I grant Ugav s.r.o., registered address: Lihovarská 1060/12, 190 00 Prague 9, reg. no.: 27139069, which runs the Galerie Hala C (hereinafter referred to as the “GHC”) my free and solemn consent to the processing of the personal data I have provided, i.e. my name, surname and email address, as personal data within the meaning of Act no. 101/2000 Coll., on Personal Data Protection, and also within the meaning of Regulation (EU) 2016/679 of the European Parliament, the General Data Protection Regulation. The personal data provided shall be processed by the GHC as the controller (and, if necessary, by third parties authorised by it, as processors) by automated means electronically or manually in writing for ten years, in order to send information and invitations regarding the GHC’s activities. In order to grant this consent, I have received all the relevant information from the GHC which is contained in the Rules on the Processing and Protection of Personal Data, and I am also aware that I can withdraw this consent at any time by sending a request to the e-mail address info@galeriehalac.cz.

RULES ON the PROCESSING AND PROTECTION OF PERSONAL DATA

(hereinafter referred to as the “Rules”)

The aim of these Rules issued by Ugav s.r.o., registered address: Lihovarská 1060/12, Libeň 190 00 Prague 9, reg. no.: 27139069, which runs the Galerie Hala C (hereinafter referred to as the “GHC”) is to provide you with information about which personal data we process, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we are allowed to provide it, where you can obtain information about your personal data that we are processing, what rights you have in connection with the processing of your personal data and what the individual security options are for each of you.

HOW DO WE COLLECT PERSONAL DATA FROM YOU AND WHICH PERSONAL DATA DO WE COLLECT AND HOW LONG DO WE PROCESS IT FOR?

We obtain personal data in accordance with other legislation governing personal data protection, in particular Act no. 101/2000 Coll., on Personal Data Protection (hereinafter referred to as the “Act”), Act No. 480/2004 Coll., on Certain Information Society Services, and Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as “GDPR”).

We keep a personal data database and are the controller of these data.

We collect and process personal data either with your consent, with you being able to refuse or withdraw consent to processing at any time, or based on other statutory legal reasons, which are (i) a contract concluded with you or a measure that needs to be taken before concluding a contract, (ii) legislation, (iii) the protection of our legitimate interests.

We collect personal data for your unique and unmistakable identification (identification data), personal data enabling us to contact you (contact data) and other information relating to our relationships:

• Personal identification data means your name, surname, title, permanent home address, nationality, age, sex;
• Personal contact data means the contact address, phone number, email address and other similar information that you have provided.

The precise extent of your personal data that has been collected is always specified in the specific consent given or information about the processing of personal data, or depends on the purpose and reason for the processing, if the processing is carried out for a statutory legal reason other than your consent.

The processing of your personal data may be entrusted to external entities that provide us with administrative, professional, or technical support, or undertake marketing, business or other specific activities (hereinafter referred to as “Processors”). Both the GHC and the Processors have no intention of transferring personal data to a third country or an international organisation.

We process personal data for the period specified in the consent, if the processing is based on the consent you have granted, or for the period stipulated by law, in the case of processing based on other statutory legal reasons. At the end of the authorised processing period, we shall cease processing your personal data and shall dispose of it.

The GHC does not carry out automated individual decision-making or profiling.

FROM WHAT SOURCES DO WE OBTAIN YOUR PERSONAL DATA?

• Directly from you when you sign up to receive information or services;
• From other entities if you have given your consent;
• From publicly available registers, lists and records.

FOR WHAT PURPOSES DO WE USE AND PROCESS YOUR PERSONAL DATA?

For the purpose of carrying out the GHC’s activities, in particular sending out the newsletter, invitations to thematic events, programmes on offer, as well as for the purposes of fulfilling the contracts concluded by you and action necessary for their conclusion, fulfilling legal obligations and, if necessary, for the protection of legitimate interests, all in accordance with legal regulations.

HOW DO WE ENSURE THAT YOUR PERSONAL DATA IS PROTECTED?

Personal data is under our constant physical, electronic and procedural control; we have control, technical and security mechanisms to protect the processed data from unauthorised access or transmission, from loss or destruction, as well as from other possible misuse.

All persons who come into contact with your personal data as part of their work or contractual obligations are bound by a legal or contractual confidentiality obligation.

TO WHOM CAN WE OR DO WE HAVE TO PROVIDE YOUR PERSONAL DATA?

To our processors, who perform partial or complete processing for us based on the relevant data processing agreement.

WHAT ARE YOUR OPTIONS RELATING TO THE VOLUNTARY PROCESSING AND TRANSMISSION OF PERSONAL DATA?

In the case of voluntary processing, it is up to you to decide whether or not to grant your consent to the extent proposed by us, or to restrict it. We are bound by the scope of the consent given and we fully respect it. You can withdraw or change or adjust the scope of your consent. If you do not grant consent, or if you withdraw it, we are required to terminate the processing of your personal data within a reasonable time, corresponding to the technical and administrative possibilities. You may  again grant consent to the processing of personal data. The withdrawal of consent shall not affect the processing of such data which are processed for statutory legal reasons other than the consent of the data subject.

WHAT ACCESS DO YOU HAVE TO YOUR PERSONAL DATA AND WHAT ARE OUR OBLIGATIONS?

You have the right to request information about what personal data we process about you at the email address: info@galeriehalac.cz. We will prepare the information to the extent stipulated by legal regulations without undue delay and send it to you in reply to your email.

If you find or believe that during the processing of your personal data by us or our chosen processors your rights or obligations under law have been breached, you have the right to seek redress from the GHC. You also have the right to contact the Office for Personal Data Protection, as the supervisory authority, directly with your comments or complaints.

CHANGING YOUR PERSONAL DATA, RECTIFYING PERSONAL DATA

For proper and correct processing, it is necessary to notify us of any change in your personal data that occurs. If through our own activities we find that your personal data are not true or complete, we will ask you to rectify them; failure to rectify your data may affect the services we provide to you.

You have the right to rectify the inaccuracy of your personal data and to add to incomplete personal data.

WHERE CAN YOU OBJECT TO THE PROCESSING OF PERSONAL DATA AND WITHDRAW CONSENT TO PROCESSING OR REQUEST THEIR TRANSFER?

You have the right at any time to object to the processing of your personal data, to withdraw your consent or to change their scope by e-mail to: info@galeriehalac.cz.

RIGHT TO ERASURE

You have the right to request the termination of processing (erasure) of your personal data and to be forgotten. The right to terminate processing may be exercised if:

• the purpose of the processing no longer exists,
• consent for the processing of the personal data has been withdrawn and there is no longer a legal reason for the processing,
• you raise an objection to the processing, which is reasonable,
• the personal data are processed unlawfully,
• erasure is necessary to fulfil legal obligations, or
• the personal data have been collected in connection with an offer of information society services to a child under the age of 16.

RIGHT TO RESTRICTED PROCESSING

You have the right to the restriction of processing of your personal data. The right to restriction of processing may be exercised if:

• the processed personal data are inaccurate, for the period necessary to verify the accuracy of the personal data,
• the processing is unlawful, and you refuse to have the personal data erased and, instead, you ask for its use to be restricted,
• we no longer need your personal data for processing purposes, but you require it to identify, exercise or defend legal claims, or
• you object to the processing, until it is verified whether our legitimate interests outweigh your legitimate interests.

DATA PORTABILITY

You have the right to the portability of your personal data processed by consent or for the purpose of performing a contract. You have the right to acquire your personal data that you have provided to us in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller and the right to have this data passed directly by us to another controller (chosen by you), if it is technically feasible.

HOW DO WE INFORM YOU ABOUT THE RULES ON THE PROCESSING OF PERSONAL DATA AND THEIR PROTECTION?

These rules are available to the public on the website www.galeriehalac.cz.