1. BASIC PROVISIONS

1.1 The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is Vivadzen s.r.o., ID 14396238, with its registered office at Freyova 82/27, Vysočany, 190 00 Prague 9 (hereinafter the controller).

1.2 The controller’s contact details are:

• Address: Freyova 82/27, 190 00 Prague 9-Vysočany
• E-mail: shop@vivadzen.cz
• Phone: 605 00 47 47

1.3 Personal data covers all information about an identified or identifiable natural person.

2. SOURCES AND CATEGORIES OF PERSONAL DATA PROCESSED

2.1 The controller processes personal data you provided or data obtained through online ticket reservations, website registrations, or at the box office of cultural events.

3. LEGAL BASIS AND PURPOSE OF PROCESSING PERSONAL DATA

3.1 The legal basis for processing personal data is:

• performance of the contract between you and the controller under Article 6(1)(b) GDPR,
• the controller’s legitimate interest under Article 6(1)(f) GDPR,
• your consent to processing for direct marketing purposes under Article 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll.

3.2 The purposes of processing personal data include in particular:

• consent to processing personal data for non-personalized advertising,
• consent to personalized advertising and analysis of your purchasing preferences (e-mail, age, gender, purchasing behavior),
• handling your ticket reservations and sending confirmation e-mails and SMS messages,
• issuing electronic tickets with a numerical barcode delivered by e-mail as a PDF and by SMS after the online payment,
• sending commercial communications and other marketing activities,
• statistical purposes in anonymized form for market and public opinion research,
• statistics on website traffic.

3.3 The controller does not engage in automated individual decision-making under Article 22 GDPR.

4. DATA RETENTION PERIOD

4.1 The controller stores personal data:

• for the period necessary to exercise rights and obligations arising from the contractual relationship and to assert claims from such relationships,
• until consent to processing for marketing is withdrawn, but no longer than 3 years when the data are processed on the basis of consent.

4.2 After the retention period expires, the controller deletes the personal data.

5. RECIPIENTS OF PERSONAL DATA

5.1 Recipients of personal data include persons:

• involved in delivering services and processing payments,
• providing e-shop operation services and related support,
• providing marketing services.

5.2 For direct marketing mailings the controller uses a company outside the EU located in the United States; the transferred data are first name, surname, and e-mail address.

5.3 The controller does not intend to transfer additional personal data to third countries or international organizations.

6. YOUR RIGHTS

6.1 Under the GDPR you have the right to:

• access your personal data pursuant to Article 15 GDPR,
• rectification or restriction of processing under Articles 16 and 18 GDPR,
• erasure under Article 17 GDPR,
• object to processing under Article 21 GDPR,
• data portability under Article 20 GDPR,
• withdraw consent at the controller’s address or e-mail listed in Section 1.

6.2 You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe your rights have been infringed.

7. PERSONAL DATA SECURITY

• The controller has adopted appropriate technical and organizational measures to secure personal data.
• Technical measures protect both electronic data repositories and paper-based storage.
• Only authorized persons of the controller have access to personal data.

8. FINAL PROVISIONS

• By submitting an order via the online form you confirm you are familiar with these privacy terms and accept them in full.
• You agree to the terms by ticking the relevant box in the online or printed form.
• The controller may amend these terms and will publish the new version on its website.

These privacy terms take effect on 9 May 2023.