Privacy notice

1. Controller

Controller under Art. 4 (7) GDPR: Poruba Star - osoba rizikového kapitálu s.r.o., Schovaná 2237/2, 708 00 Ostrava, Czech Republic, IČO 176 18 169. Represented by Peter Vecera-Klüfers. Data protection contact: peter@iq-trade.com.

2. Categories of data

Contact form: name, email address, telephone number (optional), preferred call time (optional), indicated allocation range (optional), and your message.

Server logs: when you load pages, our hosting provider records IP address, requested URL, browser type, and timestamp for security and abuse prevention. Logs are rotated and deleted after a short retention period.

Local browser storage: language preference, disclaimer acceptance, access-gate state, and cookie-banner acknowledgement. These values stay on your device and are not sent to our servers. Details in our Cookie notice.

3. Purposes and legal bases

• Handling inquiries — Art. 6 (1) (b) GDPR (pre-contractual steps at your request) and Art. 6 (1) (f) GDPR (legitimate interest in responding to qualified-investor enquiries).
• Operating a secure website — Art. 6 (1) (f) GDPR (legitimate interest in security, stability, and abuse prevention).
• Storing strictly necessary preferences — Art. 6 (1) (f) GDPR (legitimate interest in a functional, language-aware site experience without tracking).
• Legal compliance — Art. 6 (1) (c) GDPR where applicable, in particular AML obligations once an investor relationship is established.

4. Recipients & transfers

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (EU). Static website files and server logs are processed there.

Contact form delivery: form submissions are transmitted to Web3Forms (web3forms.com) to forward your message by email. Web3Forms acts as a processor for this purpose.

Fonts & CDN: typefaces and icon fonts are loaded from Google (fonts.googleapis.com, fonts.gstatic.com); page styling is loaded from the Tailwind Play CDN (cdn.tailwindcss.com). These requests may transmit your IP address to the respective provider.

We do not sell personal data. We do not use analytics, advertising, or social-media tracking tools. Data is not transferred to third countries except where technically unavoidable through the external services named above.

5. Retention

Contact enquiries are kept for as long as needed to handle your request and, where a relationship develops, for the statutory retention periods under Czech and EU law (typically up to 10 years for investment-related records). Server logs are deleted after a short rotation period, usually within 30 days.

6. Your rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with a supervisory authority, in the Czech Republic: Úřad pro ochranu osobních údajů (uoou.cz)

7. Cookies

We use no tracking, analytics, or advertising cookies. Only strictly necessary first-party localStorage entries are used (language, disclaimer acceptance, access gate, cookie notice acknowledgement). No consent is required for these. See our Cookie notice.

8. Updates

Material changes to this notice are published on this page. The date at the bottom shows when the notice was last updated.