THE PROCESSING OF PERSONAL DATA
I. Basic information
Gala Media s.r.o., ID No.: 17746493, VAT No.: CZ17746493, with registered office at Rybná 716/24, Staré Město, 110 00 Prague, a company registered in the Commercial Register maintained by the Municipal Court in Prague, Section C 375982, as the controller, processes your personal data (hereinafter referred to as the "Company").
The Company provides its customers with the operation of 360° photo booths including additional services. The Company, as a data controller, fully respects the principles of data protection when processing the personal data of its customers and, in accordance with the applicable legislation, informs its customers below about the manner and scope of processing and provides them with other important information regarding the protection and processing of personal data.
In processing personal data, the Company fully complies with the rules set out in Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (the "Regulation") and Act No. 110/2019 Coll., the Personal Data Processing Act, as amended, and strictly adheres to all set procedures in accordance with these regulations.
II. Personal data controller and its identification
The controller is the person who has the personal data of the data subject (customers) and determines the purpose and means of processing. The Company is a data controller as it collects personal data of its customers for the purposes of fulfilling obligations under contractual relationships, compliance with related legal obligations and, in the case of express consent, for sending marketing communications and promoting the Company's services.
The Company hereby informs its customers that a Data Protection Officer has not been appointed by the Company and the Company also has no representative for compliance with its obligations under the Regulation.
The Company's contact details are set out at the head of this document.
III. Scope and categories of processing of personal data
The company processes only those personal data that are necessary for the proper negotiation of the contractual relationship with the customer, the performance of obligations under concluded contracts, the fulfilment of legal obligations, the protection of the company's interests and, in the case of explicit consent to the processing of personal data by the customer, the data, which is necessary for informing the customer about the company's services and products, news, events, competitions, catalogues, advertisements, evaluation of competitions and sending prizes, holiday and birthday wishes and similar events (hereinafter referred to as "marketing purposes"). The Customer may also grant the Company consent to the processing of videos taken by the 360° photo booth at the event requested by the Customer. If the videos show images of persons other than the customer, the customer is obliged to inform these persons and ensure their consent to the processing of personal data (videos) or inform the company that consent to the processing of videos of these persons has not been given. On the basis of such consent, the Company processes the videos for the purpose of self-promotion on its website www.gala360.cz, or on social networks and similar platforms aimed at promoting the Company.
Categories of customer personal data processed by the company:
(a) identification data - name, surname, delivery and billing address of the customer, video,
b) contact data - email address and phone number, location and time of the event.
IV. Purpose of processing personal data, lawfulness of processing
Processing of personal data without the need for consent:
a) for the purpose of negotiating the relevant contract and providing contractual performance:
- This is the voluntary provision of personal data by a customer who is interested in the company's services,
b) for the purpose of fulfilling the company's legal obligations:
- the company also processes personal data if it is required to do so by law,
c) processing on the basis of the company's legitimate interests:
- In particular for the purpose of asserting legal claims, protecting and promoting the legitimate interests of the company.
Processing of personal data with the customer's consent:
Giving the customer's consent is entirely voluntary, but at the same time necessary for the Company to inform them about its products and services, news, promotions, contests, catalogues, advertisements, contest evaluations and the sending of prizes, wishes for holidays, birthdays and similar events. The Customer further grants the Company permission to use the videos to promote the Company's services.
The customer gives consent via an electronic form on the Company's website.
The company does not provide the customer's personal data to third parties for marketing purposes.
The Company hereby informs its customers that without their consent, it is not possible to send information to the customer about the Company's products and services, news, events, competitions, catalogues, advertisements, competition evaluations and prize awards, holiday and birthday greetings and similar events.
The Customer may withdraw the consent granted at any time by writing to info@gala360.cz.
V. Declaration on the use of cookies
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation, this website stores files, commonly referred to as cookies, on your device.
What are cookies
Cookies are small data files that allow the websites you visit to remember the actions and settings you have made on them, so that you do not have to enter this information repeatedly. They allow a website to record information about your visit, such as your chosen language or the contents of your shopping basket. This can make your next visit to the website easier and more enjoyable. Cookies are not dangerous, but they are important for privacy protection. Cookies cannot be used to identify visitors to the website or to misuse login details.
Types of cookies
e) a) Strictly necessary: These cookies enable basic functions such as security, identity verification and network management. These cookies cannot be disabled.
f) b) Marketing: These cookies are used to track the effectiveness of advertising campaigns so that we can provide more relevant services and better ads based on your interests.
g) c) Functional: These cookies collect data to remember user choices so that we can provide a better and more personalized experience.
h) d) Analytical: These cookies help us understand visitor behaviour on our site, detect errors and provide better overall analytics.
Use of cookies
Through cookies, we collect and process information about you, how you use our website and your activity on the website. We use cookies on the basis of legitimate interest and consent, for the purpose of proper use of the website, as well as to personalise the content of advertisements, provide site and social media features and analyse website traffic. We process the personal data provided in electronic form in an automated manner. We transfer the personal data collected via cookies to our social media, advertising and analytics partners.
Consent to the storage of cookies
Your consent is required for the use of cookies other than strictly necessary cookies. The use of cookies can be set using your internet browser. Most browsers automatically accept cookies by default. By using this website, you agree to the storage of cookies. You can restrict or block the use of cookies in your web browser settings. For information on the settings of your specific browser, please visit the addresses listed:
- Internet Explorer: support.microsoft.com
- Google Chrome: support.google.com
- Mozilla Firefox: support.mozilla.org
- Opera: help.opera.com
- Safari: support.apple.com
VI. The period for which personal data are processed.
The personal data of the company's customers are processed for the period of time during which the company provides its services to these persons or for the duration of the contractual relationship.
After the termination of the contractual relationship and the settlement of all related obligations, the company retains the personal data for the necessary period required by the relevant legislation, e.g. the Accounting Act, the Archives and Records Act, the Value Added Tax Act, etc., as well as for the duration of the general and special limitation periods for individual claims.
In the case of consent granted for the processing of personal data for marketing purposes, the retention period is 3 years from the date of consent. In the case of consent granted for the processing of videos for the purpose of company promotion, the retention period is 20 years.
The company follows the principle of data minimisation when storing personal data. When the purpose of processing the personal data ceases or the period for which the company is obliged or entitled to retain the personal data expires, the personal data is completely deleted from the company's records and system. Thus, personal data is never processed or stored for longer than is strictly necessary.
VII. Who has access to personal data, to whom it is provided.
In order to ensure the above processing purposes, personal data of customers, in addition to the company and its employees, may also be processed by other processors with whom the company has concluded contracts for the processing of personal data in accordance with the Regulation and the law.
In particular, the following are the processors of personal data:
- Persons providing or participating in the provision of the Company's services,
- The company's legal representative or auditor,
- IT technician,
- The insurance company in the event of a reported insurance claim.
The company processes personal data in an automated manner, but does not use profiling.
VIII. What are the rights of our customers.
a) Right to information regarding the processing of personal data
The right to information means all the customer rights contained in Article 13 of the Regulation. In particular, it is the right to know the identity and contact details of the data controller, the purpose and legal basis of the processing of personal data, the recipients or categories of recipients of personal data, the period of storage of personal data, the rights of the data subject (customers) and the possibilities of exercising them.
(b) Right of access to personal data
The right of access to personal data means all the customer rights contained in Article 15 of the Regulation. In particular, it is the customer's right to obtain confirmation from the company as to whether and, where applicable, for what purpose personal data are processed.
The customer has the right to request from the company copies of the personal data processed. In the event of repeated and manifestly unfounded requests, the company is entitled to charge the customer a reasonable fee to cover the administrative costs of obtaining a copy.
(c) Right to rectification
The right of rectification means all the rights of the customer contained in Article 16 of the Regulation, in particular the right to have inaccurate or incorrect personal data concerning the customer rectified by the company without undue delay.
The basis for exercising this right is the communication of the facts leading to the rectification or completion to the company.
d) Right to erasure (right to be forgotten)
The right to erasure means all the rights of the customer contained in Article 17 of the Regulation, in particular the right of the customer to have his personal data erased by the company without undue delay upon request, provided that the conditions set out in the Regulation are met.
e) Right to restriction of processing
The right to restriction of processing shall mean all the rights of the customer contained in Article 18 of the Regulation, in particular the right to restrict the processing of his personal data to the most necessary lawful grounds.
This right can be exercised in particular in cases where it is not clear whether and when the personal data will have to be deleted.
(f) Right to object
The right to object means all the rights of the customer contained in Article 21 of the Regulation. If the customer discovers or believes that the company is processing his/her personal data in violation of the protection of his/her private life, in violation of the Regulation or in violation of the law, he/she may request an explanation from the company or request that the situation be remedied.
(g) Right to data portability
The right to data portability shall mean all the rights of the customer contained in Article 20 of the Regulation, in particular the right to obtain and/or transfer to another data controller the personal data that the customer has provided to the Company in a structured, commonly used and machine-readable format.
h) The right to lodge a complaint with the Data Protection Authority
The customer also has the right to lodge a complaint with the Data Protection Authority, which acts as a supervisory authority in matters of data protection. The customer's right to other means of protection is not affected.
Where customers can exercise their rights.
Customers may exercise the individual rights set out in Article 7 of this information document by contacting the Company via email: info@gala360.cz.
The Company is obliged to resolve customer requests within a maximum of 1 month from the date of receipt of the request. In justified cases, in particular with regard to the scope of the request, the company is entitled to extend the deadline for comments to 2 months, the company will always inform the customer in due time of the need for an extension.