How we collect, use, and protect your personal data in compliance with GDPR and Czech data protection law.
Your personal data is processed by two data controllers acting in cooperation:
OVB has appointed a Data Protection Officer (DPO) in accordance with Article 37 GDPR: Advokátní kancelář Bureš & Bureš s.r.o., contact person Mgr. Jan Vohnout, email: [email protected], phone: +420 702 101 027.
We process personal data under Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll. on the processing of personal data. Our processing is based on one or more of the following legal grounds:
Depending on the nature of your interaction with us, we may collect: your name, email address, phone number, date of birth, nationality, residency status, employment status and income details, and financial information relevant to the advisory services you request.
We may also collect technical data when you visit our Website, such as your IP address, browser type, and device information, for the purposes described in the Cookies section below.
We do not collect special categories of personal data (Article 9 GDPR) without your explicit prior consent.
Personal data is used to: respond to your enquiries, connect you with a licensed financial advisor, prepare financial analyses and product recommendations, conclude and administer financial product contracts on your behalf, comply with regulatory and legal obligations (including record-keeping under CNB supervisory requirements and AML checks), and — where you have consented — send you relevant informational content.
We do not sell, rent, or trade personal data to third parties for marketing purposes.
Your personal data may be shared with: OVB Allfinanz, a.s. (primary controller), financial product providers (insurance companies, investment companies, banks, pension companies) where necessary for contract performance, regulatory authorities (ČNB, tax authorities) where required by law, and IT service providers who process data on our behalf under data processing agreements compliant with Article 28 GDPR.
Data is not transferred outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with Chapter V GDPR.
Personal data is retained for the duration necessary to fulfil the purposes for which it was collected, or as required by law. Financial advisory records are retained for a minimum of 5 years following the termination of the advisory relationship, in accordance with Czech financial services legislation. Upon expiry of the retention period, data is securely deleted or anonymised.
You may request earlier deletion at any time, subject to legal retention obligations. Contact us at [email protected] to exercise this right.
Under GDPR, you have the following rights with respect to your personal data:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (subject to legal retention obligations).
Request that processing of your data be limited in certain circumstances.
Object to processing based on legitimate interests or direct marketing.
Receive your data in a structured, machine-readable format.
To exercise any of these rights, contact us at [email protected] or contact OVB's Data Protection Officer at [email protected]. We will respond within 30 days of receiving your request.
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Czech data protection authority:
You may also contact OVB's Data Protection Officer directly for any questions or concerns regarding data processing.
For any privacy-related questions or requests:
OVB Allfinanz, a.s. has published comprehensive data protection documentation in accordance with GDPR, including an Information Memorandum on the protection and processing of personal data for both clients and tied agents. The full documentation, including the formal subject access request form (Article 15 GDPR), is available in Czech at the link below.
OVB collects and processes personal data for the purposes of providing financial intermediation services, fulfilling legal obligations under Czech financial services legislation, and for the legitimate business interests of client management and regulatory compliance.
OVB has appointed Advokátní kancelář Bureš & Bureš s.r.o. (IČO: 04625374, Na Příkopě 859/22, 110 00 Praha 1) as its Data Protection Officer. The DPO contact person is Mgr. Jan Vohnout ([email protected], +420 702 101 027).
All data protection inquiries, subject access requests, and complaints should be directed to the DPO at the contact details above. If you are not satisfied with the DPO's response, you may escalate to the Office for Personal Data Protection (ÚOOÚ).
Full OVB Data Protection Information in Czech — OVB.czThis Website uses only essential cookies that are strictly necessary for the functioning of the Website (e.g., session management, security). These cookies do not require your consent under Czech and EU law.
If we implement analytics tools (such as Google Analytics) or marketing tracking in the future, these will only be activated with your prior explicit consent via a cookie consent banner, in compliance with Directive 2002/58/EC (ePrivacy Directive) and Czech Act No. 127/2005 Coll. on electronic communications.
You can manage cookie preferences in your browser settings at any time. Note that disabling essential cookies may affect Website functionality. For more information on managing cookies, visit www.aboutcookies.org.