CZECH BLUEGRASS MUSIC ASSOCIATION

music, community, tradition

Personal Data Processing Policy

Controller’s Contact Details

BAČR z.s., Bludovice 137, 741 01 Nový Jičín, Czech Republic, Company ID: 63830507, VAT ID: CZ 638 30 507, Data box ID: i6964sn, E-mail: info@bacr.cz, Phone: +420 737 971 477

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation” or “GDPR”), Act on the Processing of Personal Data, and Act No. 480/2004 Coll., on Certain Information Society Services, as amended.

1. Definitions

Data Subject: A natural person (consumer or self-employed person) to whom the personal data relate (also referred to as “you” or “customer”).

Personal Data: Any information relating to an identified or identifiable customer; an identifiable customer is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (also referred to as “data” or “information”).

Controller: An entity that determines the purposes and means of the processing of personal data, carries out the processing, and is responsible for it. The controller of personal data is BAČR z.s., Bludovice 137, 741 01 Nový Jičín, Company ID: 63830507, VAT ID: CZ 638 30 507, Data box ID: i6964sn, E-mail: info@bacr.cz, Phone: +420 737 971 477 (also referred to as “we” or “us”).

Processor: An entity that processes personal data for the controller on the basis of law or authorization by the controller, pursuant to a personal data processing agreement (also referred to as a “business partner” or “partner”).

Website: The website available at https://www.bacr.cz

Purpose of Processing Personal Data: The reason why personal data are processed. Such reasons may include, for example, performance of a contract, management of user accounts, handling inquiries and complaints, sending commercial communications (newsletters), or displaying interest-based advertising.

Cookies: Short text files stored by your web or mobile browser. Most cookies contain a unique identifier, the so-called cookie ID. This is a string of characters assigned by websites and servers to the browser that stores the cookie. This allows websites and servers to distinguish and identify individual browsers. Cookies are used to improve the functionality of websites, evaluate their traffic, and better target marketing activities. By browsing our website, we assume that you agree to the use of these cookies.

Third Countries: Countries outside the European Economic Area, which consists primarily of the Member States of the European Union and Iceland, Liechtenstein, and Norway.

2. What Personal Data Are Processed?

We and our contractual processors, depending on the relevant legal basis and purpose of processing, process the following personal data or categories of personal data:

  1. Identification and address data: e.g. first name, last name, delivery or other contact address, address of supply point, registered office, Company ID, VAT ID;
  2. Electronic contact data: e.g. telephone number, e-mail address;
  3. Other electronic data: IP address, cookies;
  4. Other personal data related to a contractual relationship: bank account number, order history;
  5. Other personal data: typically data provided by the customer in an order form or other documents and during communication with us, including subsequent updates.

3. Source of Personal Data

We process data that you provide to us, for example when ordering our services, registering a user account, communicating with us, or subscribing to a newsletter. Typically, this includes:

  • identification and address data;
  • electronic contact data;
  • other personal data related to a contractual relationship.

We also process data that we obtain automatically as a result of you browsing our website, typically including:

  • other electronic data:
    • cookies
    • the website from which you accessed our website;
    • IP address;
    • date and time of access;
    • search queries;
    • HTTP and HTTPS response codes;
    • transmitted data volumes;
    • information about the browser and operating system.

4. Why Are Personal Data Processed?

Your personal data may be processed for the following purposes:

  • performance of a contractual relationship;
  • management of customer accounts;
  • communication with customers, satisfaction evaluation, publication of reviews, book recommendations, handling inquiries, complaints, and claims;
  • sending commercial communications and offering our goods;
  • accounting and tax purposes
  • fulfillment of other legal obligations.

Your personal data may be processed on the basis of the following legal grounds:

  • performance of a contract;
  • compliance with a legal obligation;
  • the controller’s legitimate interest in sending commercial communications;
  • consent to sending commercial communications.

Processing of personal data for the purposes of performing a contractual relationship, accounting and tax purposes, and compliance with other legal obligations is a statutory or contractual requirement. If you intend to place an order through our website, you are obliged to provide your personal data for these purposes.

5. How Long Are Personal Data Processed?

Your personal data are processed:

  • for the period necessary to exercise rights and obligations arising from the contractual relationship between you and us and to assert claims arising from such contractual relationships (4 years);
  • for the period necessary to comply with legal obligations (accounting documents for 5 years, tax documents for 10 years);
  • for the duration of our legitimate interest in sending commercial communications (2 years from the last opening of a commercial communication);
  • for the duration of your consent (until your consent is withdrawn).

6. Who Has Access to Personal Data?

The following categories of our partners (recipients) may have access to your personal data:

  • providers of goods transportation;
  • providers of accounting and tax advisory services;
  • providers of IT services and hosting;
  • providers ensuring the security and integrity of our services and websites;
  • providers of analytical services;
  • payment gateway providers (payment card providers);
  • providers of legal services, attorneys.

The controller intends to transfer personal data to a third country (outside the European Economic Area) or to an international organization. Recipients of personal data in third countries include:

  • providers of IT services and hosting, including cloud services;
  • providers of mailing services.

7. How Are Personal Data Processed?

Personal data are processed both manually and automatically. We keep proper records of all processing activities in accordance with applicable legal regulations. Personal data are stored in a secure environment, are not processed by unauthorized third parties, and will never be provided to or sold to third parties.

You are not subject to any decision based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you. We do not create profiles from your personal data for the purpose of analyzing or predicting your preferences, interests, economic situation, reliability, location, or movement.

8. What Are the Rights of Data Subjects?

When exercising your rights, please contact us using the contact details provided at the beginning of this policy.

In connection with the processing of your personal data, you have the following rights (Articles 15–21 GDPR):

  • the right of access to personal data;
  • the right to rectify inaccurate personal data and complete incomplete personal data;
  • the right to erasure of personal data;
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing;
  • the right to information about automated decision-making, including profiling.

If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time.

You also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, phone: +420 234 665 111, website: www.uoou.cz.

9. How Are Cookies Processed?

Cookies used can be divided by duration into:

  • temporary cookies (session cookies), which remain stored in your browser only until you close it;
  • persistent cookies, which remain stored in your browser for a longer period until their expiration or until you manually delete them (the storage duration depends on the cookie settings and your browser settings).

By function, cookies are divided into:

  • essential cookies, which are necessary for the functionality of our website;
  • preference cookies, which allow the website to remember information that changes how the website behaves or looks (e.g. preferred language or region). These cookies are not strictly necessary but enhance usability;
  • analytical cookies, which help us analyze your experience on our website (user experience) and understand how you use it.

Additional cookies used on the BAČR website originate from embedded content from other websites. Applications whose cookies are used include: Google, YouTube. Embedded content from other websites behaves in the same way as if the visitor had visited another website. These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with embedded content, including tracking interactions if you have an account and are logged in to that website.

We do not use third-party cookies that track users across multiple websites for the purpose of providing personalized content and advertising on third-party websites and other sales channels.

By adjusting your browser settings and using the BAČR website, you consent to the storage of cookies. You can restrict or block the use of cookies at any time in your browser settings according to the instructions at: https://www.cookieyes.com/blog/how-to-block-cookies/.

10. Are Children’s Data Processed?

Our website is not intended for children under the age of 16. We therefore do not knowingly collect their personal data. If we discover that we have inadvertently obtained personal data of children under 16, we will take steps to delete such data as soon as possible, except where we are required by law to retain them.

11. Conclusion

Legal regulations, as well as our business strategy and related methods of processing your personal data, may change. If we decide to update this policy, we will publish the changes on our website and inform you accordingly. In cases of significant changes to this policy or where required by law, we will inform you in advance. Please read this policy carefully and check it regularly when communicating with us or using our website.