PERSONAL DATA PROCESSING: PRINCIPLES

1. WHO ARE WE AND WHAT CAN YOU FIND HERE?

We are JIC, an interest group of legal persons, residing at Purkyňova 649/127, Medlánky, 612 00 Brno, ID 71180478. We are responsible for the processing of your personal data related to your visit to https://www.kumstbrno.cz/ creative hub and your activities in KUMST.

Here you'll find out what personal data we use, what we use it for, what entitles us to such use, and how long we keep it for. You'll learn who – in general – may have access to your personal data, what your rights are, and how to best exercise them.

2. WHAT DO YOU WANT TO READ?

Your personal data may be processed in various ways, but you may be interested in some specifics only.

WHAT SPECIFICALLY WOULD YOU LIKE TO KNOW?

What information are we allowed to process about you?
What specifically can you do with my personal data?
- Visiting the website, cookies
- Registration and administration of a client account
- Booking and renting a meeting room, coworking place or any other premises
- Registering to attend an event
- Booking or buying a chip card or merchandise
- A form for people interested in the KUMST premises or in booking a hall or showroom
- A form for people interested in providing consultations and services
- Signing up for our newsletter
- Rental and coworking contracts, contracts on consignment sale, buying a card and merchandise, and other contracts
- Access to the building, a copy of your ID
- CCTV
- Protection of rights and interests in KUMST
- Questions
Who may have access to my personal data?
What rights do I have?

3. WHAT INFORMATION ARE WE ALLOWED TO PROCESS ABOUT YOU?

We process various categories of your personal data for various purposes, while the specific scope depends on how and why we gained the data from you.

The categories are as follows:

address (e.g. your residence, permanent residence, shipping address);
billing data (e.g. ID, tax ID, billing address);
contact data (e.g. email address, telephone number);
identification data (e.g. name, surname, ID, degree, date of birth, permanent residence);
identification data of your device (IP/Mac address);
information about your contract (e.g. title of event, date of event, meeting room number, description of consultation, date of order, date of payment);
information about your behaviour on the website (using cookies);
information about your field of activity (e.g. whether you are active in a creative field, your place of activities or information about your previous work);
camera footage (e.g. online footage, camera footage of our premises);
payment data (e.g. account number, payment card number, bank code, IBAN, SWIFT);
login data (e.g. name and password);
information about your job (e.g. are you employed by a legal person or are you a member of a statutory body?);
data on entering the building (e.g. when you received the key and access card, date and time when your card was used).

4. WHEN AND HOW IS YOUR PERSONAL DATA USED BY US?

VISITING THE WEBSITE, COOKIES

We use cookies and other similar trackers. When you visit our website, we can put the cookies into your device to get some information about your behaviour on the website. Please find information about cookies here.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
For our website to work (basic cookies)	Data about your behaviour on our website, identification data of your device	A legitimate interest in making our website work	Based on technical setup of cookies (as explained in the Information about Cookies)
To create statistics and reports on the use of the website (analytics and tracking cookies)		Consent to the use of cookies and processing of personal data
To display targeted advertising on other websites and to hand it over to advertising operators (marketing cookies)		Consent to the use of cookies and processing of personal data

You are free to object to the processing of personal data based on a legitimate interest. If it is legitimate, we will terminate the processing of personal data for the given purpose. The website may not work properly without these cookies, though.

You can express your consent to the use of cookies through the cookie bar. You can simply revoke it any time there or in the settings of your browser, too.

REGISTRATION AND ADMINISTRATION OF A CLIENT ACCOUNT

You can create a client account on our website and use it to book a meeting room, hall, coworking place, merchandise or register for an event.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
For the registration and administration of your client account, including related communication	Identification data, address, contact data, login data, billing data, information about your work	Necessary to take the measures adopted prior to the conclusion of the contract, necessary to provide the services stipulated in the contract	For three years following the cancellation of the client account or last logging in
To send news about KUMST and offers of our services	Contact data	A legitimate interest in sending commercial messages to previous clients based on Act No. 480/2004 Coll., on some services of the information company	Until you inform us that you no longer want to receive the newsletters

When registering your account, you provide us with your personal data voluntarily. We cannot register you or administer your account without this data.

BOOKING A MEETING ROOM, COWORKING PLACE OR ANY OTHER PREMISES

In your client account, you can book a meeting room, coworking place or any other premises.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
For the registration and administration of your client account, including related communication	Identification data, contact data, billing data, information about your contract and how it is fulfilled	Necessary to fulfil the obligations arising from the contract	For one month following the day the services agreed on in the contract were provided; for other purposes (mainly to protect interests and fulfil legal obligations) we may store your data even longer
To fulfil our legal obligations	Identification data, billing data, data on the contract and how it is fulfilled by both parties	Necessary to fulfil our legal obligations	As long as required by the law
To send news about KUMST and offer our services	Contact data	A legitimate interest of sending commercial message to our previous clients according to Act No. 480/2004 Coll., on some services of the information company	Until you inform us that you no longer want to receive the newsletters

We need this basic data to book and rent out the premises to you and communicate with you. Next, we need to fulfil our legal obligations, mainly related to book-keeping, taxes, and inspections of the way we handle money from public funds.

At the same time, we can send you news about KUMST and our services (commercial messages) if you register for our newsletter in your account settings. You can cancel the subscription by clicking on the link included in each newsletter or by contacting us directly.

REGISTRATION FOR AN EVENT

You may register for KUMST events on our website or directly in your client account.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To carry out the registering, ensure your attendance of the event, including related communication	Identification data, address, contact data, billing data, payment data, information about your contract and how it is fulfilled	Necessary to fulfil the obligations arising from the contract	For one month following the end of the event; for other purposes (mainly to protect interests and fulfil legal obligations) we may store your data even longer
To fulfil our legal obligations	Identification data, billing data, data about your contract and how it is fulfilled by both parties	Necessary to fulfil our legal obligations	As long as required by the law
To send news about KUMST and offer our services	Contact data	A legitimate interest of sending commercial message to our previous clients according to Act No. 480/2004 Coll., on some services of the information company	Until you inform us that you no longer want to receive the newsletters

We need this basic data to register you for our event and ensure that you are eligible
to attend it. For paid events, you need to fulfil the legal obligations.

BOOKING AND BUYING A CHIP CARD OR KUMST MERCHANDISE

On the KUMST website you can book a chip card or merchandise to buy from us later in person. In this case, your personal data is processed as follows:

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To book a card or merchandise to be later purchased	Identification data, contact data, address, information about your contract and how it is fulfilled	Necessary to take the measures adopted prior to concluding the contract at the potential client's request	For three months following the booking

A FORM FOR THOSE INTERESTED IN KUMST PREMISES OR IN BOOKING A HALL OR SHOWROOM

If you want to become a part of KUMST or book a hall or a showroom, please fill out the forms and send us your ideas.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To keep the information about the potential applicants to conclude a rent or any other contract	Identification data, address, contact data, information about your work	Necessary to take the measures adopted prior to concluding the contract at the potential client's request	For three years following the day the registration form was filled out

If you are interested in booking a space in KUMST, we need to know your above-mentioned personal data to get to know you better and have an idea of your planned activities here.

Providing this data is voluntary and ensures that you'll be informed about the selection of creative minds to KUMST and gain an opportunity to cooperate with us in KUMST.

A FORM FOR PEOPLE INTERESTED IN CONSULTATIONS OR SERVICES

If you are interested in one-on-one consultations, please fill out the form and tell us about your idea, so we can then contact you with a specific offer.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To store the information about a potential client with the aim of providing consultations	Identification data, contact data, information about your work	Necessary to take the measures adopted prior to concluding the contract at the potential client's request	For three years following the submission of the form
To provide a one-on-one consultation, including related communication	Identification data, billing data, contact data, information about your work, information about your contract and how it is fulfilled, data necessary to make the payment	Necessary to fulfil the obligations arising from the contract	For one month following the provision of consultation; for other purposes (e.g. to protect our interests or fulfil our legal obligations) we may continue processing your data even longer
To fulfil our legal obligations	Identification data, billing data, data about your contract and how it is fulfilled by both parties	Necessary to fulfil our legal obligations	As long as required by the law
To send news about KUMST and offer our services	Contact data	A legitimate interest of sending commercial messages to our previous clients according to Act No. 480/2004 Coll., on some services of the information company	Until you inform us that you no longer want to receive the newsletters

If you are interested in one-on-one consultations, we need to know the above-mentioned data to get to know you better and get an idea of your activities in KUMST. You provide this personal data voluntarily and enable us to create an offer of these consultations tailored to your needs, so you can continue cooperating with us in KUMST. If we agree on a consultation, we need to process this data in order to fulfil the obligations arising from the contract on the provision of consultation, as well as other legal obligations.

At the same time, we may send you news about KUMST and our services if you register for our newsletter in your account settings. You can cancel the subscription by clicking on the link included in each newsletter or by contacting us directly.

SIGNING UP FOR OUR NEWSLETTER

You can sign up for our KUMST creative newsletter via a subscription form available on our website.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To send news about KUMST and offer our services	Contact data	Consent to the processing of personal data and sending commercial messages	Until you inform us that you no longer want to receive our commercial messages or want us to process your personal data

You provide your email address voluntarily; without providing it, however, we cannot send our newsletter to you. Feel free to cancel your subscription to our newsletter by clicking on the link included in every newsletter.

RENTAL AND COWORKING CONTRACTS, CONTRACTS ON CONSIGNMENT SALES, PURCHASE OF ACCESS CARDS AND MERCHANDISE, AND OTHER CONTRACTS

If you want to rent a space in KUMST, we need to conclude a rental/coworking contract with you. We may conclude some other contract as well, though (e.g. a contract on consignment sale in case we offer your artwork to the public to buy, a purchase contract if you buy our merchandise, etc.).

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To conclude and fulfil the contract, including related communication	Identification data, address, contact, data, payment data, data on the job position, data on the contract and the way it is fulfilled by both parties	Necessary to fulfil the obligations arising from the contract	For one month following the termination of the contract; for other purposes, though, we may store your personal data even longer, e.g. to comply with the law
To fulfil our legal obligations	Identification data, billing data, data on the contract and the way it is fulfilled by both parties	Necessary to fulfil our legal obligations	As long as required by the law
To contact you in case there may have been trespassing in the rented space	Identification data, contact data	A legitimate interest to ensure safety in our buildings and of our tenants	For the duration of rent/coworking contract

If you decide to conclude a contract with us, we need the above-mentioned personal data to do it, fulfil the obligations arising from it or check how you fulfil them, and to communicate with you accordingly. Then, we have to fulfil the obligations required by the law.

If you conclude a rental/coworking contract with us to ensure safety of our buildings and tenants, we will need some of your above-mentioned personal data as well to contact you in case of danger.

ACCESS TO THE BUILDING, COPY OF THE ID

To enter the building, you will need an access card or keys. If you grant your consent, we will make a copy of your ID as well.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To enable you to enter the building and to keep track of people entering the building	Identification data, contact data, payment data, information about the contract and the way it is fulfilled	Necessary to fulfil our obligations arising from the contract	For three years after you hand over your access card and key
To make a copy of your ID to ensure safety at the KUMST premises, protect the property as well as other interests protected by the law	Identification data, address	Consent to the processing of personal data to make a copy of your ID	For ten years after the end of the rent; in case of a dispute, for ten years after the legal, administrative or any other proceedings end
To fulfil legal obligations related to book-keeping and taxes	Identification data, address, data on the contract and the way it is fulfilled by both parties	Necessary to fulfil our legal obligations	As long as required by the law

We need your personal data to safely provide you with an access card and keys to the building, enable you to freely move within the building as well as to keep track of people entering it. And we need to fulfil legal obligations, too.

With your consent, we will make a copy of your ID (ID, driver's licence, passport, or any other ID) to better ensure the safety of people at the KUMST premises, protect your and our property as well as other interests protected by the law. You can withdraw your consent to the processing of personal data any time, and we'll immediately stop processing it (and will delete the copy of your ID).

CCTV

In KUMST, we take care of the security of our buildings, the property inside them as well as your health. That's why we installed several cameras in the buildings to capture footage. In case of an incident, we have footage available for a limited time to check and see what happened.

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To protect our and our clients' property as well as lives and health of the people in the building	Camera footage	A legitimate interest in protecting property as well as lives and health of people	For 72 hours after capturing the footage, and even longer in case of an incident (for the time necessary to protect our rights and interests)

We need all the cameras in the building to ensure safety of the property, lives, and health. If you have a legitimate reason and want to erase your footage, you may raise an objection against the processing of personal data. To do so, please see the procedure below (in the overview of your rights).

PROTECTION OF OUR RIGHTS AND INTERESTS

We would like to protect our rights and interests mainly in cases of disputable situations (breach of contract, incidents in the building, etc.).

How do we process your personal data in this case?

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To protect our rights and interests	Information gathered as part of our cooperation with you	A legitimate interest in protection of our rights and interests	For the duration of time-barred periods of claims arising from contracts and other legal relations; usually for ten years following the end of our cooperation or for ten years following the end of a dispute if there was any

You have the right to raise an objection against the processing of personal data to protect our rights and interests. If your objection is legitimate, we'll stop processing your personal data for this purpose. Please see the instructions below.

QUESTIONS

You can send us your questions using your email. In such cases, we process your personal data as follows:

What do we need personal data for?	What personal data do we process?	What right do we have to process your personal data?	How long do we store your personal data?
To answer a question	Contact data	A legitimate interest in answering a question	For one year following the questions, or for one year since the last communication related to the question

Providing this personal data is voluntary and enables us to answer your question. You have the right to raise an objection against the processing of personal data for this purpose. If your objection is legitimate, we'll stop processing your personal data for this purpose.

5. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?

Depending on the circumstances, your personal data may be made available to various people, most often our contractors. As the list of our contractors may change, you'll find only their categories below. You can request the list of current contractors with access to your personal data any time.

The following people may have access to your personal data:

establishers of JIC who may keep checking its activities,
people in charge of our website and software (computer systems),
contracting editors to help us with interviews and coverage,
speakers and organizers to help us organize our events,
people in charge of sending our newsletter,
contracting specialists who may provide professional help to you as part of our services,
contracting bookkeepers and auditors (if they need access to some of your personal data to fulfil their contractual and legal obligations),
legal and tax advisors bound by a non-disclosure agreement required by the law,
people providing services to enable payments (online payment portals, banks, etc.) we need for you to pay us comfortably,
people providing marketing as well as graphical services to help us prepare our marketing campaigns,
state authorities to whom we must or need to make your personal data available, such as authorities checking the use of public funds, police, tax offices, etc.

Some of our partners (mainly contractors) may be residents of countries outside the EU. If somebody is supposed to have access to your personal data, we've made sure they guarantee that your personal data will be kept safe and your rights won't be limited in any way.

6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM HERE?

Here you can find out which rights related to the processing of your personal data you may exercise in KUMST. No matter the right, you may exercise it here whichever way you want, so long as it remains possible to verify that the request is made by you. If you want to get our answer as soon as possible, please send your request to hello@kumst.cz.

Information on profiling

Profiling may take place on our website, which means that we may use the personal data we process about you to classify it into groups, e.g. account users, people who regularly attend our events, etc. These profiles allow us to keep better track of who uses our website and services and to further improve them. The profiling does not affect the way we provide services to you. If you don't like the profiling, feel free to raise an objection.

Right to withdraw your consent

If we process your personal data based on your consent, you may withdraw it at any time, ideally by sending a message to hello@kumst.cz. If you want to withdraw your consent to receiving commercial messages (KUMST newsletters, offers of JIC services), feel free to cancel your subscription to our commercial messages by clicking on the link included in each such message or in the KUMST account settings.

Right to access

You have the right to access the personal data we process about you. At the same time, you have the right to receive information about which personal data we process about you, for how long, what purposes it is processed for, who gains access to it, and whether we use it for automated decision-making (or how this automated decision-making works). You will receive a copy of your personal data for free. If you are interested in several copies, we may ask you to cover the related costs.

Right to make corrections

Have you found out that we've processed incomplete or incorrect personal data about you? Then you have the right to ask us to correct or complete the personal data if the purpose of its processing requires so.

Right to erasure

You have the right to have the personal data we keep about you erased, and you may request so if you have at least one of the following reasons:

the purpose it was collected/processed for is no longer needed;
your personal data is processed in conflict with the law;
you have withdrawn your consent to the processing of your personal data, removing our right to continue processing it;
you have raised an objection to your personal data being processed based on a legitimate interest, and we are unable to prove that our legitimate interest outweighs your right for erasure;
there is a legitimate reason to erase this personal data.

Even if you withdraw your consent to the processing of personal data or ask for its erasure, we cannot always oblige you. In some cases, the processing is legally required. In such cases, we will inform you about the reason why your personal data cannot be erased.

Right to limit processing

If you feel that your personal data is inaccurate, you may ask us to limit its processing for a period necessary to verify its accuracy and, if needed, correct it.

This right applies to the following cases as well:

processing your personal data is against the law, but you don't want it to be erased;
we no longer need your personal data for the purpose we processed it for, but you insist on its processing (mainly storing) to determine, enforce, or defend your legal claims;
you have raised an objection to the processing of your personal data based on our legitimate interest; in such case, we will limit its processing until it is determined whether our legitimate interest outweighs your right to require that your personal data is no longer processed.

Right to raise an objection to the processing of your personal data based on a legitimate interest, to direct marketing (sending our offers of our services or newsletters), and to profiling

If we process your personal data based on a legitimate interest or direct marketing or if we use it to profile you, you have the right to raise an objection to such processing. Based on your objection, we will determine whether it is our legitimate interest to process your personal data for the given purpose or your right to require that your personal data is no longer processed prevails. If your objection is found legitimate, we will terminate the processing of your data.

Right to transfer personal data

If we process your personal data in an automated way based on your consent or because it is necessary to fulfil the obligations arising from the contract, you may ask us to provide your personal data in a structured, commonly used, and machine-readable format. You may also ask us to hand it over to another personal data administrator of your choosing.

Right to make a complaint

Do you think the above-listed rights are insufficient? Or do you think your rights have been violated in some way? You can raise an objection with a supervising authority. Feel free to raise your objection using the contact from the Personal Data Protection Office available at https://www.uoou.cz/.