Conditions for Processing Personal Data
I. Introductory Provisions
1. These conditions for the processing of personal data by the association Českobudějovicko - Hlubocko, z.s., ID: 046 66 038, with its registered office at Masarykova 35, 373 41 Hluboká nad Vltavou, registered in the public register maintained by the Regional Court in České Budějovice under file no. L 6917 (hereinafter also referred to as "ČBHL"), which is the Controller of personal data according to Article 4(7) of the Regulation of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, govern the rules related to the protection of personal data in connection with the operation of the visitor card system of the Českobudějovicko-Hlubocko region – BUĎKARTA. In connection with concluding a contract (hereinafter also referred to as the "contract") between ČBHL and another natural person (hereinafter also referred to as the "visitor") through remote communication means, specifically the ČBHL web application available at www.budejovickakarta.cz, for the purpose of registration, obtaining, and using the BUĎKARTA visitor card, personal data (hereinafter also referred to as "personal data") are processed.
II. Scope of Personal Data Processing
1. ČBHL, through the web application when contacting the visitor, may ask the visitor to provide certain personal information. These details may include, in particular:
1.1. first and last name;
1.2. year of birth;
1.3. home address;
1.4. phone number;
1.5. email address.
2. Cookies
2.1. In the HTTP protocol, a cookie refers to a small amount of data that the WWW server sends to the browser, which then stores it on your computer. Each time you visit the same server again, the browser sends this data back to the server. Cookies are commonly used to distinguish individual users and store user preferences, etc.
2.2. ČBHL uses cookies to improve the functionality of its website and to better understand how visitors use its pages and services. Storing cookies on the visitors' computers helps ČBHL personalize or enhance the visitors' experience with its website during future visits. ČBHL does not use cookies to collect personal data such as visitors' names, but may link information in cookies with personal data obtained from visitors by other means (e.g., by completing a form when placing an order).
2.3. Specific details of the cookies used can be found in a separate document.
III. Purpose of Personal Data Processing
1. Personal data is further used so that ČBHL can contact the visitor to provide information they have requested or for the purposes of fulfilling the contract, i.e., using the visitor card system, registration, and claiming discounts and benefits with project partners, or sending commercial messages about new products. All personal data is processed in a lawful and transparent manner, and only appropriate, relevant, and necessary data are required in relation to the purpose of the processing.
2. ČBHL may use the visitor's name, surname, and email address to send commercial messages, i.e., to inform the visitor about events, publications, or services that may be of interest to them. Providing personal data for the purpose of fulfilling the contract and providing personal data for responding to visitor inquiries or requested information is a contractual requirement of ČBHL, and failing to provide it may result in the contract not being concluded or no response to the visitor's inquiries.
3. The visitor can opt-out of receiving commercial messages at any time without affecting other mutual relationships. Simply send an email to ČBHL at [email protected] or another address from which the visitor received the commercial message from ČBHL.
IV. Accessibility of Personal Data
1. Personal data may be transferred to subcontractors for the purpose of fulfilling the contract, to process the data for ČBHL. Personal data may be provided to the following third parties:
1.1. external accountants;
1.2. cooperating companies;
1.3. auditors;
1.4. external law firms;
1.5. individuals providing server, web, cloud, or IT services, or business partners.
2. ČBHL strives to secure all personal data to the greatest extent possible to prevent leakage or theft. Therefore, ČBHL limits the handling, copying, transferring, or access to the data to only the necessary purposes, for which consent has been granted, or as defined by law.
3. Personal data will not be provided to third parties from countries outside the EU and EEA.
V. Duration of Personal Data Processing
1. Personal data will be processed by ČBHL for the duration of providing services to visitors or fulfilling obligations under a mutual contract, or for the necessary time required to meet archival obligations under applicable laws, such as the Accounting Act, the Archiving and Records Act, or the Value Added Tax Act.
VI. Visitor's Rights Regarding Personal Data Processing
1. Right of access to personal data, which means that the visitor can request confirmation at any time whether their personal data is being processed, and if so, for what purposes, to what extent, to whom it is disclosed, how long it will be processed, whether they have the right to correction, deletion, restriction of processing, or to object, where the personal data was obtained, and whether automatic decision-making, including profiling, occurs as a result of processing. The visitor also has the right to obtain a copy of their personal data, with the first provision being free of charge, and a reasonable administrative fee may be charged for any subsequent provision.
2. Right to rectification of personal data, which means the visitor can request correction or supplementation of personal data if they are inaccurate or incomplete.
3. Right to erasure of personal data, meaning personal data must be deleted if:
3.1. they are no longer necessary for the purposes for which they were collected or otherwise processed;
3.2. consent has been withdrawn and there is no other reason for processing;
3.3. an objection to processing has been raised and there are no overriding legitimate grounds for processing;
3.4. processing is unlawful; or
3.5. a legal obligation requires it.
4. Right to restrict processing of personal data, which means that until disputed issues concerning the processing of personal data are resolved, specifically if:
4.1. the accuracy of personal data is disputed;
4.2. processing is unlawful, but the visitor requests restriction of processing rather than deletion;
4.3. the visitor no longer needs the personal data for processing purposes; or
4.4. an objection to processing has been raised, meaning the other party may only store personal data and further processing is conditional on consent, or on the need for the data for legal claims.
5. Right to data portability, which means the visitor has the right to receive their personal data, provided to the other party with consent for processing or for fulfilling the contract, in a structured, commonly used, and machine-readable format, and if technically feasible, for such data to be transferred to another controller.
6. Right to object to personal data processing, which means the visitor may submit a written or electronic objection to the processing of their personal data.
7. All rights mentioned above can be exercised in writing by sending a registered letter to the address of the contracting party's registered office, or by email to ČBHL at [email protected].
8. The visitor has the right to file a complaint regarding the processing of personal data with the Office for Personal Data Protection at the website here.
These Privacy Policies are effective from June 1, 2024.
Českobudějovicko - Hlubocko