PRINCIPLES PROCESSING OF PERSONAL DATA
1. WHO ARE WE AND WHAT CAN YOU FIND HERE?
We are JIC, an interest group of legal entities, with its registered office at Purkyňova 649/127, Medlánky, 612 00 Brno, ID No.: 71180478. We are responsible for processing your personal data in connection with your visit to the creative hub website https://www.kumstbrno.cz/en/ and your activities at KUMST.
Here you can read what personal data we use about you, why we need it, what authorizes us to do so, and how long we store it. You will also learn here who generally has access to your personal data, what rights you have, and how you can exercise them.
2. WHAT DO YOU WANT TO READ?
We may process your personal data in various ways. However, you may only be interested in something specific.
WHAT EXACTLY DO YOU WANT TO KNOW?
- What information about me can you process?
- What specifically can you do with my personal data?
- Website visits, cookies
- Registration and client account management
- Reservations and rental of meeting rooms, coworking spaces, or other facilities
- Event registration
- Reservation and purchase of a chip card or merchandise
- Form for those interested in spaces at KUMST or in reserving a hall or showroom
- Form for those interested in providing consulting services and other services
- Subscribe to the newsletter
- Lease, coworking agreements, consignment sales agreements, card and merchandise purchases, and other agreements
- Building access, copy of ID
- CCTV system
- Protection of rights and interests at KUMST
- Contacting us with questions
- Who can access my personal data?
- What are my rights?
3. WHAT INFORMATION ABOUT YOU CAN WE PROCESS?
We process various categories of personal data about you for different purposes. The specific scope depends on how and why we obtained the data from you.
Specifically, these include the following categories:
- contact information (e.g., registered office address, permanent residence, mailing address);
- billing information (e.g., company ID, tax ID, billing address);
- contact information (e.g., email address, phone number);
- identification data (e.g., first name, last name, ID number, title, date of birth, permanent residence address);
- identification data of your device (IP/Mac address);
- information regarding the contract and its performance (e.g., event name, date of the event, meeting room designation, description of the consultation, order date, payment date);
- information about your behavior on the website (using so-called cookies);
- information about your creative work (e.g., your classification within the creative industry, your place of work, or information about your previous work);
- camera images and recordings (e.g., live camera feeds, recordings from cameras on our premises);
- payment details (e.g., account number, credit card number, bank code, IBAN, SWIFT);
- login credentials (e.g., username, password);
- information regarding job position (e.g., whether you are an employee of a legal entity, in the position of a statutory body);
- data regarding building access (e.g., date of key and access card issuance, date and time of access card use).
4. WHEN AND HOW DO WE PROCESS YOUR PERSONAL DATA?
VISITING THE WEBSITE, COOKIES
We use cookies and similar trackers. When you visit our website, we may store cookies on your device to gather certain information about your behavior on the website. You can find information about cookies here.
How specifically do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
For the functioning of the website (essential cookies) | Data about your behavior on the website, your device’s identification data
| Legitimate interest in the functioning of our website | Depending on the technical settings of cookies (explained
|
To generate statistics and reports on website usage (analytical and statistical cookies) | Consent to the use of cookies and the processing of personal data | ||
To display targeted ads on other websites and share data with advertising providers (advertising cookies) | Consent to the use of cookies and the processing of personal data |
You may object to the processing of personal data based on legitimate interest. If your objection is valid, we will cease processing personal data for that purpose. However, without essential cookies, the website may not function properly.
Consent to the use of cookies, which you provide via the cookie banner, can be easily revoked at any time via the cookie banner and also in your browser settings.
REGISTRATION AND MANAGEMENT OF A CLIENT ACCOUNT
On our website, you can create a client account and use it, for example, to book a meeting room, hall, coworking space, merchandise, or to register for an event.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
For registration and management of your client account, including operational communication | Identification data, address data, contact data, login credentials, billing information, information about your work | Necessity to implement measures taken prior to entering into a contract, necessity for the performance of the contract | Up to 3 years from the cancellation of the client account or the last login |
To send news about KUMST and offers of our services | Contact information | Legitimate interest in sending commercial communications to our previous customers pursuant to Act No. 480/2004 Coll., on certain information society services | Until you inform us that you no longer wish to receive newsletters |
You provide your personal data voluntarily when registering an account. However, without this information we are unable to complete the registration or manage your account.
At the same time, we may send you news about KUMST and offers for our services. You can manage your newsletter subscriptions in your account. You can unsubscribe by clicking the link in each newsletter or by contacting us directly.
RESERVATIONS AND RENTAL OF MEETING ROOMS, COWORKING SPACES, OR OTHER AREAS
In your client account, you can reserve a meeting room, coworking space, or other space of your choice.
How exactly do we process your personal data in this case?
What do we need personal data for? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
For the reservation and rental of a meeting room, coworking space, or other premises, including related communication | Identification data, contact details, billing information, payment details, information about the contract and its performance | Necessary for the performance of the contract | Up to 1 month from the fulfillment of the contract; for other purposes (primarily to protect interests and fulfill legal obligations), we may retain the data for longer |
To fulfill legal obligations | Identification data, billing data, data regarding the contract and its performance by both parties | Necessary to comply with legal obligations | For the period specified by applicable laws |
To send news about KUMST and offers of our services | Contact information | Legitimate interest in sending commercial communications to our previous customers pursuant to Act No. 480/2004 Coll., on certain information society services | Until you inform us that you no longer wish to receive newsletters |
We need this basic information so that we can reserve and rent space for you and communicate with you. Furthermore, we must fulfill legal obligations, primarily in the areas of accounting, taxes, and the oversight of the management of public funds.
At the same time, we may send you interesting news about KUMST and offers of our services (marketing communications). You can manage your newsletter subscriptions in your account. You can unsubscribe by clicking the link in each newsletter or by contacting us directly.
EVENT REGISTRATION
On our website or directly in your client account, you can register for KUMST events.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | What entitles us to process personal data? |
To complete event registration, ensure participation in the event, including related communication | Identification data, address data, billing data, contact data, payment data, information about the contract and its performance | Necessary for the performance of the contract | Up to 1 month after the event ends; for other purposes (primarily to protect interests and fulfill legal obligations), we may retain the data for longer |
To fulfill legal obligations | Identification data, billing information, data regarding the contract and its performance by both parties | Necessary for compliance with legal obligations | For the period specified by applicable laws |
To send news about KUMST and offers of our services | Contact information | Legitimate interest in sending commercial communications to our previous customers pursuant to Act No. 480/2004 Coll., on certain information society services | Until you inform us that you no longer wish to receive newsletters |
We need this basic information so that we can register you for our event and ensure your participation. If the event is paid, we must also comply with legal obligations.
At the same time, we may send you interesting news about KUMST and offers for our services (commercial communications). You can manage your newsletter subscriptions in your account. You can also unsubscribe by clicking the link in each newsletter or by contacting us directly.
RESERVING AND PURCHASING A CHIP CARD OR KUMST MERCH
Through the KUMST website, you can reserve a chip card or merchandise that you will purchase from us in person. In this case, we process your personal data as follows:
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To reserve a card or merchandise for your potential purchase | Identification data, contact details, address information, information about the contract and its performance | Necessity to implement measures taken prior to entering into a contract at the request of the interested party | Up to 3 months from the date of reservation |
FORM FOR INTERESTED PARTIES REGARDING SPACES AT KUMST OR RESERVING A HALL OR SHOWROOM
If you want to become part of KUMST or reserve a hall or showroom, you can fill out the forms for those interested in spaces at KUMST and let us know about your ideas.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To store information about the interested party for the purpose of potentially entering into a lease or similar contract | Identification data, address data, contact information, information about your work | Necessity to implement measures taken prior to entering into a contract at the request of the interested party | Up to 3 years from completing the registration form |
If you are interested in renting space at KUMST, we need the above personal data so that we can get to know you better and form an idea of your activities at KUMST. You provide this
personal data voluntarily; however, by providing this information, you ensure that you will be informed about the selection of creative professionals for KUMST and will have the opportunity to continue collaborating with us at KUMST.
FORM FOR THOSE INTERESTED IN PROVIDING CONSULTING SERVICES AND OTHER SERVICES
If you are interested in individual consultations, you can fill out the form for those interested in consultations and let us know about your ideas. We can then contact you with a specific consultation offer.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To store information about the interested party for the purpose of providing a consultation | Identification data, contact information, information about your work | Necessity to implement measures taken prior to entering into a contract at the request of the interested party | Up to 3 years from submission of the form |
To provide individual consultation, including related communication | Identification data, billing information, contact information, information about your work, information about the contract and its performance, data necessary for making a payment | Necessary for the performance of the contract | Up to 1 month from the provision of the consultation; for other purposes (e.g., to protect our interests or to fulfill legal obligations), we may process your data for a longer period |
To fulfill legal obligations | Identification data, billing information, data regarding the contract and its performance by both parties | Necessity to fulfill legal obligations | For the period specified by applicable laws |
To send news about KUMST and offers of our services | Contact information | Legitimate interest in sending commercial communications to our previous customers pursuant to Act No. 480/2004 Coll., on certain information society services | Until you inform us that you no longer wish to receive newsletters |
If you are interested in individual consultations, we need the personal data listed above so that we can get to know you better and form an idea of your activities at KUMST. You provide this personal data to us voluntarily, but by providing this information, you ensure that we can put together a tailored offer of individual consultations for you and that you will have the opportunity to continue working with us at KUMST. If we agree on a consultation, we also need to process the data you provide so that we can fulfill the contract for the provision of the consultation. We must also comply with legal obligations.
At the same time, we may send you interesting news about KUMST and offers of our services (marketing communications). You can manage your newsletter subscriptions in your account. You can unsubscribe by clicking the link in each newsletter or by contacting us directly.
SUBSCRIBE TO THE NEWSLETTER
By using the subscription form on our website, you can subscribe to the KUMST creative newsletter.
How exactly do we process your personal data in this case?
What do we need your personal data for? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To send news about KUMST and offers of our services | Contact information | Consent to the processing of personal data and the sending of marketing communications | Until you inform us that you no longer wish to receive commercial offers or do not want us to process your contact information |
You provide us with your email address voluntarily. However, without it, we cannot send you newsletters. You can unsubscribe from the newsletter at any time by clicking the link in each newsletter.
LEASE AGREEMENTS, COWORKING AGREEMENTS, CONSIGNMENT SALES AGREEMENTS, CARD AND MERCH PURCHASE AGREEMENTS, AND OTHER AGREEMENTS
If you wish to rent any of KUMST’s spaces, we need to enter into a rental/coworking agreement with you. We may also enter into other agreements with you (e.g., a consignment sales agreement if we are offering your art to the public, a purchase agreement if you are buying merchandise, etc.).
How exactly do we process your personal data in this case?
What do we need personal data for? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To conclude and perform the contract, including related communication | Identification data, address data, contact data, payment data, job title data, contract data, and data regarding its performance by both parties | Necessary for the performance of the contract | Up to 1 month after the contract ends; however, we may retain your personal data for longer for other purposes, e.g., because we are required to do so by law. |
To fulfill legal obligations | Identification data, billing information, contract details and details regarding its fulfillment by both parties | Necessity to comply with legal obligations | For the period specified by applicable laws |
To contact you in the event of a security breach of the leased space | Identification data, contact details | Legitimate interest in ensuring the security of our buildings and tenants | For the duration of the lease/coworking agreement |
If you decide to enter into a contract with us, we need the personal data listed above so that we can enter into the contract with you, continue to fulfill this contract, or verify your compliance with the contract, and also communicate with you as part of fulfilling the contract. Furthermore, we must fulfill the obligations set forth by law.
If you enter into a lease/coworking agreement with us, to ensure the safety of our buildings and tenants, we also need some of your personal data listed above so that we can contact you in the event of a security threat.
BUILDING ACCESS, COPY OF IDENTIFICATION
To access the building, you will need an access card or keys. With your consent, we may also make a copy of your ID.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To enable entry into the building and to maintain an overview of access to the building | Identification data, contact details, payment information, and information regarding the contract and its performance | Necessary for the performance of the contract | For a period of 3 years from the return of the card and key |
To copy an identity document for the purposes of ensuring the safety of persons on KUMST premises, protecting property, and other legally protected interests | Identification data, address data | Consent to the processing of personal data for the purpose of making a copy of an identity document | Up to 10 years after the end of the lease term; in the event of a dispute, up to 10 years after the conclusion of judicial, administrative, or other proceedings |
To fulfill legal obligations in the areas of accounting and taxes | Identification data, address data, data regarding the contract and its performance by both parties | Necessity to fulfill legal obligations | For the period specified by applicable laws |
We need your personal data so that we can securely issue you an access card and keys to the building, allow you to move freely within the building, and at the same time ensure we have an overview of access to the building. We also must comply with legal obligations.
With your consent, we will also make a copy of your identification document (ID card, driver’s license, passport, or other identification document), so that we can better ensure the safety of people on the KUMST premises, protect your and our property, and other legally protected interests. You may withdraw your consent to the processing of personal data at any time, and we will immediately cease processing your personal data (i.e., delete the copy of the document).
CCTV SYSTEM
At KUMST, we take care of the security of the buildings, the property inside them, and your health. That is why we have installed several cameras in the KUMST buildings, which transmit live video. If an incident occurs, we also have recordings available for a limited time for evidentiary purposes.
How exactly do we process your personal data in this case?
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To protect our property and the property of tenants, and to protect the life and health of people in the building | CCTV footage and recordings | Legitimate interest in protecting property and the life and health of individuals | For 72 hours from the time the recording is made; in the event of an incident, for a longer period (for the time necessary to protect our rights and interests) |
We need cameras to ensure the protection of property and the life and health of everyone in the building. If you do not agree with this and wish to have your recording deleted for a legitimate reason, you may object to the processing of your personal data. The procedure is outlined below (in the overview of your rights).
PROTECTION OF OUR RIGHTS AND INTERESTS
We want to protect our rights and interests, especially in cases where we can resolve disputes together (breaches of contract, incidents in the building etc.).How specifically do we process your personal data in this case?
What do we need personal data for? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
To protect our rights and interests | Information collected in the course of our cooperation with you | Legitimate interest in protecting our rights and interests | For the duration of the limitation periods for claims arising from contracts and other legal relationships, typically up to 10 years from the end of our cooperation, and in the event of a dispute, up to 10 years from the resolution of the dispute |
You may file an objection to the processing of personal data for the protection of our rights and interests. If the objection is justified, we will cease processing your data. The procedure for filing an objection is provided below.
CONTACTING US WITH QUESTIONS
You can contact us with your questions via email. In this case, we process your personal data as follows:
Why do we need personal data? | What personal data do we process? | What entitles us to process personal data? | How long do we retain personal data? |
| To answer your inquiry | Contact information | Legitimate interest in answering the inquiry | Up to 1 year from answering the inquiry, or up to 1 year from the last communication with us regarding the relevant inquiry |
Providing this personal data is entirely voluntary. However, without it we cannot answer your inquiry. You have the right to object to the processing of personal data for this purpose. If your objection is justified, we will cease processing your personal data for this purpose.
5. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?
Depending on the circumstances, your personal data may be disclosed to various parties, most commonly our suppliers. Since specific suppliers may change over time, only their categories are listed here. You may request a list of specific suppliers with access to your personal data at any time.
The following persons may have access to your personal data:
- JIC founders, who may oversee JIC’s operations,
- persons responsible for the operation of the website and our software(computer systems),
- external editors, who may assist us with preparing interviews and reports,
- speakers and organizers with whom we carry out events,
- persons responsible for distributing the newsletter,
- external experts, who can provide you with professional assistance when using our services,
- external accountants and auditors(if they need access to some of your personal data to fulfill contractual and legal obligations),
- legal and tax advisors who are bound by a legal duty of confidentiality,
- payment service providers (online payment portals, banks etc.), which we need so that you can pay us conveniently,
- persons providing marketing and graphic design services who can assist us with preparing marketing campaigns,
- public authorities, to whom we must or need to disclose your personal data, e.g., administrative authorities overseeing the use of public funds, law enforcement agencies, tax authorities, etc.
It may happen that some of our partners (especially suppliers) are based outside the EU. If anyone is to have access to your personal data, we have ensured that they provide appropriate safeguards to ensure that your personal data is secure and that your rights are not restricted in any way.
6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM WITH US?
Here you can find out what rights you have regarding the processing of your personal data by us and how you can exercise them. Regardless of the right in question, you can exercise it with us in any way you choose. It just needs to be possible to verify that the request is actually being submitted by you. If you want to receive a response as quickly as possible, please send your request to hello@kumst.cz.
Information about profiling
On our website, profiling may occur. This means that we may use the personal data we process about you to categorize you into certain groups— e.g., account users, people who regularly attend events, etc. Thanks to these profiles, we have a better overview of who uses our website and services and how, which allows us to improve our website and services. However, profiling will not affect how we provide services specifically to you. If you do not like profiling, you can send us your objection.
Right to Withdraw Consent
If we process your personal data based on your consent, you may withdraw it at any time . Ideally, please do so athello@kumst.cz. If you wish to withdraw your consent to receiving marketing communications (KUMST newsletters, JIC service offers), simply unsubscribe from marketing communications by clicking the link in each marketing communication or in your KUMST account settings.
Right of Access
You have the right to access the personal data we process about you. At the same time, you have the right to information about what personal data we process about you, for how long, what the purposes of processing are, to whom we disclose it , and whether we use it for automated decision-making (or, if so, how this automated decision-making works). We will provide you with a copy of your personal data free of charge. If you are interested in additional copies, we may require you to cover the necessary costs.
Right to Rectification
Have you discovered that we are processing incomplete or incorrect personal data about you? Then you have the right to have us correct the personal data or, if required by the purpose of processing such personal data, to have us complete it.
Right to erasure
Furthermore, you have the right to have your personal data that we store about you erased. To request erasure, one of the following reasons must apply:
- your personal data is no longer necessary for the purpose for which it was collected or processed;
- we are processing your personal data unlawfully;
- you have withdrawn the consent on the basis of which your personal data was processed, and we have no other legal basis to continue processing this personal data;
- you object to the processing of your personal data that we process on the basis of a legitimate interest, and we are unable to demonstrate that our legitimate interest overrides your right to erasure;
- there is a legal reason requiring the erasure of this personal data.
Although you withdraw your consent to the processing of personal data or request the erasure of your personal data, we may not always be able to delete your data. Sometimes we are required by law to process your personal data. In such cases, however, we will inform you of the reason why your personal data cannot be erased.
Right to Restriction of Processing
If you feel that your personal data is inaccurate, you may request that we restrict the processing of your personal data for the time strictly necessary to verify its accuracy and to correct it if necessary.
You also have this right in the following cases:
- the processing of your personal data is unlawful, but you do not wish for your personal data to be erased;
- we no longer need your personal data for the purpose for which we processed it, but you insist on its processing (especially storage) to establish, exercise, or defend your legal claims;
- you have objected to the processing of your personal data based on our legitimate interest; in this case, we will restrict processing until we assess whether our legitimate interest outweighs your right to have your personal data no longer processed.
Right to object to the processing of your personal data based on a legitimate interest, objection to direct marketing (sending service offers, newsletters), and objection to profiling
If we process your personal data based on a legitimate interest, direct marketing or profile you, you have the right to object to this processing. Based on this, we will assess whether it is truly in our legitimate interest to process your personal data for the given purpose. Or whether your right to have your personal data no longer processed prevails. If your objection is justified, we will cease processing your data.
Right to Data Portability
If we process your personal data automatically based on consent or necessity for the performance of a contract, you may ask us to provide you with your personal data in a structured, commonly used, and machine-readable format. Furthermore, you may ask us to transfer it to another data controller of your choice .
Right to File a Complaint
Do you believe that the above rights are insufficient from your perspective? Or that we are violating your rights in any way? You may file a complaint with the supervisory authority. You can file a complaint by contacting the Office for Personal Data Protection available at https://www.uoou.cz/.