PERSONAL DATA PROCESSING POLICY
The association Porozumění mysli z.s. – organizer of the “Listening with the Heart 2024 Conference”
1. WHAT IS THIS DOCUMENT?
As part of the ticketing process for our conference, we require your personal data in order to supply you with attendance tickets. This involves the personal data processing. By the document we would like to inform you about the way we process your personal data.
2. WHO ARE YOU?
We are the association Porozumění mysli z. s., ID No. 070 03 838, with registered office at Emilie Floriánové 2834/9, 466 01 Jablonec nad Nisou, Czech Republic, registered under No. L 13389 at the Regional Court in Ústí nad Labem. We are the organizer of the “Listening with the Heart 2024 Conference”
3. WHAT CAN BE FOUND IN THIS DOCUMENT?
In this document we would like to inform you about you about the way we process your personal data in connection with the sale of tickets for the “Listening with the Heart 2024 Conference” and related processing operations.
4. WHAT IS PERSONAL DATA?
Personal data are any personal information that we process. It is information that you either provide us directly or provided in other way (e.g. when using our app, login forms, website or social media etc.). Personal data can be further divided into categories, for example:
Categories
Identifying information (e.g. name, last name, title, nickname...)
Address details (e.g. name of municipality, street, house number, postcode)
Contact details (e.g. email, phone number, social media nickname)
Payment details (e.g. billing details or account number)
Content of communication (E.g. content of our communication or your messages)
It is not the case that personal data is always processed to the extent mentioned above. It will always depend on the specific situation.
5. ON WHAT BASIS CAN YOU PROCESS MY PERSONAL DATA?
Please be assured that we always process your personal data in accordance with the GDPR, and always on the valid legal basis. According to Article 6 of the GDPR, we can only process your personal data if:
- you give us your free and always revocable consent to do so;
- the processing is required by law and the processing is carried out in the performance of our legal obligation;
- the processing is required by a contract that we have entered into or are about to enter into;
- we have a legitimate interest in processing your personal data and such legitimate interest overrides your privacy rights.
The basis on which we process your personal data in a particular case can be found below.
6. HOW DO YOU PROCESS MY PERSONAL DATA IN THE CASE OF TICKET PURCHASES?
If you wish to purchase tickets for our event, we require your personal data to do so.
In this case, we process your personal data for the following purposes:
Purpose.
Scope: Identification data, contact data, address data, payment data
Legal title: Necessary for the performance of the contract (or legitimate interest of the controller if you represent a legal entity)
Duration of processing: For the duration of the contract and subsequently for 3 years after termination of the contract (basic data on the contractual relationship for 10 years)
Purpose: To contact you by email and telephone regarding offers of products and services that are similar to the products and services purchased
Scope: Identification data, contact details, information about the services and products purchased
Legal title: So-called customer exception
Processing period: For the duration of the contract and subsequently for 3 years after its termination
Purpose: Sending offers, newsletters, and other information, including third-party offers, tailored to your corresponding requirements
Scope: Identification data, contact details
Legal title: Consent
Duration of processing: Until withdrawal of consent
It is your free choice whether you entrust us with the above personal data. However, the truth is that without them we cannot conclude a contract with you and enable you to participate in our event. In order to purchase tickets, it is not obligatory for you to give us consent to receive commercial communications – likewise, you can exclude the customer exception at any time.
7. HOW DO YOU PROCESS MY PERSONAL DATA IN THE CASE OF FREE ACCESS?
If you wish to take advantage of the free access to the Conference streaming, we need to provide us your personal data, which we will process for the following purposes:
Purpose: To register to receive the link, including to receive offers, newsletters, and other information from the administrator, including third party offers, tailored to what you might like
Scope: Identification information, contact information
Legal title: Consent
Duration of processing: Until withdrawal of consent
We would also like to use your address to send you commercial communications. You are always free to remove your consent.
8. FOR HOW LONG DO YOU PROCESS PERSONAL DATA?
We only process your personal data for as long as necessary, never longer than we really need to. All processing periods can always be found under the respective purpose above.
9. TO WHOM DO YOU DISCLOSE PERSONAL DATA?
We only disclose your personal data to third parties if we are required to do so by law or on the basis of a processing contract. We list the categories of recipients below, and we are always happy to give you specific information about particular recipients.
E.g.: SmartEmailing, MioWeb, Web s úsměvem, FAPI.
10. WHAT RIGHTS DO I HAVE IN RELATION TO THE PROCESSING OF PERSONAL DATA?
In view of the fact that we process your personal data, you have various rights towards us, the content, conditions of exercise and limitations of which we would like to inform you about.
10.1 Right of access
Virtually anyone has the right to contact us and obtain confirmation from us as to whether or not we are processing their personal data. Above and beyond this, you have the right at any time to ask us for more information about the processing of your personal data, such as the purposes of the processing, the categories of data concerned, the recipients, the duration of the processing, your rights, etc.
You also have the right to obtain from us a copy of any personal data we process about you. The only reason why we should not comply is if it would adversely affect the rights and freedoms of other persons or data subjects.
10.2 Right to rectification
Should you find that we process your personal data inaccurately (e.g. we have an old address, contact details, etc.), you always have the right to ask us to correct or complete the inaccurate data on the basis of your additional declaration.
10.3 Right to erasure (right to be forgotten)
We only process your personal data for a period of time specified by us and then delete it immediately. However, you also have the right to write to us to request that we delete your personal data if one of the following reasons applies
- the personal data is no longer needed for the purposes above;
- you withdraw your consent to the processing of your personal data;
- you object to a legitimate interest and we assess that this legitimate interest does not outweigh your rights (in the case of marketing purposes based on legitimate interest, we will delete the data immediately);
- the processing was unlawful;
- the erasure is required by Czech or EU law.
However, we may not be able to comply in all cases. Sometimes there are reasons why we should retain your personal data where it is necessary to do so:
- To exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest in the field of public health;
- for archiving purposes in the public interest; for scientific or historical research purposes; or for statistical purposes;
- for the establishment, exercise or defence of legal claims.
10.4 Right to restriction of processing
If you ask us to do so, we will stop processing your personal data, or we will keep it stored but not otherwise process it. This right is called the "right to restrict processing" and can only be exercised in the following cases
- you contest the accuracy of the personal data for the time necessary to verify its accuracy;
- the processing is unlawful, you refuse to erase the personal data and you request a restriction on its use;
- we no longer need the personal data for the purposes of processing but you require us to retain it for the establishment, exercise or defence of legal claims;
- you raise an objection against a legitimate interest, pending an assessment of its validity.
10.5 Right to portability
Where we process your personal data by automated means and the processing is based on consent or necessity for the performance of a contract, you have the right to so-called portability. The right to portability guarantees that we will transmit the data you have provided to us in a commonly used and machine-readable format, or that we will transmit the data to another controller that you identify to us.
10.6 Right to object to processing based on legitimate interest
Where we process your personal data on the basis of legitimate interest, you have the right to object to this processing on the grounds of legitimate interest. In the case of processing for direct marketing purposes, you do not have to justify the request and we will immediately stop processing your personal data in accordance with the GDPR.
This is the case, for example, when we send you commercial communications about similar products or services that you have purchased from us, i.e. on the basis of the so-called customer exemption. If you do not wish to do this, please let us know by sending us an email or by providing us with this information at the relevant point during registration or ordering and we will not do so or will cease to do so. Similarly, you can use the unsubscribe link at the bottom of the email within our business communications.
In other cases, we have the right to review your objection and assess whether your rights take precedence over our legitimate interests.
10.7 Right to withdraw consent
If we process your personal data on the basis of consent, you of course have the right to refuse and withdraw consent at any time. In this case, we will not continue with further processing and, unless prevented by law, we will delete your personal data.
However, if we also process your personal data on the basis of another legal title, we are not obliged (sometimes not even allowed) to delete the personal data in question.
10.8 Right to lodge a complaint with the Data Protection Authority
If you believe that we are processing your personal data unlawfully, you of course have the right to lodge a complaint with the supervisory authority, which is the Data Protection Authority (www.uoou.cz).
11. HOW CAN I EXERCISE THE ABOVE RIGHTS?
If you would like to exercise your rights, please email us at info@naslouchamesrdcem.cz or use the settings in your user account, if this is possible for the right in question.
12. DO YOU TRANSFER PERSONAL DATA OUTSIDE THE EU?
We do not.
13. DO YOU USE AUTOMATED INDIVIDUAL DECISION-MAKING IN THE PROCESSING OF PERSONAL DATA?
We do not.