INFORMATION MEMORANDUM ON PERSONAL DATA PROCESSING AND PROTECTION
Fun in Prague, s.r.o.
a corporation having its registered office at Jana Růžičky 1143/11, Kunratice, 148 00 Prague 4
ID No.: 27448631
registered in the Commercial Register of the Municipal Court in Prague, file no.: C 113852
We, the business corporation Fun in Prague, s.r.o.(hereinafter referred to as the “Company” or “We”), as the personal data controller, hereby inform our customers, business partners, website users and the users of the Internet-based shop www.funinprague.eu, as well as other entities whose personal data we process, about the processing of personal data and principles of privacy protection at the Company.
In the text below, you will learn, in particular:
We declare that, in processing personal data, we proceed in line with fundamental principles of personal data processing, namely:
Should you require an explanation of any part of this text or any advice, or should you wish to discuss further processing of your personal data, you can approach us at any time by e-mail at firstname.lastname@example.org.
1) Scope of personal data processing
We process the data that you have provided to us or data legitimately obtained from publicly accessible public registers. The data that we usually process may include:
a) Your first name and surname/company name;
b) Address of residence or registered office;
c) Date of birth, identification number, and tax identification number;
d) Number of your identification document/passport;
e) Telephone number;
f) E-mail address.
2) Purpose of processing
We will use the data that you provide to us for the following purposes:
For the purposes specified above, we are authorised to process your personal data even without your consent.
The provision of personal data required for the purpose of the fulfilment of an agreement and provision of personal data in order to answer a question raised by you or provide information sought by you constitutes our contractual requirement and a failure to provide them may result in the non-conclusion of an agreement or non-provision of a response to questions raised by you. This applies mutatis mutandis for the purpose of the performance of the Company’s legal obligations.
With your consent, if you have granted it to us (save for direct marketing that constitutes the Company’s legitimate interest not requiring explicit consent), we can use your personal data for example to issue you a customer card and include you in our loyalty system or to send you commercial communications, i.e., to inform you about events, publications, performances, or services that we provide and that we think may be in your interest, etc.
You can refuse the processing of your personal data for the purpose of receiving commercial communication at any time. You need only to send us an e-mail with the relevant request to email@example.com or to another address from which you received a commercial communication from us.
3) Who has access to your personal data
Your personal data will be processed by Us, the Company, as the controller. We do not deal in your personal data and do not transfer them to third countries, as defined by the GDPR. For the purposes named above, we can transfer your personal data to our subcontractors in order that they can process them for us. To that end, personal data may be transferred, in particular, to the following entities:
4) Duration of personal data processing
Personal data provided in connection with an existing contractual relationship shall be processed by us for the duration of the contractual relationship and then for the period required, in particular with a view to statutory limitations periods of our mutual claim or the duration of product liability, but for a maximum of 10 years after the termination of the relationship or for a period required to comply with an archiving obligation imposed by applicable legislation, such as the Accounting Act, the Archiving and Records Act, or the Value-Added Tax Act. Personal data provided on the basis of your consent shall be processed by us for the period specified in your consent, but in any event only as long as your consent is not withdrawn.
5) Your rights arising from personal data processing
You have the following rights in relation to our processing of your personal data:
a) The right of access to personal data;
b) The right to rectification;
c) The right to erasure (“right to be forgotten”);
d) Right to the restriction of the processing of data;
e) The right to object to processing; and
f) The right to lodge a complaint with respect to personal data processing.
Your rights are explained below, in order that you may get a clearer idea of their contents.
The Company has no legal obligation to appoint a data protection officer as defined by the GDPR. All your rights may be exercised by contacting us in writing by post or e-mail at firstname.lastname@example.org.
A complaint may be lodged with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
The right to access means that, at any time, you can request our confirmation as to whether personal data concerning you are or are not being processed, and, if so, then for what purpose, to what extent, to whom they are being disclosed, how long will we process them, whether you have a right to rectification, erasure, restriction of processing, the right to object, where we obtained your data and whether automated decision-making, including any profiling, is being performed on the basis of the processing of your personal data. Furthermore, you have a right to obtain a copy of your personal data, with the first provision being free of charge, and for any additional provision, the Intermediary may demand adequate reimbursement of administrative expenses.
The right to rectification means that you can ask us any time to correct or supplement your personal data if they are imprecise or incomplete.
The right to erasure means that we must delete your personal data if: (i) they are no longer required for the purpose for which they were collected or otherwise processed; (ii) processing is unlawful; (iii) you raise objections against processing and there are no prevailing legitimate reasons for processing; or (iv) we have a legal obligation to do so.
Right to the restriction of processing means that, until we resolve any disputable issues concerning the processing of your personal data, we must restrict the processing of your personal data such that we can only have the data stored and, if required, we can use them for the establishment, exercise, or defence of legal claims.
The right to raise an objection means that you can raise an objection against the processing of your personal data that we process for direct marketing purposes or on the basis of a legitimate interest.
If you raise an objection against processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
This Information Memorandum takes effect on 1 October 2020
Fun in Prague, s.r.o.