necessary for the performance of professional assignments and for compliance with legal obligations. Failure to provide such data may make it impossible to establish or continue the professional relationship.
12. Updates
This notice may be updated periodically.
The updated version will be published on the Company’s website.