Privacy policy

Who is responsible for your data

Passion Asset Advisory ("we") operates this website at passionassetadvisory.com. The office is at Main Point Karlín, Pobřežní 620/3, 186 00 Prague 8, Czech Republic. Before an engagement is formed, the written mandate identifies the contracting party and applicable terms. Privacy and data-controller inquiries reach the same desk as other confidential inquiries through the contact form.

What we collect, and why

• Consultation and seller-proposal form submissions: name, email, optional phone, location or seller country, intent, asset category, budget range, timeline, and your message. A watch enquiry form can also collect the watch model or family, optional reference, generation or movement era, approximate year, case metal, condition, completeness and document details, and confirmation that you own the watch or are authorized to discuss it. The first form does not accept files and asks you not to send a full serial number. We collect this information for exactly one purpose: responding to your inquiry and, if you engage us, running your mandate. Legal basis: pre-contractual steps taken at your request.
• Correspondence: if you write to us, we keep the thread for as long as the relationship requires.
• Technical data: this site sets no cookies and runs no advertising or behavioural trackers. Fonts and all assets are served from our own domains. Our hosting provider may log IP addresses for security; those logs are not used to profile visitors.
• PAA website access log: we record page requests, response status, timing and the browser or crawler's user-agent for site operations. Recognized AI campaign tags are saved only as a source category, such as ChatGPT. This dedicated log removes visitor IP addresses, full referrer URLs, cookies, authorization headers and query values. It does not receive the form message. Files rotate daily and are kept for no more than 30 days, subject to an earlier size limit.

What we never do

• Sell, rent, or trade your personal data, to anyone, ever
• Publish, share, or market asset details without your explicit approval
• Disclose your identity to transaction counterparties before you authorize it
• Add you to marketing lists you did not ask to join

Who processes data on our behalf

Website forms post to our own lead relay. The relay first records the submission in a restricted database on our hosting infrastructure so a notification failure does not lose your inquiry. It then sends an intake notification to the office through the Telegram Bot API and a private Telegram chat. Telegram is a separate service provider and may process data outside the EEA under its own privacy terms. If you do not want to use this route, email contact@passionassetadvisory.com before sharing asset or identity details. We share details with inspectors, authenticators, surveyors, or transaction providers only when the work requires them and after the applicable engagement terms are agreed.

Retention

The local relay copy is automatically deleted 30 days after successful notification delivery. If delivery fails, the restricted copy remains pending until it is delivered or an operator resolves it, subject to a maximum period of 24 months. This prevents silent loss without creating indefinite storage. The office removes the corresponding intake-chat notification within 30 days unless the inquiry becomes part of an active engagement record. Inquiries that do not lead to an engagement are deleted from working correspondence within 24 months. Mandate records are kept only for the period required by the engagement and applicable legal obligations, then deleted.

Your rights

Wherever you are, we honour the substance of GDPR-style rights: access to what we hold about you, correction, deletion, restriction, and portability. Ask through the contact form or email contact@passionassetadvisory.com; we respond within 30 days. EU/EEA residents may also lodge a complaint with their supervisory authority.

Changes

If this policy changes materially, the date above changes with it. Our commitments do not change: we do not sell data or publish information without approval.