PRIVACY POLICY

ABSL Services s.r.o., Jugoslávská 620/29, Vinohrady (Prague 2), 120 00 Prague, ID: 11874333

GENERAL PROVISIONS

1. This Privacy Policy governs how the ABSL Services s.r.o., ID: 11874333 (hereinafter referred to as “Company”), handles personal data in compliance with the General Data Protection Regulation (GDPR).
2. Users acknowledge that by placing an order for a ticket, subscribing to newsletters, or browsing the Company’s website (https://shop.absl.cz/), their personal data will be processed by the Company or by third parties appointed by the Company. This processing is always in accordance with this Privacy Policy and our Cookie Policy.
3. The Company processes only the personal data obtained from the user. The user provides the Company with data voluntarily and consciously, ensuring that the data is complete, truthful, and current concerning themselves only. If the user enters data of third parties, they are responsible for handling the data lawfully and not infringing on the rights of third parties.
4. The Company may handle the following data:
   • For exhibitors:
     • Name and surname
     • Billing address and ID number
     • Email address
     • Telephone number
     • Website address
     • Job position if an employee
     • Areas of interest at the event
     • Timestamp of entry and exit from the event
     • IP addresses of devices used to view the website
   • For visitors:
     • Name and surname
     • Billing address and ID number
     • Email address
     • Telephone number
     • Areas of interest at the event
     • Timestamp of entry and exit from the event
     • IP addresses of devices used to view the website
   • For interested parties:
     • Email address
     • IP addresses of devices used to view the website
5. Personal data of exhibitors is processed for the purpose of fulfilling the contract (processing exhibitor applications, administration regarding the rental of exhibition space, informing about technical and organizational matters related to exhibiting). Email and IP addresses of devices used to view the website are processed for the legitimate interest of the Company (informing about future editions of the event and related events). Personal data under this paragraph is processed from the receipt of the exhibitor application for a period of:
   • 10 years from the end of the contract, corresponding to the limitation period for possible disputes in the case of processing for contract fulfillment
   • the duration of the event in the case of processing for the Company’s legitimate interest
6. Personal data of visitors is processed for the purpose of fulfilling the contract (preparation, administration, and sending of tickets, informing about organizational and technical matters related to the event). Email and IP addresses of devices used to view the website are processed for the legitimate interest of the Company (informing about future editions of the event and related events). Personal data under this paragraph is processed from the receipt of the ticket order for a period of:
   • 3 years from the event date in the case of processing for contract fulfillment
   • the duration of the event in the case of processing for the Company’s legitimate interest
7. Personal data of interested parties may be processed through the use of cookies in accordance with our Cookie Policy and further based on consent as outlined below.

III. DATA PROCESSING BASED ON CONSENT AND ITS REVOCATION

1. The Company may also process personal data of interested parties if it has received their voluntary and informed consent. The rental of space for exhibitors or ticket sales are never conditional on providing consent for personal data processing.
2. Consent may typically take the form of a tickbox, email, or other active step required in the email. Consent is also given by filling in the email and subscribing to the newsletter on the website.
3. Consent can be given for various purposes together or individually:
   • To allow the Company to inform about the event by email, i.e., send commercial communications related to the event and related events (e.g., Marketing Festival) even if the interested party has not yet attended any such event.
   • To enable the Company to use personal data for delivering the most relevant advertisements and information about the event, including through remarketing. In such cases, third parties (especially Google and Facebook) may combine provided personal data with data they have in accordance with the law.
4. The Company may process personal data based on consent for the duration of the event. The processing period may be shorter if the interested party revokes their consent by sending an email to absl@absl.cz.
5. Users acknowledge that by placing an order for a ticket, subscribing to newsletters, or visiting the Company’s website, personal data collected by the Company may be processed based on the Company’s legitimate interest.

IV. OTHER PROVISIONS ON PERSONAL DATA PROTECTION

1. The Company is obliged to provide users with the most relevant information about the event. Therefore, it may use their IP address and other identifiers in accordance with the Cookie Policy through web analytics tools to evaluate website traffic and user behavior online to deliver personalized information within the Company’s legitimate interest and based on the provided consent.
2. After the expiration of personal data processing periods or the cessation of processing reasons, the Company will immediately destroy the personal data.
3. Users acknowledge that the Company will make every effort to prevent unauthorized processing of personal data by other persons; however, it is not liable for any damage caused by unauthorized processing of personal data by a third party.
4. Users acknowledge that the Company uses Google Suite cloud solutions from Google LLC, California, USA. Google uses contractual clauses compliant with European personal data protection regulations. The Company always stores user data within the European Union. No personal data is transferred to third countries.
5. The Company also uses MailChimp, Simpleshop, and Eventee services for data processing purposes, whose operations comply with European personal data protection regulations and to which data may be transferred. Always for the purpose of processing.
6. Cookies may be stored on the user’s device primarily for the functionality of the ongoing connection, advertising personalization, offering services, and identifying user preferences. Data obtained is transferred to services such as Seznam, Google, and Facebook, in accordance with our Cookie Policy.
7. Personal data will be processed in both automated and non-automated ways. The data subject will not be subject to individual automated decision-making.
8. Users have the right, in accordance with GDPR, to contact the Company and request information about what personal data the Company processes, request access to this data, have it updated or corrected, or request processing restrictions, request a copy of the processed personal data, request deletion of personal data in certain situations, and have the right to data portability in certain cases. Users can object to processing based on the so-called legitimate interest. If the Company does not satisfy the objection, the user has the right to contact the Data Protection Authority directly.
9. Users will always inform the Company of changes in personal data to ensure only current and complete data is processed, upon the Company’s request or independently if there is a change in data.
10. Visitors and exhibitors also give the Company consent to capture their image on photos and videos from the event and to publish them on the Company’s website and social networks.

V. FINAL PROVISIONS

1. All legal relations arising from or related to the processing of personal data are governed by the laws of the Czech Republic, regardless of the location from which the Company’s website was accessed. Czech courts are competent to resolve disputes arising from privacy protection between the user and the Company, applying Czech law.
2. This Privacy Policy is effective from January 1, 2024.