Effective 1 February 2026 · Version 2.2

Privacy notice

This privacy notice (hereinafter referred to as “Privacy Notice” or “Notice”) describes the manner in which Eterny Legacy s.r.o., with its registered seat in Soudní 321, 768 61 Bystřice pod Hostýnem, registered in the Commercial Register at the Regional Court in Brno (hereinafter referred to as “Eterny Legacy” or “we”) collects, processes and safeguards your personal data. Your privacy is important to us, and we are committed to protecting your personal data.

This Notice applies to the processing of personal data within all services, applications and websites operated by Eterny Legacy in which the personal data are processed and that contain this Notice, reference to it or link thereto. It applies to the processing of personal data of visitors of our website, users of our services and also representatives of our business partners and persons who contact us through our website or otherwise, and users of Marketplace (as defined below). This Privacy Notice applies when Eterny Legacy processes personal data as a data controller.

In the event of any conflict between this Privacy Notice and any specific privacy notice applicable to any Eterny Legacy product or service, the specific privacy notice shall prevail.

In this Notice, whenever we refer to the GDPR this includes references to the UK Data Protection Act and UK GDPR as well. The provisions of this Privacy Notice are effective as of the above effective date.

IThe data we process, the purposes, and the legal basis for processing

Purpose
Purpose	Description	Processed data	Legal basis
Account registration and its usage and management	When you, as a customer or another authorized user of Eterny Legacy services, create an account of the Eterny Platform, use it and manage your account we process the described data to effectuate the creation and management of your account.	Identification details (name, surname), Log-in data (your e-mail address, password), Telephone number, Information that you are a resident of the Czech Republic, Technical data about your use of the Eterny Platform (records of your events, ID numbers, assigned by systems, etc.), Subscription payment data (subscription type, subscription duration, payment information)	Contract performance between Eterny Legacy and you as a customer.
Ensuring secure storage of documents and information	When you as a user store your documents and information on the Eterny Platform we securely store these documents and information. All data stored on Eterny is encrypted end-to-end, isolated in a separate secure environment, and continuously monitored through audit logs. Our systems undergo regular penetration testing and security reviews to ensure maximum data protection. For more information about our security practices see chapter V. Data security.	Identification data (date of birth, birth number, nationality, data from identity documents, including a photo of the relevant document), Contact data (permanent/transient address, email address, telephone number), Data about your family (e.g. marital status, information about your partner, children, parents or other close persons), Financial data (your bank, investment and pensions accounts, credit cards, investments and other financial services you use; ownership of movable and immovable property, intellectual property, investment and collectibles, ownership of other items such as cars, jewellery, electronics, etc.), Data on liabilities (loan, mortgage, credit card debt), data on digital services (web domains/profiles on social networks such as Facebook, Instagram, LinkedIn, etc., streaming services, subscriber accounts), Digital wallet information (wallet address, wallet ID, private keys, cryptocurrency seed), Information contained in your will and other relevant data (e.g. information about foreclosure proceedings, bankruptcies, personal bankruptcies, personal videos/photo, emergency contacts, personal funeral preferences, etc.), Data relating to health, religion, genetic or biometric data, Other information you upload to the Eterny Platform.	Contract performance between Eterny Legacy and you as a user, Your consent
Crypto wallet	When you link your cryptocurrency wallets with our services we will securely store the information about your cryptocurrency wallet and any associated information for you.	Digital wallet information (digital wallet, wallet ID, etc.), Identification details (name, surname, date of birth, national ID), Contact information (email, phone number, address), Account and wallet data (wallet addresses, transaction history, balances), Authentication and Security Data (Passwords or PINs, authentication codes, IP address, etc.)	Contract performance, Your consent
Bank accounts/Payment accounts	When you link your bank accounts/other payment accounts we process your data to provide you with secure access to information about your bank accounts/payment accounts, such as balances, transactions, and account details, so you can view and manage your finances easily. When you link your bank or payment accounts, your data is accessed securely under Open Banking regulation. In the Czech Republic, access is provided under a PSD2 AISP license regulated by the Czech National Bank (CNB) via Komerční banka / Finbricks. In Ireland and the UK, access is provided through the regulated Open Banking aggregator Plaid. All data are encrypted and processed securely used only to give user an overview of their balances.	Account information (account number, account type, account balance, transaction history, account and bank details, transaction metadata, etc.), Contact details (name, surname, address, email, phone number, tokens), Payment initiation data (payment amount, date and time, payment description etc.), Device ID, IP address	Your consent
Document analysis and classification through artificial intelligence	Eterny Platform services involve analysing and sorting your documents and information using artificial intelligence. This includes automatically categorizing and organizing documents, identifying key information, facilitating search and access to stored files, and providing data management features based on user needs.	The data we process depends on what information you upload to the Eterny Platform, including contact details (name, date of birth, ID number), contact details (email, phone number, address), financial data (bank account details, loans, mortgages insurance), asset data (real estate, vehicles, investments) and technical document-related data.	Contract performance between Eterny Legacy and you
Eterny AI Wizard, document analysis and insights	When you use our AI assistant, we process only pre-defined data from your documents (such as financial data, dates including contract renewal dates, interest rates, and statutory rates). We compare this against publicly available sources (such as statistical databases, bank statistics, reports from financial regulators), and our internal datasets to generate analytical insights, which may help you assess your financial situation, identify potential financial risks, detect underinsurance, highlight potential savings opportunities and provide insights and suggestions to help you more effectively understand and manage your finances.	Categories of data involved may include, for example, statutory APR rates, loan agreements, consumer credits, mortgage contracts, household loans, insurance coverage for loans and mortgages, real estate subsectors, life and motor vehicle insurance, and household financial statistics.	Contract performance between Eterny Legacy and you
Mobile Application Usage	When you download and use our mobile application on iOS or Android device, we process your personal data to enable push notifications, to improve app stability and performance and to provide you with the best possible user experience.	Device information (device type, operating system version, unique device identifiers), Mobile application usage data (app version, features accessed, session duration), Push notification tokens, Crash reports and diagnostic data.	Contract performance between Eterny Legacy and you as a user, and our legitimate interest
Professional services	The Eterny Platform includes a Marketplace service feature that allows you to connect with independent professionals who offer advisory services. As part of our services, you may, at your own discretion, choose to be referred to an independent professional (such as a lawyer) via our Marketplace. If you decide to engage professional services, please note that these professionals operate independently from Eterny and that you enter into a separate relationship directly with them. In this context, they act as independent controllers with respect to the personal data you provide to them outside of the Eterny Platform.	Your search queries and preferences, Professionals you view or contact, Information you choose to share with professionals (including documents from your Account). For professionals, we process: Profile information (name, qualification, experience, contact details), Service descriptions and pricing.	Contract performance
Trusted contacts	When you designate a Trusted contact, or a independent professional, you may grant them access to your secure storage in Eterny platform either with limited viewing rights or full access, based on your explicit consent. When you share data with a professional (such as a lawyer, etc.) via the Marketplace, that professional becomes an independent data controller for the personal data you provide to them. Please note, that Eterny Legacy acts solely as the provider of the Marketplace platform. When choosing to share data with professional, we recommend reviewing the professional’s privacy practices before sharing your personal data.	Your identification data (first name, last name), Contact data (e-mail address), Information about your relationship with the user	The performance of the contract between Eterny Legacy and you as a user of the Eterny Platform.
Management of our contractual relationships	When you or your organization engage with us as a customer, business partner, advisor, or in a similar capacity, we may process your personal data for the purpose of effectively managing and maintaining our contractual relationship.	Identification details (name, surname), Contact details (address, phone number, e-mail address), Information about the company you work for and your work position.	Contract performance between Eterny Legacy and you as a customer or business partner (if the customer or business partner is an individual), or Our legitimate interest (if the customer or business partner is a legal entity).
Provision of customer service and support	When you use our services or contact our support team for assistance, we process your personal data necessary to provide you with service or handle your request.	The personal data necessary to provide you with service or handle your request, such as contact details (name, email address, phone number, e-mail address), communication content (messages, chat logs, emails or call recording etc.)	Contract performance
Improvement of our services and products	We process your data to improve our services and products and to provide you with the best possible user and customer experience.	Identification details (name, surname), Contact details (address, phone number, e-mail address), Content of your feedback and your ideas shared with us by various means, Information about usage of our services/products, Additional communication between you and us about provided feedback or ideas.	Our legitimate interest to improve our products and services and to provide you with the best customer and user experience, Your consent.
Direct marketing and promotion	We use your contact information and other information as described data for marketing our product to you i.e., if you sign up for our newsletter or other marketing communication. In certain cases, we may use third parties or publicly accessible information to enhance our data for marketing purposes.	Identification details (name, surname), Contact details (address, phone number, e-mail address), Information about newsletters you signed up for and your preferences regarding marketing communication (if any), Information about the company you work for and your work position.	Your consent. In relation to use of third-party data and publicly available information, the legal basis for processing is your consent or our legitimate interest.
Recruitment process and hiring	If you apply for any open job positions at Eterny Legacy, we will process personal data you provide to us for the purposes of evaluating your suitability for any of our open positions. If you are a successful candidate, you will receive a job offer and we will process your personal data to proceed with the hiring process.	Identification details (name, surname), Contact details (address, phone number, e-mail address), Information from your CV, Cover Letter about your past positions, qualifications, etc., Any further information you share with us during the recruitment process., The salary offer for the position and other relevant job details.	Legitimate interest to find the most suitable candidate for the position, or Pre-contractual relationship with you., Fulfilment of legal obligations
Defending our rights and claims	When you make a legal claim against us, or when we need to protect our rights through legal or other means, we process your data necessary to be able to effectively defend our rights and defend ourselves against a claim.	We process your data necessary to be able to effectively defend our rights and defend ourselves against a claim, such as identification details (name, surname, ID number), account or service data (contracts, service usage records relevant to the claim), communication content (emails, messages, call logs, or correspondence related to the claim).	Our legitimate interest in defending against claims or fulfilling legal obligations or our contractual commitments.
Fulfilment of legal obligation	In some instances, legal regulations impose obligations on us under which we are obliged to process personal data. Such cases are for instance tax and accounting laws, whistleblowing laws, anti-discrimination laws and the provision of some data to public authorities based on applicable legislation.	We process your data within the scope as required by applicable legislation, such as identification details (name, surname), contact details (address, email address, etc.), health information, or other data specifically mentioned in relevant laws.	Fulfilment of legal obligations imposed upon us by the applicable legislation.
Contacting us	If you contact us via our website or by different means we will process your data to reply and provide you with what you have requested.	Identification details (name, surname), Contact details (address, phone number, e-mail address, etc.), Information about the company you work for and your work position, Any further information you share with us.	Your consent or our legitimate interest to conduct business.

Account registration and its usage and management

Description: When you, as a customer or another authorized user of Eterny Legacy services, create an account of the Eterny Platform, use it and manage your account we process the described data to effectuate the creation and management of your account.
Processed data: Identification details (name, surname), Log-in data (your e-mail address, password), Telephone number, Information that you are a resident of the Czech Republic, Technical data about your use of the Eterny Platform (records of your events, ID numbers, assigned by systems, etc.), Subscription payment data (subscription type, subscription duration, payment information)
Legal basis: Contract performance between Eterny Legacy and you as a customer.

Ensuring secure storage of documents and information

Description: When you as a user store your documents and information on the Eterny Platform we securely store these documents and information. All data stored on Eterny is encrypted end-to-end, isolated in a separate secure environment, and continuously monitored through audit logs. Our systems undergo regular penetration testing and security reviews to ensure maximum data protection. For more information about our security practices see chapter V. Data security.
Processed data: Identification data (date of birth, birth number, nationality, data from identity documents, including a photo of the relevant document), Contact data (permanent/transient address, email address, telephone number), Data about your family (e.g. marital status, information about your partner, children, parents or other close persons), Financial data (your bank, investment and pensions accounts, credit cards, investments and other financial services you use; ownership of movable and immovable property, intellectual property, investment and collectibles, ownership of other items such as cars, jewellery, electronics, etc.), Data on liabilities (loan, mortgage, credit card debt), data on digital services (web domains/profiles on social networks such as Facebook, Instagram, LinkedIn, etc., streaming services, subscriber accounts), Digital wallet information (wallet address, wallet ID, private keys, cryptocurrency seed), Information contained in your will and other relevant data (e.g. information about foreclosure proceedings, bankruptcies, personal bankruptcies, personal videos/photo, emergency contacts, personal funeral preferences, etc.), Data relating to health, religion, genetic or biometric data, Other information you upload to the Eterny Platform.
Legal basis: Contract performance between Eterny Legacy and you as a user, Your consent

Crypto wallet

Description: When you link your cryptocurrency wallets with our services we will securely store the information about your cryptocurrency wallet and any associated information for you.
Processed data: Digital wallet information (digital wallet, wallet ID, etc.), Identification details (name, surname, date of birth, national ID), Contact information (email, phone number, address), Account and wallet data (wallet addresses, transaction history, balances), Authentication and Security Data (Passwords or PINs, authentication codes, IP address, etc.)
Legal basis: Contract performance, Your consent

Bank accounts/Payment accounts

Description: When you link your bank accounts/other payment accounts we process your data to provide you with secure access to information about your bank accounts/payment accounts, such as balances, transactions, and account details, so you can view and manage your finances easily. When you link your bank or payment accounts, your data is accessed securely under Open Banking regulation. In the Czech Republic, access is provided under a PSD2 AISP license regulated by the Czech National Bank (CNB) via Komerční banka / Finbricks. In Ireland and the UK, access is provided through the regulated Open Banking aggregator Plaid. All data are encrypted and processed securely used only to give user an overview of their balances.
Processed data: Account information (account number, account type, account balance, transaction history, account and bank details, transaction metadata, etc.), Contact details (name, surname, address, email, phone number, tokens), Payment initiation data (payment amount, date and time, payment description etc.), Device ID, IP address
Legal basis: Your consent

Document analysis and classification through artificial intelligence

Description: Eterny Platform services involve analysing and sorting your documents and information using artificial intelligence. This includes automatically categorizing and organizing documents, identifying key information, facilitating search and access to stored files, and providing data management features based on user needs.
Processed data: The data we process depends on what information you upload to the Eterny Platform, including contact details (name, date of birth, ID number), contact details (email, phone number, address), financial data (bank account details, loans, mortgages insurance), asset data (real estate, vehicles, investments) and technical document-related data.
Legal basis: Contract performance between Eterny Legacy and you

Eterny AI Wizard, document analysis and insights

Description: When you use our AI assistant, we process only pre-defined data from your documents (such as financial data, dates including contract renewal dates, interest rates, and statutory rates). We compare this against publicly available sources (such as statistical databases, bank statistics, reports from financial regulators), and our internal datasets to generate analytical insights, which may help you assess your financial situation, identify potential financial risks, detect underinsurance, highlight potential savings opportunities and provide insights and suggestions to help you more effectively understand and manage your finances.
Processed data: Categories of data involved may include, for example, statutory APR rates, loan agreements, consumer credits, mortgage contracts, household loans, insurance coverage for loans and mortgages, real estate subsectors, life and motor vehicle insurance, and household financial statistics.
Legal basis: Contract performance between Eterny Legacy and you

Mobile Application Usage

Description: When you download and use our mobile application on iOS or Android device, we process your personal data to enable push notifications, to improve app stability and performance and to provide you with the best possible user experience.
Processed data: Device information (device type, operating system version, unique device identifiers), Mobile application usage data (app version, features accessed, session duration), Push notification tokens, Crash reports and diagnostic data.
Legal basis: Contract performance between Eterny Legacy and you as a user, and our legitimate interest

Professional services

Description: The Eterny Platform includes a Marketplace service feature that allows you to connect with independent professionals who offer advisory services. As part of our services, you may, at your own discretion, choose to be referred to an independent professional (such as a lawyer) via our Marketplace. If you decide to engage professional services, please note that these professionals operate independently from Eterny and that you enter into a separate relationship directly with them. In this context, they act as independent controllers with respect to the personal data you provide to them outside of the Eterny Platform.
Processed data: Your search queries and preferences, Professionals you view or contact, Information you choose to share with professionals (including documents from your Account). For professionals, we process: Profile information (name, qualification, experience, contact details), Service descriptions and pricing.
Legal basis: Contract performance

Trusted contacts

Description: When you designate a Trusted contact, or a independent professional, you may grant them access to your secure storage in Eterny platform either with limited viewing rights or full access, based on your explicit consent. When you share data with a professional (such as a lawyer, etc.) via the Marketplace, that professional becomes an independent data controller for the personal data you provide to them. Please note, that Eterny Legacy acts solely as the provider of the Marketplace platform. When choosing to share data with professional, we recommend reviewing the professional’s privacy practices before sharing your personal data.
Processed data: Your identification data (first name, last name), Contact data (e-mail address), Information about your relationship with the user
Legal basis: The performance of the contract between Eterny Legacy and you as a user of the Eterny Platform.

Management of our contractual relationships

Description: When you or your organization engage with us as a customer, business partner, advisor, or in a similar capacity, we may process your personal data for the purpose of effectively managing and maintaining our contractual relationship.
Processed data: Identification details (name, surname), Contact details (address, phone number, e-mail address), Information about the company you work for and your work position.
Legal basis: Contract performance between Eterny Legacy and you as a customer or business partner (if the customer or business partner is an individual), or Our legitimate interest (if the customer or business partner is a legal entity).

Provision of customer service and support

Description: When you use our services or contact our support team for assistance, we process your personal data necessary to provide you with service or handle your request.
Processed data: The personal data necessary to provide you with service or handle your request, such as contact details (name, email address, phone number, e-mail address), communication content (messages, chat logs, emails or call recording etc.)
Legal basis: Contract performance

Improvement of our services and products

Description: We process your data to improve our services and products and to provide you with the best possible user and customer experience.
Processed data: Identification details (name, surname), Contact details (address, phone number, e-mail address), Content of your feedback and your ideas shared with us by various means, Information about usage of our services/products, Additional communication between you and us about provided feedback or ideas.
Legal basis: Our legitimate interest to improve our products and services and to provide you with the best customer and user experience, Your consent.

Direct marketing and promotion

Description: We use your contact information and other information as described data for marketing our product to you i.e., if you sign up for our newsletter or other marketing communication. In certain cases, we may use third parties or publicly accessible information to enhance our data for marketing purposes.
Processed data: Identification details (name, surname), Contact details (address, phone number, e-mail address), Information about newsletters you signed up for and your preferences regarding marketing communication (if any), Information about the company you work for and your work position.
Legal basis: Your consent. In relation to use of third-party data and publicly available information, the legal basis for processing is your consent or our legitimate interest.

Recruitment process and hiring

Description: If you apply for any open job positions at Eterny Legacy, we will process personal data you provide to us for the purposes of evaluating your suitability for any of our open positions. If you are a successful candidate, you will receive a job offer and we will process your personal data to proceed with the hiring process.
Processed data: Identification details (name, surname), Contact details (address, phone number, e-mail address), Information from your CV, Cover Letter about your past positions, qualifications, etc., Any further information you share with us during the recruitment process., The salary offer for the position and other relevant job details.
Legal basis: Legitimate interest to find the most suitable candidate for the position, or Pre-contractual relationship with you., Fulfilment of legal obligations

Defending our rights and claims

Description: When you make a legal claim against us, or when we need to protect our rights through legal or other means, we process your data necessary to be able to effectively defend our rights and defend ourselves against a claim.
Processed data: We process your data necessary to be able to effectively defend our rights and defend ourselves against a claim, such as identification details (name, surname, ID number), account or service data (contracts, service usage records relevant to the claim), communication content (emails, messages, call logs, or correspondence related to the claim).
Legal basis: Our legitimate interest in defending against claims or fulfilling legal obligations or our contractual commitments.

Fulfilment of legal obligation

Description: In some instances, legal regulations impose obligations on us under which we are obliged to process personal data. Such cases are for instance tax and accounting laws, whistleblowing laws, anti-discrimination laws and the provision of some data to public authorities based on applicable legislation.
Processed data: We process your data within the scope as required by applicable legislation, such as identification details (name, surname), contact details (address, email address, etc.), health information, or other data specifically mentioned in relevant laws.
Legal basis: Fulfilment of legal obligations imposed upon us by the applicable legislation.

Contacting us

Description: If you contact us via our website or by different means we will process your data to reply and provide you with what you have requested.
Processed data: Identification details (name, surname), Contact details (address, phone number, e-mail address, etc.), Information about the company you work for and your work position, Any further information you share with us.
Legal basis: Your consent or our legitimate interest to conduct business.

IICookies and other tracking technologies

Our websites and services (jointly “Websites”) use cookies and equivalent local storage to collect information about individuals who visit and use our Websites. These are small files that are stored on your device. They help us to operate our Websites, provide important features and functionalities and enable us to better understand how you use our Websites.

We use the following types of cookies:

(i) essential (strictly necessary) cookies and equivalent local storage, which are necessary to provide access to our website and to the services you have specifically requested. On this website these are the record of the answer you gave the cookie banner, and the light or dark mode you selected. We process this data on a contractual basis – to provide you with the services requested by you – and on the basis of our legitimate interest to operate the Websites. It is not possible to disable these through the Privacy settings: the first of them is how we remember not to ask you again.
(ii) analytical (performance) cookies help us analyse how you move around our website and what content is relevant to our users. They are used for performance measurement and improvement. We process your personal data based on your consent, which you may give or refuse in the cookie banner and change at any time through the Privacy settings.

We do not use functional cookies beyond the essential storage described above, and we do not use advertising cookies on this website.

We may collect the following information through cookies: IP address, type of device, device ID, gender, time zone, browser settings, operating system, website traffic information including URL, searched terms, information about what you have viewed or searched for on our website, website response time, download errors, length of visits to certain pages, information about how you interact with the website (such as scrolling, clicking and hovering).

In the following list we provide you with information about the specific cookies that are used by our Websites, who their provider is and how long they are stored on your device:

Cookie (name)
Cookie (name)	Provider	Retention period	Classification
_ga	Google Analytics 4	2 years	Analytical – set only with your consent
_ga_NBNTYBHPM2	Google Analytics 4	2 years	Analytical – set only with your consent
eterny.consent.v1 (local storage)	Eterny	Until you clear it	Essential – the record of the answer you gave the cookie banner
theme (local storage)	Eterny	Until you clear it	Essential – the light or dark mode you selected

_ga

Provider: Google Analytics 4
Retention period: 2 years
Classification: Analytical – set only with your consent

_ga_NBNTYBHPM2

Provider: Google Analytics 4
Retention period: 2 years
Classification: Analytical – set only with your consent

eterny.consent.v1 (local storage)

Provider: Eterny
Retention period: Until you clear it
Classification: Essential – the record of the answer you gave the cookie banner

theme (local storage)

Provider: Eterny
Retention period: Until you clear it
Classification: Essential – the light or dark mode you selected

Until you accept analytical cookies, and if you refuse them, Google Analytics still receives a record that a page was opened, containing your IP address, the page address and basic device characteristics. No cookie is set, no identifier is stored on your device, and these records cannot be linked to you or joined to your other visits. Accepting analytical cookies is what allows those separate records to be recognised as one visit.

When you visit our Websites, you will be informed via the cookie banner located at the bottom of the website that we collect cookies. This banner allows you to manage what cookies Eterny Legacy can collect. You can change your settings and withdraw your consent at any time via the privacy settings at the bottom of our Websites.

Other tracking technologies

We do not use pixels, web beacons or URL tracking on this website, and we do not embed social plugins. The links to our profiles on LinkedIn, Instagram and Facebook in the footer are ordinary links: your browser contacts those networks only if you follow one, and they learn nothing about your visit if you do not.

Where a technology of this kind is added, it will be listed in the table above before it is switched on, and it will be subject to the same consent as the analytical cookies.

Disabling cookies

If you do not wish cookies to be collected, you can restrict, block or delete them at any time by adjusting your browser configuration. If you wish to prevent the installation of new cookies or if you wish to delete existing cookies, you can find instructions in the help pages of the browser you are using – Internet Explorer, Firefox, Google Chrome and Safari each document their own procedure.

For mobile devices, you can limit tracking through your device’s privacy settings (by turning off the advertising identifier), see networkadvertising.org/mobile-choice.

In addition, you can use a third-party tool to opt out of targeted advertising. Third party opt-out tools available include Digital Advertising Alliance, Network Advertising Initiative and European Interactive Digital Advertising Alliance (Europe only).

To opt out of receiving cross-device web advertising (i.e., tracking a user across devices), you can access your device settings or visit and use the controls described on NAI Mobile Choices.

IIIHow long will we process your data?

In general, personal data shall be retained for as long as necessary for the purpose for which they were processed. The period for which Eterny Legacy will retain your personal data also depends on the legal basis on which your data are processed. If the processing is based on a legitimate interest, your data will be processed for the duration of that legitimate interest of Eterny Legacy. In the case of data retained on the basis of legal obligations, the retention period is determined by applicable legal regulations. For data processed on the basis of the performance of a contract, the data are processed for the duration of the contractual relationship and for the relevant limitation period. If the processing is based on your consent, your personal data will be deleted after the withdrawal of consent. You can withdraw your consent to the processing of your personal data at any time by sending a message to hello@eterny.io. Please note that the same data may also be processed on more than one legal basis, in which case your withdrawal of consent or request for erasure of personal data may not result in the complete erasure of your personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

If you create an account on our website or application, we will process your personal data for the duration of that registration. You can request deletion of your account at any time.

VData security

Data security is our top priority. Eterny Legacy implements measures to ensure that your personal data is stored securely, that personal and financial data is processed strictly on a need-to-know basis, encrypted in transit and at rest, isolated in a separate secure environment, and continuously monitored through audit logs.

Eterny Legacy has taken appropriate technical and organizational measures to secure the personal data processed by Eterny Legacy, including, for example:

Encryption: All sensitive data is encrypted both in transit and at rest while using quantum-resistant cryptography endorsed by NIST.
Access controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege only and logged.
Secure hosting: We store data on secure servers with robust firewalls and intrusion detection systems and monitoring.
Password protection: All systems and databases are protected by strong password policies and multi-factor authentication, with the banking-level trust semantics.
Employee training: Our team undergoes regular training to understand and comply with data security best practices.
Regular updates: Our software, systems, and hardware are regularly updated to address potential security vulnerabilities.
Regular penetration testing, security reviews and vulnerability assessments: We regularly test our systems to identify and mitigate security risks and ensure maximum data protection.
Regulatory compliance: Security measures comply with PSD2 SCA and PSD3/PSR1 standards to ensure financial-grade protection.

These measures do not relieve you of the obligation to take appropriate measures to secure your personal data. You should, among other things, change your passwords regularly. On the other hand, you should not, among other things, use predictable usernames and/or passwords, share your passwords with others or provide access to your administrator account and/or disclose your personal information to others. Eterny Legacy will never ask you for your password in any unsolicited communication. Immediately notify us of any unauthorized use of your administrator account or any other suspected breach of security.

VIYour rights

Under the GDPR, you are entitled to the following rights:

Right of access

You have the right to be informed about, among other things, what personal data Eterny Legacy holds about you, for what purposes and who the recipients of your personal data are.

If you are a UK resident, when handling your access request, Eterny will conduct a reasonable and proportionate search, to identify and provide you with the personal data it holds in accordance with the UK GDPR. Eterny will respond to your access request without undue delay and within the applicable time period.

If your request is incomplete and requires clarification, we may contact you to obtain further details to facilitate the exercise of your rights. Please note that the period beginning with the day on which we make the request and ending with the day on which we receive the information from you does not count towards the applicable time period.

Right to rectification

You have the right to have any of your incomplete, inaccurate or outdated personal data rectified.

Right to erasure

You are entitled to the erasure of certain personal data that we have collected and processed about you.

Right to restriction of processing

In given cases such as when we process inaccurate personal data about you, or you deem the processing as no longer necessary, you may ask for a restriction of the processing.

Right to data portability

You have the right to obtain the personal data you provide to us in a structured, commonly used and machine-readable format and to request that it be transferred to another controller, if technically feasible. Please note that the right to data portability only applies to data that you have provided to us and that we process as controller on the basis of your consent or the performance of a contract.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is carried out in the public interest or for the purposes of Eterny Legacy’s legitimate interests, including profiling.

Right to withdraw consent

If your data is processed based on your consent, you are entitled to withdraw such consent at any time. Kindly note that the withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.

Right to opt out from marketing communication

You are entitled to opt out from receiving marketing communication. You can exercise this right in accordance with the opt-out rules described in each marketing e-mail or other form of communication via the unsubscribe option in the footer of every e-mail or by directly contacting Eterny Legacy.

Right not to be subject to automated individual decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision is necessary for entering into, or performance of, a contract between you and Eterny Legacy; is authorised by the law and the law lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or is based on your explicit consent.

Eterny Legacy does not make decisions based solely on automated processing that would have significant effects on its users. For the sake of completeness, we note that Eterny Legacy uses cookies and similar technologies, the use of which may constitute profiling. Information on how to withdraw your consent to the use of cookies or disable cookies can be found in the chapter about cookies of this Privacy Notice.

Right to lodge a complaint

If you believe that your data has been processed unlawfully, please contact us and we will try to resolve the issue. Under the GDPR, you have the right to file a complaint with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic. Your ability to exercise your rights may be limited if Eterny Legacy is required to retain your personal data for legal obligations, legal claims or other reasons as set out in the relevant data protection law.

If you are a UK resident and believe that your personal data has been processed unlawfully, you have the right under the UK GDPR to file a complaint via email address: hello@eterny.io.

VIIContact details

If you wish to exercise any of your rights set out above, please contact us at hello@eterny.io. If you would like to learn more about Eterny Legacy, its privacy protection or this Privacy Notice, you may contact Eterny Legacy at the same address.

Please help Eterny Legacy to keep your information up to date. If you believe that any data processed by Eterny Legacy is incorrect, or if you believe that Eterny Legacy is not complying with this Privacy Notice, please contact Eterny Legacy at hello@eterny.io.

VIIIFinal provisions

The English-language version of this Notice shall be controlling in all respects and shall prevail in case of any inconsistencies with translated versions Eterny Legacy may provide, if any.

This Privacy Notice may be amended by Eterny Legacy at any time. If we make any material or substantial changes to this Privacy Notice, we will post the updated version of the Privacy Notice to our website and/or other places we deem appropriate. We may notify you of the change via sending you an email or providing other notice of the update, however you should check this Privacy Notice from time to time for any significant changes to its text.

The other documents

Questions about any of this? hello@eterny.io