Personal Data Protection - GDPR
PERSONAL DATA PROTECTION
DATA CONTROLLER
Ace Event, s.r.o.
Janáčkovo nábřeží 475/47, Smíchov
150 00 Prague 5
Czech Republic
Company ID (IČO): 07692544
File No.: C 305625 maintained by the Municipal Court in Prague
Registration Date: December 3, 2018
PERSONAL DATA PROCESSING PRINCIPLES
This document provides you with information about your rights regarding the processing and protection of your personal data. It is regularly updated.
We process your personal data transparently, fairly, and in accordance with applicable legal regulations, especially the GDPR and the Czech Personal Data Processing Act.
We process children's personal data only if the child could act independently or if a parent or guardian acted on their behalf. As the parent or guardian, you are responsible for ensuring that the provision of the child’s data is not against their interests and that the child is properly informed about how their data is processed and their rights.
We guarantee that personal data processing is secured using standard procedures and technologies. We regularly assess vulnerabilities and incidents, and we apply reasonable security measures to prevent unauthorized access, changes, or deletions of the processed data. These security measures are regularly updated.
CATEGORIES OF PERSONAL DATA PROCESSED
Data CategoryPurposeLegal BasisRetention Period
Client identification data (name, address, Company ID, VAT No., etc.)Contract conclusion, service provision, invoicingContract performance, legal obligation (e.g. accounting)Duration of the contract + 3 years, unless further retention is needed
Contact details (email, phone)Service-related communication, verification of client requests, updatesContract performanceContract duration + min. 3 years
Email addressNewsletter deliveryClient consent5 years or until consent withdrawal
IP addressesClient portal access, web functionality, securityContract necessity (incl. pre-contractual negotiation), legitimate interestContract duration + min. 3 years
Technical cookies (anonymous)Web functionalityContract necessity, legitimate interestSession duration
Advertising/statistical cookies (e.g., Google Analytics, AdWords, Facebook)Website traffic stats, PPC campaignsLegitimate interest12 months
Server logs (IP, browser data, web requests)Service continuity, securityContract necessity, legal obligation, legitimate interest6 months.
DATA RECIPIENTS
We maintain strict internal rules on who within Ace Event, s.r.o. has access to personal data and what data they can process. We do not share your personal data with third parties unless:
-
We have your consent.
-
It is necessary to provide the service (e.g., domain or certificate registration).
-
It is required or authorized by law.
-
It is based on our legitimate interest (e.g., subcontractors, legal obligations, law enforcement).
For traffic analysis and evaluation of our business activities, we use third-party tools such as:
-
Google Analytics (statistics)
-
Google AdWords, Sklik, Facebook (advertising)
These systems collect only anonymous data through their tracking codes. Some providers may be located outside the EU.
DATA RETENTION
According to applicable laws (e.g., Act No. 499/2004 Coll. on Archiving, Act No. 235/2004 Coll. on VAT, Act No. 563/1991 Coll. on Accounting), we must retain certain documents for legally defined periods.
If retention is not specified by law but the data is processed based on contract performance or our legitimate interest, we retain the data for the contract’s duration plus a reasonable time to handle any claims.
If the processing is based solely on your consent, the data will be processed until consent is withdrawn.
YOUR RIGHTS
Right of Access
You have the right to access your data and receive information about its processing. We will provide your data in an electronic format after verifying your identity.
Right to Rectification
If your data is incorrect or incomplete, you have the right to request correction or completion.
Right to Erasure (Right to Be Forgotten)
You may request the deletion of your data if it is no longer needed, you withdraw consent, object to processing, or processing is unlawful.
Right to Restriction of Processing
You may request a restriction of processing under Article 18 of the GDPR. We will retain your data but will not process it without your consent unless legally necessary.
Right to Data Portability
If processing is automated and based on consent or contract, you may request to receive your data in a machine-readable format or transfer it to another controller.
Right to Withdraw Consent
Where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.
LIMITING MARKETING
If you’ve given us consent for marketing or receive offers based on another legal basis, you can opt out:
-
Via the unsubscribe option included in each marketing email.
-
By contacting us and withdrawing your consent.
Note: Even if you opt out of marketing, we may still contact you regarding existing orders or services.
COOKIES
What Are Cookies?
Cookies are small data files used as unique identifiers in your browser. They are commonly used on websites to enhance user experience.
Cookies can be:
-
First-party cookies set by our website.
-
Third-party cookies set by external services (e.g., ad networks or analytics providers).
How We Use Cookies
Cookies help us:
-
Provide core site functions (e.g., shopping cart, login)
-
Generate anonymous usage statistics
-
Deliver personalized ads based on your browsing behavior and IP geolocation
We use:
-
Technical cookies (essential for functionality)
-
Statistical cookies (e.g., Google Analytics)
-
Advertising cookies (first-party and third-party for behavioral targeting)
Cookie Consent
We need your consent to use statistical and advertising cookies. Consent is given through:
-
The cookie banner on our website
-
Browser settings
Technical cookies do not require consent but can be disabled in your browser (note: the website may not function correctly without them).
GOOGLE ANALYTICS & ADVERTISING
This website uses Google Analytics, which transfers data to Google servers in the USA. Google evaluates usage data and provides reports to us. It may also share this data with third parties if required by law or if those third parties process the data on Google’s behalf.
Additional features used:
-
Google Display Network Impression Reporting
-
Remarketing
-
Demographic and interest reports
More information is available in Google’s privacy policies and cookie guidelines.
Advertising Partners:
-
Google
-
Other advertising networks (e.g., Sklik, Facebook)
You can opt out of personalized ads using Google's Ad Settings Manager.