Processing of personal data

The personal data controller is the Tereza Maxová Foundation for Children, ID No.: 285 14 319, with its registered office at Prague 1 – Staré Město, Jáchymova 26/2, Postal Code 110 00, registered in the Commercial Register kept by the Municipal Court in Prague under No. N 725, as the organiser of the event. The controller collects personal data about participants for the event TERIBEAR moves Prague or Prima den s medvědem powered by ŠKODA AUTO (“Event“) to the extent necessary for its proper organization and conduct.

The Administrator processes personal data about the participants in the scope of the name, surname, e-mail, data about the country and city from which the participant comes, the name of the team, the preference of the story that the participant will support with his/her participation, gender, year of birth, data about the payment of the registration fee and the number of kilometres covered. The Participant provides this personal information voluntarily if he/she is interested in participating in the Event. Providing them is necessary for the registration of the participant, if he/she does not provide any of these personal data, the registration cannot take place. The legal basis for the processing, in this case, is the performance of the contract (registration for the Event and recording of kilometres covered) and the fulfilment of the legal obligations to which the controller is subject (processing of payment data). The controller processes this personal data manually in paper form (during on-site registration) as well as by automated means in electronic form.

Personal data in the scope of the name, surname, year of birth, city/country, supported story, team name and kilometres covered may be used by the Organiser in the results list of the Event both at the venue and published, in particular on its website www.teribear.cz or in other appropriate ways related to the promotion of the Event. The data referred to in this paragraph can be retrieved on the website www.teribear.cz by entering the name of the participant even after the end of the Event, but the participant may at any time request the administrator to remove his/her data.

The Administrator may also process the participant’s email address for the purpose of sending commercial communications related to the Event, or in connection with other events held by the Administrator after the Event, marketing or other communications related to the charitable activities of the Administrator unless the participant has refused such processing upon registration. The participant may opt out of receiving commercial communications at any time, using the link provided in the commercial communication sent or the contact details below. The above processing is based on the legitimate interest of the Administrator in its direct marketing and connection with the relevant provisions of Act No. 480/2004 Coll., on certain information society services, as amended.

All visual and audio recordings and images of participants taken during the Event, which the Participant has consented to the taking of, may be used for the Administrator’s own promotion or the promotion of its partners without any claim of the participants to any remuneration. A Participant may withdraw his or her consent to the use of the image or sound recording at any time, but if he or she does so without reasonable cause, he or she shall indemnify the Foundation against any loss incurred by such withdrawal. By participating in the Event, the Participant acknowledges that visual and audio recordings and likenesses may be made for the above purposes.

Updated: 20 July 2022

To whom is the personal data transferred?
The controller uses the following processors to process the personal data:

– ET production s.r.o., with registered office at Thámova 221/7, Prague 8 – Karlín, Postal Code 186 00, ID No.: 272 09 750, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 104659;

– CZECH-IN s.r.o., with registered office at 5. května 1640/65, Prague 5, Postal Code 140 00, IČ: 485 82 387, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 17474;

– Gappex s.r.o., with registered office at Na Cimbále 104/2, Prague 4, Postal Code 143 00, IČ: 068 35 732, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 289441;

– NET Production s.r.o., with registered office at Za farou 816/67, Prague 5, Postal Code 154 00, ID No.: 033 73 045, registered in the Commercial Register maintained by the Municipal Court in Prague under Case No. C 230953; and

– ON-LINE SYSTEM s. r. o., with registered office at Vřesinská 280/20, Ostrava – Poruba, Postal Code 708 00, ID No.: 258 34 525, registered in the Commercial Register maintained by the Regional Court in Ostrava under Case No. C 16591

All of these processors provide the technical and organizational support necessary for the proper conduct of the Event. The processors are obliged to comply with sufficient technical and organisational security measures, and the disclosure of personal data is governed by a contract that meets the relevant GDPR requirements.

What rights does a participant have?
The Participant may request the Controller at any time for the personal data that the Controller processes about him/her, as well as information about the scope of processing, and the Controller is obliged to provide this information to the Participant at any time. The processor may also fulfil this obligation on behalf of the controller.

If a participant considers that his or her personal data are being processed in breach of the law or violation of the protection of his or her private or personal life, in particular, if his or her personal data are inaccurate concerning the purpose of the processing, he or she may ask the controller or processor for an explanation or request that they remedy the situation. In particular, this may involve rectification, restriction of processing or erasure of his or her personal data. If the participant’s request is found to be justified, the controller or processor shall rectify the defective situation without delay. Under certain conditions, the participant may also request the right to portability of his or her personal data. Where a participant has given consent to the processing, he or she has done so voluntarily and has the right to withdraw or restrict that consent at any time.

In certain circumstances, the participant has the right to object to the processing of his or her personal data, in particular where the personal data is processed based on legitimate interest.

The participant also has the right to lodge a complaint against the controller with the Data Protection Authority if he or she believes that his or her personal data is being processed in breach of applicable law.

How long is personal data processed?
The participant’s personal data will be processed only for the time necessary to fulfil the purpose of the processing, usually for the duration of the Event or for the period of time specified by the legal regulations applicable to the controller. After the purpose of the processing has been fulfilled, the personal data will be securely deleted.

If the legal basis for the processing is the consent of the participant, the personal data concerned will be processed for the duration of the consent, unless the participant withdraws or restricts the consent before the expiry of this period. In this case, the controller will cease to use the personal data to the extent applicable for the purpose in question.

Contact details of the controller
The participant’s personal data will be processed only for the time necessary to fulfil the purpose of the processing, usually for the duration of the Event or for the period of time specified by the legal regulations applicable to the controller. After the purpose of the processing has been fulfilled, the personal data will be securely deleted.

If the legal basis for the processing is the consent of the participant, the personal data concerned will be processed for the duration of the consent, unless the participant withdraws or restricts the consent before the expiry of this period. In this case, the controller will cease to use the personal data to the extent applicable for the purpose in question.

Updated: 20 July 2022