Privacy Policy

On this page, you will learn everything about the processing of personal data that we implement. If we process your personal data, here you will get detailed information about your rights and how to exercise them. You can find more detailed information about individual processing, about your rights, and how to exercise them under the links – the designations of individual groups of persons whose personal data we process, resp. designations of individual processes.

TL;DR Version

• We do NOT sell personal information of any kind, NOR abuse users’ information in any other way.
• All data is stored in Amsterdam, EU.
• Every 4-6 weeks, we send you an email about Eventee updates and new features. You can unsubscribe at any time.
• We use Google Analytics and other analytics tools to understand who our customers are. We do not share any personal information with these tools.
• We use TruConvert to track mouse movements on the Eventee website to see if our website sucks or not.
• We track which sites visitors come from to better understand our marketing spend. It’s important to us because we don’t want to throw money at the wall and wait if anything happens. This is essential for our growth and our ability to introduce new and better features in the future. Win-Win scenario.
• We use the chat tool Smartsupp for support, we share your name and email address with it so that in case we miss your message, we know which email to reply to.
• We use the email tool Helpscout for support, we share your name and email address with it so that we can answer you.
• You can delete individual events created in Eventee. You can also terminate the entire account. All your data will be permanently deleted.
• In no case do we work with your event dates, especially NOT with attendee information. Sharing information about attendees without the attendee’s consent is your and only your responsibility.

CUSTOMER INFORMATION, OR INFORMATION ABOUT THEIR REPRESENTATIVES

1. ADMINISTRATOR

The Administrator processes personal data for the performance of the contract and for the legitimate interest of the Administrator: conclusion of the contract and possible subsequent performance of the contract with the Customer who is using Eventee to organize their conference or other events.

2. YOUR RIGHTS

The Administrator processes personal data for the performance of the contract and for the legitimate interest of the Administrator: conclusion of the contract and possible subsequent performance of the contract with the Customer who is using Eventee to organize their conference or other events.

• ACCESS – the right to information whether or not your personal data is processed. If personal data are processed, the right to information about the processing to the prescribed extent and the right to obtain a copy of the processed data under certain conditions;
• CORRECTION – the right to request a correction if the processed personal data is inaccurate. Alternatively, the right to request for completion if the data is incomplete;
• DELETION (right to be forgotten) – the right to request the deletion of data under the conditions stipulated by law (revocation of consent, termination of the contract, illegality of processing);
• RESTRICTIONS ON PROCESSING – the right to request the designation and possible restrictions (suspension) of processing until the data accuracy is verified, lawfulness of processing, settlement of objections or for the protection of your interests (exercise or protection or defense of rights and legal interests);
• COMPLAINT – the right to contact the Office for Personal Data Protection with a complaint against the Administrator, processing or the conditions of exercising rights. Contact and other information about the office see WWW.UOOU.CZ;

You also have the right to:

• OBJECTION – the right to request that your personal data will not be further processed due to the legitimate interests of the Administrator.For individual rights, their detailed characteristics, conditions of their origin, and exercise, see the relevant link. The procedure for exercising the rights HERE.

The PERSONAL DATA PROTECTION OFFICER has not been appointed by the Administrator.

3. PURPOSE OF PROCESSING

The Administrator processes personal data for the performance of the contract and for the legitimate interest of the Administrator: conclusion of the contract and possible subsequent performance of the contract with the Customer who is using Eventee to organize their conference or other events.

4. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of personal data is: performance of the contract if the customer is a natural person (Article 6 (b) of the General Regulation) – in which case, the customer is the data subject. The legitimate interest of the Administrator, if the customer is a legal entity or other entity that determines the contact and related necessary data for the purposes of concluding the contract and performing the contract – in which case, the data subjects are people who are intended for communication.

5. RANGE OF DATA being processed

The Administrator processes the following personal data for the above purpose: Identification and contact details of the data subject

• if the data subject is a customer – identification and contact data, data on the provided product and services;
• if the data subject is a customer’s representative – identification and contact details to employment, including information on the job position.

6. THE PROVISION OF DATA IS ESSENTIAL

The provision of personal data is necessary for the conclusion and possible performance of the contract.

7. THE TIME for which personal data is stored and processed

The administrator processes personal data: contractual documents necessary for the fulfillment of the contractual relationship for the period of performance of the contract and further within a shredding period of 10 years. Other records and communications within a shredding period of 10 years.

8. THE PLACE where personal data will be processed

The place of processing of personal data is: Registered office of the Administrator.

9. RECIPIENTS to whom personal data may be provided

Personal data is provided to the following recipients (categories of recipients): no recipients.

10. THIRD COUNTRY

As part of the processing, personal data are NOT transferred outside the EU.

11. PROCESSOR

The Processor of Personal Data within the meaning of Article 4 point 8 of the General Data Protection Regulation or a third person authorized by the Administrator to process personal data may participate in the processing of personal data. In such cases, the Administrator minimizes the risk of unauthorized disclosure, destruction, processing, or loss of personal data.

12. AUTOMATED DECISION-MAKING AND PROFILING

Automated decision-making means decision-making by technological means or on the basis of the results of the activity of technological means without human interference / free decision-making.
‍
Profiling means the use of personal data to assess certain personal aspects of a person, such as an estimate of a person’s work performance, economic situation, state of health, personal preferences, interests, reliability, etc.
‍
There is NO automated decision-making in connection with the processing of personal data.
‍
There is NO profiling in connection with the processing of personal data.
‍
Rights and their application

ARTICLE I. APPLICATION OF RIGHTS IN GENERAL

1. CHANNELS TO APPLY RIGHTS

The rights can be exercised under the following conditions:

• via the Administrator’s data box;
• via the email address [email protected];
• by written submission to the address Kubesova 2623/2, Kralovo Pole, 612 00 Brno;
• In person at the address: Hlinky 80, 603 00 Brno.

2. IDENTIFICATION AND SECURE COMMUNICATION

The exercise of rights must not prejudice the rights and freedoms of third parties. For this reason, the Administrator has the right and obligation to identify the applicant for rights in necessary cases. For these reasons, the Administrator must choose secure and reliable communication. Reliable communication, in which there is no need to further verify the identity of the addressee, is always considered to be communication via an email message, post office, which is provided with a verified electronic signature, communication via a data box, communication via a postal service provider, where the document is signed and the agent’s signature has been officially verified, or the reply is sent in person.

3. ORAL APPLICATION OF RIGHTS

Exceptionally, if the beneficiary so requests, it is possible to provide information or enable the exercise of rights orally. For oral provision of information, or on the oral exercise of rights by the party, a written record shall be made. The condition for the oral exercise of rights, if the person concerned is not known personally, is the verification of his identity by means of an identity card, passport, driving license or other documents from which it can be seen that the rights are exercised by the person to whom they belong.

4. APPLICATION IN ELECTRONIC FORM

If the application is submitted, resp. if the rights are exercised by electronic filing, the reply shall also be sent in electronic form, unless the person concerned has requested otherwise.

5. COSTS

The information provided to the data subjects, the provision of copies to the data subjects, all communications, and all acts related to the exercise of the data subject’s rights shall be made free of charge.

6. REFUSAL AND FEE

If the request (exercise of the right) of the data subject is manifestly unfounded or disproportionate, in particular, because it is an identical or largely identical request or a disproportionately large request which cannot be dealt with within the statutory time limit,

• the processing of the application is conditioned by making an advance payment to cover administrative costs associated with providing the required information or communication or performing the required actions – the advance can be requested up to the number of anticipated costs, provided that information, communication, etc. provided to the data subject only after full reimbursement of the costs incurred, or
• the request is not complied with, resp. the exercise of the right shall be refused in writing with a statement of reasons.

7. DEADLINE FOR SETTLEMENT

The data subject’s requests and responses to the exercise of the data subject’s rights shall be dealt with without delay. The answer, containing the required information, or describing the action taken following the data subject’s request, etc., must be delivered to the data subject no later than 30 days from the date of receipt of the request. If it is, for serious reasons, not possible to settle the matter within the set time limit, the data subject shall, in writing or by email no later than the end of this time limit, be notified that the time limit will not be met and the reasons for it, including the time limit within which the matter will be settled; the period may not be extended by more than 60 days.

ARTICLE II. RIGHT OF ACCESS AND COPY

• the request is not complied with, resp. the exercise of the right shall be refused in writing with a statement of reasons.
• If the personal data of the data subject are processed, the data subject shall be provided with information on:
• the purposes of the processing and the legal basis / title for the processing of personal data, including a reference to the provisions of the law, and the scope and consequences of the processing;
• the potential recipient or category of recipients of the personal data;
• the transfer of personal data to third countries, if any, including information on appropriate safeguards for the security of the data transferred to the third country;
• the period for which the personal data will be stored and if such a period cannot be determined, the criteria for determining the period of storage;
• the right to request access to personal data concerning the data subject, the right to request their correction or deletion, the right to request processing restrictions, the right to object to the processing of personal data, and the conditions of individual rights and their exercise – the data subject is always provided only with information on those rights the exercise of which is relevant in connection with the processing of personal data;
• the right to data portability, the conditions for its creation and the conditions for its exercise – if the exercise of this right comes into consideration with regard to the nature of the processing of personal data;
• whether there is an automated decision-making process and the data subject’s rights associated with the automated decision-making process;
• sources of personal data and, where applicable, that the personal data come from publicly available sources;
• the right to lodge a complaint with the Supervisory Authority (Office for Personal Data Protection);
• whether there is automated decision-making in the form of profiling and the significance and expected consequences of such processing for the data subject if implemented.
• The data subject has the right to request a copy of the processed personal data. The first provision of a copy is free of charge. Additional copies are charged. Article I (6) also applies here.
• If the provision of a copy could harm the rights and freedoms of third parties (e.g. the copy contains personal data of third parties for which there is no legal reason for disclosing the data subject requesting the copy), the copy shall be anonymized accordingly. If the anonymization is not possible, or if the required information would lose the meaning by performing appropriate anonymization, a copy will not be provided.

ARTICLE III. RIGHT OF REPAIR

• The data subject has the right to correct the processed personal data if the processed personal data are inaccurate in terms of the purpose of processing or if they are incomplete in terms of the purpose of processing personal data. The data subject may request the correction (including supplementation) of the processed personal data or their supplementation.
• If the data subject exercises the right to rectify the processed personal data, the Administrator shall immediately check the processing of personal data against which the right of rectification is exercised.
• If the Administrator concludes that the objection is, even if only partially, justified, it shall immediately arrange for a remedy, i.e. the correction of the processed personal data or their supplementation.ghu
• The data subject shall be notified of the result of the investigation and the measures taken in writing or by email.

ARTICLE IV. RIGHT TO DELETION

• The data subject has the right to the deletion of personal data, which concerns them, only:
• if personal data are not needed for the purposes for which they were collected or otherwise processed;the data subject revokes the consent to the processing of personal data and if there is no other legal basis (title) for the processing of personal data; bcdschc
• the data subject revokes the consent to the processing of personal data and if there is no other legal basis (title) for the processing of personal data;
• the data subject has raised a relevant objection to the processing of personal data;
• personal data were processed illegally, especially without a legal basis (title) for the processing of personal data;
• the deletion of personal data requires the fulfillment of a legal obligation, as follows from a legal regulation or a decision issued on the basis of legal regulation;
• personal data have been collected in connection with the offer of information society services pursuant to Article 8 (1) of the General Regulation.
• Deletion of personal data means the physical destruction of the carrier of personal data (e.g. destruction of documents), or their deletion (from multimedia carriers), or other permanent exclusion from further processing of personal data.
• If the data subject exercises the right of deletion, the Administrator shall examine the data subject’s request. If the data subject’s request, even if only partially, is justified, the deletion shall be made to the extent necessary. Article I, paragraph 7 of this part also applies here.
• Until the data subject’s request is processed, the personal data against which the right of erasure has been exercised shall be flagged.
• Personal data may not be deleted if their processing is necessary:
• for the exercise of the right to freedom of expression and information;
• to comply with a legal obligation arising from legislation;
• on grounds of public interest in the field of public health (Article 9 (2) (h) and (i) and Article 9 (3) of the General Regulation);
• for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, where it is probable that erasure would make it impossible or seriously jeopardize the fulfillment of the purposes of that processing;
• determination, exercise, and exercise of the Administrator’s rights.

ARTICLE V. RIGHT TO RESTRICTIVE PROCESSING

• If the data subject exercises the right to restrict processing against specific a processing of personal data, the Controller shall immediately assess the relevance of the data subject’s request, primarily in terms of fulfilling the conditions for exercising the right to restrict processing. facts concerning the processing of personal data in question.
• The right to restrict the processing of personal data belongs to the data subject in the following cases:
• The data subject denies the accuracy of the personal data;
• The processing is unlawful and the data subject refuses to delete the personal data and calls for restrictions on their use instead;
• The controller no longer needs the personal data for processing purposes, but the data subject requires them to determine, enforce, or defend legal claims;
• The data subject has objected to the processing.
• Personal data which are subject to processing restrictions shall be marked.
• Where processing has been restricted, such personal data may, with the exception of their storage, be processed only with the consent of the data subject or for the purpose of determining, enforcing, or defending legal claims, for the protection of the rights of another natural or legal person or for reasons of overriding public interest.
• Before the cancellation of the restriction of personal data processing, the data subject shall be notified of the cancellation of the restriction in writing or by email. The communication shall state the moment when the restriction on the processing of personal data will be lifted and the reason for which it will be lifted.

ARTICLE VI. RIGHT TO TRANSFERABILITY

• If personal data obtained from the data subject (either data directly transmitted by them or data obtained about their activities, etc.), concerning the data subject, is the subject of personal data processing, the data subject shall be entitled to the transferability of such data if the processing is based on the consent of the data subject concerned or based on a contract with the data subject and if it is carried out automatically. The right to portability does not include data and information generated by the Administrator on the basis of data obtained from the data subject (e.g. profiling of the data subject’s expected consumer behavior on the basis of data obtained from the data subject, etc.).
• Under the right to portability, the data subject may request:
• the transfer of personal data which are the subject of a transferability in a structured, commonly used and machine-readable format, in particular, not in a format requiring special paid licenses or a format excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to the data subject;
• the transfer of personal data which are the subject of a transferability in a structured, commonly used and machine-readable format, in particular, not in a format requiring special paid licenses or a format excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to another data controller designated by the data subject in the personal data transfer request.
• The data subject’s request inter alia (Article I (6)), shall not be complied with if the data subject’s request would be detrimental to the rights and freedoms of other persons (data subjects).
• Requests concerning the portability of data pursuant to paragraph 2 (a) (b) shall also not be complied with unless the transfer is technically feasible, and a transfer that cannot be adequately safeguarded in view of the available technological possibilities, commensurate with the nature of the data transferred and the risks involved, shall be considered technically impracticable.
• The transferred personal data will be accompanied by information on the purpose of processing personal data and, if the data subject requests so, information on the processing of personal data within the scope of Article 13 of the General Regulation on Personal Data Protection.

ARTICLE VII. AUTOMATED INDIVIDUAL DECISION MAKING, INCLUDING PROFILING

• Decision against the data subject, legal action against the data subject, or other measure or procedure which will result in the data subject having adverse legal consequences or otherwise be affected by such an act (e.g. automated rejection of an online loan application, electronic search of applicants non-human employment and review of negative electronic system decisions), it is not possible to rely on automated individual decisions, including profiling, unless the decision is
  ‍
• necessary for the conclusion or performance of the contract between the data subject and the data controller;
• permitted by legislation laying down appropriate measures to ensure the protection of the rights and freedoms and legitimate interests of the data subject; or
• based on the explicit consent of the data subject.
• In the cases referred to in paragraphs 1 (a), (a), and (c) The controller shall ensure that appropriate measures are taken to ensure that the rights and freedoms and legitimate interests of the data subject are protected from the negative consequences of automated individual decision-making. Such measures shall include, as a minimum, ensuring that the data subject has the opportunity to express their views and adverse review of the decision by the Data Protection Supervisor before implementing the act, as well as human intervention, such as regular review of unjustified adverse interference with the rights and freedoms of the data subject, resp. to their legitimate interests.
• If the subject of the processing is sensitive data, resp. if individual decisions within the meaning of paragraph 1 are to be based on sensitive data, paragraph 2 may be followed only if sufficient guarantees are provided within the meaning of paragraph 2 of this Article and provided that the legal reason for processing personal data is the explicit consent of the data subject within the meaning of Article 9 (2) (a); a) of the General Regulation, or it is processing necessary for reasons of overriding public interest arising from the law, which is proportionate to the objective pursued, respects the essence of the right to data protection and provides appropriate and specific guarantees for the protection of the fundamental rights and interests of the data subject.

ARTICLE VIII. RIGHT TO OBJECT

• If the legal basis for the processing of personal data is a legal title pursuant to Article 6, point (1), letter (e) of the General Regulation (performance of a task carried out in the public interest or in the exercise of official authority entrusted to a lawyer) or a legal title pursuant to Article 6, point (1), letter (f) of the General Regulation (processing necessary for the protection of the rights and legally protected interests of a lawyer), the data subject has the right to object to the processing of personal data in question.
• Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning them and for that marketing, which shall include profiling if such direct marketing is concerned. If the data subject objects to processing for direct marketing purposes, personal data will no longer be processed for these purposes.
• If the data subject exercises the right to object, the Administrator shall examine the objection without delay.
• Until the objection of the data subject is settled, the personal data concerned, resp. personal data processing should be marked.
• Personal data against which a legitimate objection has been raised may not be further processed unless:
• there are serious legitimate reasons for further processing which outweigh the interests or rights and freedoms of the data subject, or
• further processing was necessary to determine, enforce, or defend the rights of the Administrator.