Privacy Policy and Information on the Processing of Personal Data

Collegium Marianum – Týnská škola s.r.o. (hereinafter referred to as “CM”), with its registered office at Vodičkova 700/32, 110 00 Prague 1; Company ID No.: 25700359, VAT ID No.: CZ25700359, contact details: [vstupenky@collegiummarianum.cz](mailto:vstupenky@collegiummarianum.cz), tel.: +420 224 229 462, +420 731 448 346, registered with the Municipal Court in Prague, file No. C 62365, incorporated on 12 October 1998, as a personal data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), processes personal data for a clearly defined purpose.

Events organised by CM constitute a public cultural service; CM is therefore entitled to collect and process personal data in connection with this activity also on the basis of its legitimate interest.

In certain situations, we require your consent to process your personal data.

Conversely, we do not require your consent if the legal basis for processing your personal data is our legitimate interest, or if we need your personal data for the performance of a contract or for compliance with obligations imposed by law or another legal regulation. However, you always have the right to information about the processing of personal data and its purpose.

For all the purposes listed above, we use personal data only for the period strictly necessary to fulfil the relevant purpose.

You have the right to object to processing carried out on the basis of our legitimate interest. In some cases, legitimate interest may overlap with the fulfilment of obligations arising from a contractual relationship.

We collect personal data used for your clear and unambiguous identification (identification data), personal data enabling us to contact you (contact details), and other information related to our relationship:

  • identification data, which means in particular title, first name and surname
  • contact details, which means personal data enabling us to contact you, in particular email address, telephone number, residential address and other similar information
  • payment details, which usually means a bank account number; we process this information only in justified cases, for example for the purpose of paying wages, fees or other similar payments to which we are obliged, for example, under a contractual relationship.

The specific scope of your personal data collected is always specified in the particular consent granted or in the information on personal data processing.

In the case of processing required by law, we process personal data for the period stipulated by legal regulations; in the case of voluntary processing, for the period stated in the consent.

We obtain personal data:

* directly from you when you purchase tickets for concerts;
* directly from you when you register for workshops and seminars;
* directly from you when you subscribe to receive information or services;
* from other entities, if you have given your consent to this;
* from publicly accessible registers, lists and records.
* from potential clients interested in the services of our organisation as part of marketing events and campaigns.

Sending information about concerts of the Summer Festivities of Early Music, Baroque Evenings and the activities of Collegium Marianum The legal basis is our legitimate interest in providing and offering cultural services and activities that correspond to your needs, and in informing you about our activities.
For this purpose, personal data may be processed for the period strictly necessary to fulfil the purpose of processing.
However, you may request that such information no longer be sent to you.
Electronic Means of Communication A cookie is a short text file that a visited website sends to your browser. It allows the website to record information about your visit, such as your preferred language and other settings. Your next visit to the website can therefore be easier and more productive. Cookies are important because they enable a website to remember important information that makes its further use easier for you.
You can influence the extent to which individual types of cookies are stored primarily through the settings of your browser. You can also delete existing cookies that have already been stored on your end device.

Principles of Personal Data Processing

  • Lawfulness
    We process your personal data in accordance with the applicable legal regulations of the Czech Republic and the EU, and in particular in accordance with the GDPR.
  • Consent of persons to whom the personal data relate
    We process personal data only in the manner and to the extent to which you have granted us your consent, provided that consent is the legal basis for processing, i.e. where consent is necessary for the processing in the given case.
  • Minimisation and restriction of personal data processing
    We process personal data only to the extent necessary to achieve the purpose of their processing, and for no longer than is necessary to achieve the purpose of their processing.
  • Accuracy of the personal data processed
    We process personal data with an emphasis on their accuracy, using available measures, and we process up-to-date personal data.
  • Purpose limitation
    We process personal data only to the extent necessary to fulfil the stated purpose and in accordance with that purpose.
  • Security
    We process personal data in a manner that ensures their appropriate security, including their protection by means of suitable technical or organisational measures against unauthorised or unlawful processing and against accidental loss, misuse or damage.

What Personal Data We Process and for What Period

CM collects and subsequently processes personal data
a) on the basis of law, where the provision of our services is dependent on the processing of your personal data. Specifically, this concerns processing necessary for:

* the performance of a concluded contract,
* compliance with our legal obligation,
* the protection of our legitimate interest,
* the performance of a task carried out in the public interest.

b) on the basis of your consent; you may refuse consent to processing or withdraw it at any time.

Who Processes Your Personal Data and Who Has Access to It

CM processes your personal data as a controller. This means that CM employees determine the purposes defined above for which they collect your personal data, determine the means of processing, and are responsible for the proper implementation of such processing and for the protection of your personal data.

CM employees process personal data only for the stated purpose of which you have been informed, or on the basis of your consent.

All CM employees access your personal data ethically, maintain confidentiality with respect to such data, and protect your personal data against misuse.

We may also share personal data, to the necessary extent and for the period strictly necessary, with carefully selected legal or natural persons who provide services to us or on our behalf, or who cooperate closely with us – for example, service companies that carry out regular maintenance of CM’s IT system. These entities are restricted by contractual provisions so that they do not use personal data for any purpose other than providing services to CM.

Rights of Data Subjects

As a data subject, you have:

  • the right to request access from CM to your personal data (i.e. you have the right to obtain confirmation from CM as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right to obtain access to such personal data and to the information specified in Article 15 of the GDPR),
  • the right to rectification (i.e. you have the right to have CM rectify without undue delay inaccurate personal data concerning you, as well as the right to have incomplete personal data completed, including by means of providing a supplementary statement within the meaning of Article 16 of the GDPR),
  • the right to erasure (i.e. you have the right to have CM erase without undue delay personal data concerning you where one of the grounds set out in Article 17 of the GDPR applies),
  • the right to restriction of processing (you have the right to have CM restrict the processing of your personal data in the cases set out in Article 18 of the GDPR),
  • the right to data portability (i.e. you have the right to receive the personal data concerning you that you have provided to CM in a structured, commonly used and machine-readable format, and the right to transmit those personal data to another controller without hindrance from the controller to which the personal data have been provided, in the cases set out in Article 20 of the GDPR),
  • the right to object (i.e. on grounds relating to your particular situation, you have the right at any time to object to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions pursuant to Article 21 of the GDPR),
  • the right to withdraw consent at any time (i.e. if the processing of your personal data is based on your consent granted to CM pursuant to Article 6(1)(a) of the GDPR, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent granted before its withdrawal, within the meaning of Article 7(3) of the GDPR),
  • the right to lodge a complaint with a supervisory authority (i.e. in the event of doubts regarding CM’s compliance with its obligations as a personal data controller in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).