Personal Data Processing Policy

The company Červená Liška Gallery s.r.o., ID No.: 140 85 771, with its registered office at Staroměstské náměstí 480/24, Staré Město, 110 00 Prague 1, registered in the Commercial Register of the Municipal Court in Prague, file No.: C 36031 (hereinafter referred to as "ČLG"), processes, as a controller, manually, automatically, in paper and electronic form, the personal data of data subjects and handles them in accordance with the following principles of personal data processing and applicable legal regulations, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"). The website operator is ČLG. The website is operated in the Czech Republic.

Personal data is processed via a camera system on the premises of ČLG, where ČLG monitors its premises with a camera system for the purpose of protecting its legitimate interests and ensuring the protection of property (including the property of data subjects) and the Praga Magica exhibition. The premises where the cameras are located are always marked with a warning sign. In accordance with the GDPR, these principles apply in full to personal data processed through the camera system.

Purpose of processing

ČLG processes the personal data of its customers (or potential customers), their representatives, business partners, if they are natural persons, employees, users of the ČLG website, and possibly other persons (hereinafter referred to as "data subjects"), in particular for the purposes set out below, on the basis of legal titles established by the GDPR and to the extent necessary to fulfill the purpose for which they were collected:

• Marketing purposes, including sending commercial communications by electronic means in accordance with Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts, as amended (consent to the processing of personal data)
• Selection of job applicants for the offered position, keeping them in the job applicant database as potential employees, or contacting them with job offers at ČLG in the event of relevant positions becoming available (consent to the processing of personal data)
• Provision of services (fulfillment of contractual or pre-contractual obligations)
• Customer service (fulfillment of contractual or pre-contractual obligations)
• Making changes to contracts (fulfillment of contractual or pre-contractual obligations)
• Complaint handling (fulfillment of contractual or pre-contractual obligations)
• Fulfilment of employment contracts, in particular payroll accounting, etc. (fulfillment of contractual or pre-contractual obligations)
• Risk management (fulfillment of legal obligations)
• Providing assistance and cooperation with supervisory authorities (fulfillment of legal obligations)
• Keeping accounting and tax records (fulfillment of legal obligations)
• Archiving (fulfillment of legal obligations)
• Fulfillment of employer obligations arising from labor law regulations, in particular the recording of pension insurance sheets, calculation of monthly tax advances, payment of health insurance, income tax returns, etc. (fulfillment of legal obligations)
• Transfer of personal data between affiliated entities (legitimate interest of ČLG)
• Provision of commercial offers (legitimate interest of ČLG)
• Development and improvement of products and services, market research (legitimate interest of ČLG)
• Ensuring operational activities (legitimate interest of ČLG)
• Protection of the property, rights, and legitimate interests of ČLG and data subjects (legitimate interest of ČLG)
• Enforcement, realization of security or other enforcement of claims, assignment of claims to third parties (legitimate interest of ČLG)
• Keeping customer records (legitimate interest of ČLG)
• Exercising the legitimate interests of ČLG as an employer in relation to employees, providing educational courses and training for employees, organizing joint events for employees, etc. (legitimate interest of ČLG)
• Fulfilling obligations in the area of whistleblower protection, in particular receiving reports of violations or imminent violations, assessing reports, notifying whistleblowers, keeping records of reports (fulfilling legal obligations)

Personal data processed

ČLG processes the following categories of personal data in particular:

• Identification data:
• First name, last name, title
• Date of birth, birth number, ID number, VAT number
• Other data specified in the identity document
• Location data:
• network identifier (IP address),
• information about the movement of individuals on ČLG premises (especially in the Praga Magica exhibition area),
• contact data:
• address, registered office, place of residence
• telephone number,
• email address,
• financial data:
• bank account number,
• payment card information,
• descriptive and other data:
• data on the data subject's relationship to the ČLG,
• data necessary for the fulfillment of the ČLG's record-keeping and reporting obligations as an employer,
• data on the data subject's qualifications and work experience and other data included in the CV of a job applicant at ČLG, including documents proving education, professional qualifications, and other relevant facts,
• data processed on the basis of the use of cookies,
• capture of appearance (including figure) and other descriptive data,
• biometric data:
• facial image,
• signature.

Personal data processing period

ČLG stores personal data only for the necessary period, i.e. in particular for the period specified by legal regulations, the duration of the contractual relationship, consent or legitimate interest of ČLG, for the period necessary to protect the rights of ČLG and to settle mutual rights and obligations between ČLG and the data subject, etc. After this period, ČLG will destroy the personal data, unless otherwise specified by law.

In relation to camera recordings, ČLG processes personal data for a maximum period of 30 days.

Recipients of personal data

ČLG makes personal data available only to authorized employees and cooperating persons or individual processors/recipients of personal data with whom ČLG has concluded a processing agreement in accordance with Article 28 of the GDPR. The current version is available upon request at the ČLG headquarters. In cases specified by law, ČLG is authorized, or rather obligated, to transfer certain personal data to law enforcement authorities or public authorities, or entities authorized to perform tasks in the public interest, based on applicable legal regulations. Categories of recipients:

• public authorities of the Czech Republic (state administration, local government, and other public administration bodies), e.g., the General Directorate of Customs, the General Financial Directorate, ministries, the State Labor Inspection Office, courts, municipal offices, health insurance companies, and, where applicable, bailiff offices;
• the Czech Police, public prosecutors, and courts;
• security agencies;
• marketing, PR, media, and communications;
• IT service providers and software suppliers;
• postal service providers and insurance companies;
• accounting and tax service providers.

ČLG may transfer personal data to other European Union member states under the same conditions as those applicable to the transfer of personal data to third parties within the Czech Republic. When transferring personal data to countries outside the European Union, ČLG always proceeds in accordance with the provisions of Chapter V of the GDPR. At the same time, it requires a special declaration guaranteeing the proper processing of personal data and annual confirmation of the validity of this declaration, or the issuance of an updated declaration.

Rules for the use of cookies

The purpose of cookies on the ČLG website www.pragamagica.eu is to improve the user experience while respecting privacy. For this reason, below you will find a description of the cookies used, as well as information on how to prevent them from being stored on the user's device. ČLG is required to obtain the consent of website users for the use of cookies on its website. If consent is not given, the user is in no way prevented from using the ČLG website. The user gives their consent via a pop-up window (the so-called cookie bar) when they first visit the ČLG website. The user's consent is not required for the use of so-called functional or strictly necessary cookies.

Allowing/blocking cookies

When visiting the www.pragamagica.eu website for the first time, the user can either give blanket consent to the use of all categories of cookies (Accept all), select only strictly necessary cookies (Reject all), or select individual types of cookies (Manage individual preferences). Most web browsers also offer the option to control stored cookies through browser settings. Settings may vary between browsers, so it is necessary to always follow the instructions in the browser's help section.

Details about cookies

Cookies used on the website www.pragamagica.eu are divided into the following categories:

1. Strictly necessary,
2. Performance and analysis,
3. Targeting and advertising.

Essential

These are essential cookies without which it would not be possible to operate the website. They include, for example, cookies for storing selected settings or remembering logins. User consent is not required to use these cookies.

Performance and analysis

These cookies are used to measure and analyze website traffic (number of visitors, pages viewed, average viewing time, etc.). User consent is required to use these cookies. The data is anonymized.

Targeting and advertising

These are used for advertising displayed on third-party websites, including social networks and contextual advertising. They are tailored to user preferences and help ČLG measure the effectiveness of advertising campaigns. User consent is required to use these cookies.

For more information about cookies, visit https://www.aboutcookies.org/.

Cookies used on the ČLG website www.pragamagica.eu

Rights of data subjects

Data subjects have the following rights under personal data protection legislation:

1. Right of access – data subjects have the right to obtain information from ČLG, as the controller, about whether it processes their personal data and, if so, what data is processed and how it is processed;
2. Right to rectification – the data subject has the right to have ČLG rectify inaccurate personal data concerning him or her without undue delay at his or her request;
3. Right to erasure (right to be forgotten) – the data subject has the right to have ČLG destroy the personal data it processes about the data subject if the specified conditions are met and the data subject requests it;
4. Right to restriction of processing – the data subject has the right to have ČLG restrict the processing of their personal data in certain cases;
5. Right to data portability – the data subject has the right, if the specified conditions are met, to obtain from ČLG the personal data that they have provided to ČLG and to transfer it to another controller or, if technically possible, to request that the controllers transfer the personal data between themselves;
6. Right to object to processing – the data subject has the right to object at any time to processing that is based on the legitimate interests of ČLG, a third party, or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
7. Right to withdraw consent – if ČLG processes the data subject's personal data on the basis of their voluntary consent, the data subject has the right to withdraw this consent at any time.

Please note that in the event of repeated or manifestly unfounded requests to exercise the above rights, ČLG is entitled to charge a reasonable fee for exercising the right in question or to refuse to exercise it.

If you have any questions or complaints regarding the processing of personal data by ČLG, you can contact ČLG directly in writing at its registered office or by email at info@pragamagica.eu, or you can contact the Office for Personal Data Protection.