Principles of personal data processing

This document provides information about the manner and the extent of your personal data processing, including the extent of your rights related to that:

WHO IS THE PERSONAL DATA CONTROLLER?

The Roman Catholic Parish Kutná Hora – Sedlec, Company ID: 46402101, VAT ID: CZ46402101, with a registered office at Zámecká 127, Kutná Hora – Sedlec registered in the Register of Registered Churches and Religious Societies, maintained by the Ministry of Culture of the Czech Republic pursuant to Act no. 3/2002 Coll., on churches and religious societies, as amended (hereinafter referred to as "RCP").

FROM WHAT SOURCES DO WE COLLECT THE PERSONAL DATA?

We collect the personal data from you directly, based on your purchase of the e-ticket from the RCP or the Partner organization.

WHAT PERSONAL DATA DO WE COLLECT?

In the process of the e-ticket purchase:

  • name, surname, address, email, and phone number

FOR WHAT PURPOSES DO WE USE THE PERSONAL DATA?

We use the personal data for the purposes of the performance of the e-ticket sale contract, which we have entered into with you, i.e., for the purpose of:

  • delivering the e-ticket to the email address provided by you;
  • checking the e-ticket and allowing entry to the Event;
  • settling any complaints and an eventual refund of the entrance fee;
For the purposes of processing due to the rightful interest of the RCP or the Partner organization, i.e.:
  • preventing and detecting fraudulent behavior (e.g., reselling e-tickets for profit without a business license).

HOW LONG DO WE KEEP THE PERSONAL DATA?

We keep the personal data only until the Event takes place, or until the customer's claims arising from the participation in the Event are settled, or longer if required by law or as a result of a rightful interest of the RCP, e.g., for the purposes of settling or exercising our claims.

We do not keep the data for longer than we are entitled to; we erase the relevant personal data when the legislative reasons for keeping them discontinue.

WHO ARE WE ALLOWED TO PROVIDE THE PERSONAL DATA TO?

To the Partner organization (the Event organizer), who is always identified on the specific e-ticket, for the purposes of fulfilling the contract for the sale of the e-ticket and for the processing purposes due to the rightful interest of the Partner organization.

To the Global Payments s.r.o. company conducting business in the Czech Republic with the registered office at V Olšinách 626/80, Strašnice, 100 00, Praha 10, Czech Republic, Company ID: 04235452, registered in the Commercial register maintained by the Municipal Court in Prague, section C, file 244453, for the purposes of executing and matching the payment if the payment for e-ticket was made via the GP webpay payment gate.

To subjects authorized by law to request such data.

IS PROVIDING THE PERSONAL DATA A VOLUNTARY ACT?

Providing your personal data is completely voluntary and is based on a contractual basis; if you refuse to provide us with the requested personal data, we won’t be able to sell you the e-ticket via RCP;

WHAT ARE YOUR RIGHTS CONCERNING THE PERSONAL DATA RELATED TO THE E-TICKET PURCHASE?

A right to access the personal data

  • You have the right to request the copy of your personal data that we process about you.
A right to rectify the personal data
  • You have the right to request updating, completion, or rectification of your personal data if you believe that they are inaccurate or incomplete.
A right to erase the personal data
  • You have the right to request the erasure of your personal data if they are no longer needed for the purposes for which they were processed.
A right to restrict personal data processing
  • You have the right to request the restriction of processing if you deny the accuracy of your personal data or if their processing is illegal, but you refuse erasure of such personal data.
  • You have this right even if the RCP no longer needs the personal data for the processing purposes, but you require their further processing (to a limited extent) so that you could, for example, file a claim with a court for which you need the personal data processed by us.
A right to portability of the personal data
  • You have the right to so-called portability of personal data to another controller if it is technically doable.
A right to object to the personal data processing
  • You can object to the personal data processing at any time. In such case, we will not process your personal data any further unless we are entitled to it by law and/or it would be in contrary to the processing purpose. If you object to processing for the purpose of direct marketing (including profiling), we will stop processing your personal data for this purpose without further notice.

WHAT ARE THE TIME LIMITS FOR RESOLVING MY REQUESTS?

We will respond to your requests related to the exercising of your rights within 30 days of receiving the request without undue delay.

RCP will inform the personal data recipient about the request for the restriction of processing, rectification, completion, or erasure of the personal data without undue delay. The only exceptions are cases when informing the recipient proves to be impossible or when it would require a disproportionate effort.

HOW DOES THE RCP ENSURE THE PERSONAL DATA PROTECTION?

We store the personal data in a secured electronic form and use them to fulfill the aforementioned purposes, or we transfer them to the persons specified below.

We have implemented appropriate technical, administrative, and physical security measures to protect your personal data from unauthorized access, transfer, from its loss or destruction, or from any other possible abuse.

The persons who deal with the personal data within the scope of their work or contractual obligations are bound by a lawful or contractual obligation of confidentiality.

DO WE TRANSFER YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EU OR TO AN INTERNATIONAL ORGANIZATION?

No, the provision of services by the RCP does not require transferring your personal data to countries outside the EU or to other international organizations.

WHERE CAN YOU FILE A COMPLAINT AGAINST THE PERSONAL DATA PROCESSING?

You have the right to file a complaint with the supervising authority indicated below if you believe that the rules of your personal data protection were breached during their processing:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7, Czech Republic
Telephone number: +420 234 665 111

The RCP may occasionally adjust or update these principles. If you continue to use the RCP services even after the adjustments or updates of these principles have been done, it is considered that you agree with them.

If you have a question related to the personal data, you can send it to the email of our officer for personal data protection: Mgr. František Steidl, solicitor poverenec@bihk.cz

In Kutná Hora on 6th November 2019