Eventee rechtliches

Privacy Policy

On this page, you will learn everything about the processing of personal data that we implement. If we process your personal data, here you will get detailed information about your rights and how to exercise them. You can find more detailed information about individual processing, about your rights, and how to exercise them under the links - the designations of individual groups of persons whose personal data we process, resp. designations of individual processes.

TL;DR version

• We do NOT sell personal information of any kind, NOR abuse users’ information in any other way.
• All data is stored in Amsterdam, EU.
• Every 4-6 weeks, we send you an email about Eventee updates and new features. You can unsubscribe at any time.
• We use Google Analytics and other analytics tools to understand who our customers are. We do not share any personal information with these tools.
• We use TruConvert to track mouse movements on the Eventee website to see if our website sucks or not.
• We track which sites visitors come from to better understand our marketing spend. It's important to us because we don't want to throw money at the wall and wait if anything happens. This is essential for our growth and our ability to introduce new and better features in the future. Win-Win scenario.
• We use the chat tool Smartsupp for support, we share your name and email address with it so that in case we miss your message, we know which email to reply to.
• We use the email tool Helpscout for support, we share your name and email address with it so that we can answer you.
• You can delete individual events created in Eventee. You can also terminate the entire account. All your data will be permanently deleted.
• In no case do we work with your event dates, especially NOT with attendee information. Sharing information about attendees without the attendee’s consent is your and only your responsibility.

CUSTOMER INFORMATION, OR INFORMATION ABOUT THEIR REPRESENTATIVES

1. ADMINISTRATOR

The administrator of personal data is Touch Art, s.r.o., with its registered office at Kubesova 2623/2, Kralovo Pole, 612 00 Brno, registered in the Commercial Register at the Regional Court in Brno under file No. C 72788 (hereinafter referred to as the " Administrator ").

2. YOUR RIGHTS

In relation to the given processing, you have the right to:

• ACCESS - the right to information whether or not your personal data is processed. If personal data are processed, the right to information about the processing to the prescribed extent and the right to obtain a copy of the processed data under certain conditions;
• CORRECTION - the right to request a correction if the processed personal data is inaccurate. Alternatively, the right to request for completion if the data is incomplete;
• DELETION (right to be forgotten) - the right to request the deletion of data under the conditions stipulated by law (revocation of consent, termination of the contract, illegality of processing);
• RESTRICTIONS ON PROCESSING - the right to request the designation and possible restrictions (suspension) of processing until the data accuracy is verified, lawfulness of processing, settlement of objections or for the protection of your interests (exercise or protection or defense of rights and legal interests);
• COMPLAINT - the right to contact the Office for Personal Data Protection with a complaint against the Administrator, processing or the conditions of exercising rights. Contact and other information about the office see www.uoou.cz;

You also have the right to:

• OBJECTION - the right to request that your personal data will not be further processed due to the legitimate interests of the Administrator.

For individual rights, their detailed characteristics, conditions of their origin, and exercise, see the relevant link. The procedure for exercising the rights HERE.

The PERSONAL DATA PROTECTION OFFICER has not been appointed by the Administrator.

3. PURPOSE OF PROCESSING

The Administrator processes personal data for the performance of the contract and for the legitimate interest of the Administrator: conclusion of the contract and possible subsequent performance of the contract with the Customer who is using Eventee to organize their conference or other events.

4. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of personal data is: performance of the contract if the customer is a natural person (Article 6 (b) of the General Regulation) - in which case, the customer is the data subject. The legitimate interest of the Administrator, if the customer is a legal entity or other entity that determines the contact and related necessary data for the purposes of concluding the contract and performing the contract - in which case, the data subjects are people who are intended for communication.

5. RANGE OF DATA being processed

The Administrator processes the following personal data for the above purpose: Identification and contact details of the data subject

• if the data subject is a customer - identification and contact data, data on the provided product and services;
• if the data subject is a customer's representative - identification and contact details to employment, including information on the job position.

6. THE PROVISION OF DATA IS ESSENTIAL

The provision of personal data is necessary for the conclusion and possible performance of the contract.

7. THE TIME for which personal data is stored and processed

The administrator processes personal data: contractual documents necessary for the fulfillment of the contractual relationship for the period of performance of the contract and further within a shredding period of 10 years. Other records and communications within a shredding period of 10 years.

8. THE PLACE where personal data will be processed

The place of processing of personal data is: Registered office of the Administrator.

9. RECIPIENTS to whom personal data may be provided

Personal data is provided to the following recipients (categories of recipients): no recipients.

10. THIRD COUNTRY

As part of the processing, personal data are NOT transferred outside the EU.

11. PROCESSOR

The Processor of Personal Data within the meaning of Article 4 point 8 of the General Data Protection Regulation or a third person authorized by the Administrator to process personal data may participate in the processing of personal data. In such cases, the Administrator minimizes the risk of unauthorized disclosure, destruction, processing, or loss of personal data.

12. AUTOMATED DECISION-MAKING AND PROFILING

Automated decision-making means decision-making by technological means or on the basis of the results of the activity of technological means without human interference / free decision-making.

Profiling means the use of personal data to assess certain personal aspects of a person, such as an estimate of a person's work performance, economic situation, state of health, personal preferences, interests, reliability, etc.

There is NO automated decision-making in connection with the processing of personal data.

There is NO profiling in connection with the processing of personal data.

Rights and their application

ARTICLE I. APPLICATION OF RIGHTS IN GENERAL

1. CHANNELS TO APPLY RIGHTS

The rights can be exercised under the following conditions:

• via the Administrator's data box;
• via the email address gdpr@eventee.co;
• by written submission to the address Kubesova 2623/2, Kralovo Pole, 612 00 Brno;
• In person at the address: Hlinky 80, 603 00 Brno.

2. IDENTIFICATION AND SECURE COMMUNICATION

The exercise of rights must not prejudice the rights and freedoms of third parties. For this reason, the Administrator has the right and obligation to identify the applicant for rights in necessary cases. For these reasons, the Administrator must choose secure and reliable communication. Reliable communication, in which there is no need to further verify the identity of the addressee, is always considered to be communication via an email message, post office, which is provided with a verified electronic signature, communication via a data box, communication via a postal service provider, where the document is signed and the agent's signature has been officially verified, or the reply is sent in person.

3. ORAL APPLICATION OF RIGHTS

Exceptionally, if the beneficiary so requests, it is possible to provide information or enable the exercise of rights orally. For oral provision of information, or on the oral exercise of rights by the party, a written record shall be made. The condition for the oral exercise of rights, if the person concerned is not known personally, is the verification of his identity by means of an identity card, passport, driving license or other documents from which it can be seen that the rights are exercised by the person to whom they belong.

4. APPLICATION IN ELECTRONIC FORM

If the application is submitted, resp. if the rights are exercised by electronic filing, the reply shall also be sent in electronic form, unless the person concerned has requested otherwise.

5. COSTS

The information provided to the data subjects, the provision of copies to the data subjects, all communications, and all acts related to the exercise of the data subject's rights shall be made free of charge.

6. REFUSAL AND FEE

If the request (exercise of the right) of the data subject is manifestly unfounded or disproportionate, in particular, because it is an identical or largely identical request or a disproportionately large request which cannot be dealt with within the statutory time limit,

• the processing of the application is conditioned by making an advance payment to cover administrative costs associated with providing the required information or communication or performing the required actions - the advance can be requested up to the number of anticipated costs, provided that information, communication, etc. provided to the data subject only after full reimbursement of the costs incurred, or
• the request is not complied with, resp. the exercise of the right shall be refused in writing with a statement of reasons.

7. DEADLINE FOR SETTLEMENT

The data subject's requests and responses to the exercise of the data subject's rights shall be dealt with without delay. The answer, containing the required information, or describing the action taken following the data subject's request, etc., must be delivered to the data subject no later than 30 days from the date of receipt of the request. If it is, for serious reasons, not possible to settle the matter within the set time limit, the data subject shall, in writing or by email no later than the end of this time limit, be notified that the time limit will not be met and the reasons for it, including the time limit within which the matter will be settled; the period may not be extended by more than 60 days.

ARTICLE II. RIGHT OF ACCESS AND COPY

• If the data subject requests so, they shall be provided with a confirmation as to whether or not their personal data are being processed.
• If the personal data of the data subject are processed, the data subject shall be provided with information on:
  • the purposes of the processing and the legal basis / title for the processing of personal data, including a reference to the provisions of the law, and the scope and consequences of the processing;
  • the potential recipient or category of recipients of the personal data;
  • the transfer of personal data to third countries, if any, including information on appropriate safeguards for the security of the data transferred to the third country;
  • the period for which the personal data will be stored and if such a period cannot be determined, the criteria for determining the period of storage;
  • the right to request access to personal data concerning the data subject, the right to request their correction or deletion, the right to request processing restrictions, the right to object to the processing of personal data, and the conditions of individual rights and their exercise - the data subject is always provided only with information on those rights the exercise of which is relevant in connection with the processing of personal data;
  • the right to data portability, the conditions for its creation and the conditions for its exercise - if the exercise of this right comes into consideration with regard to the nature of the processing of personal data;
  • whether there is an automated decision-making process and the data subject's rights associated with the automated decision-making process;
  • sources of personal data and, where applicable, that the personal data come from publicly available sources;
  • the right to lodge a complaint with the Supervisory Authority (Office for Personal Data Protection);
  • whether there is automated decision-making in the form of profiling and the significance and expected consequences of such processing for the data subject if implemented.
• The data subject has the right to request a copy of the processed personal data. The first provision of a copy is free of charge. Additional copies are charged. Article I (6) also applies here.
• If the provision of a copy could harm the rights and freedoms of third parties (e.g. the copy contains personal data of third parties for which there is no legal reason for disclosing the data subject requesting the copy), the copy shall be anonymized accordingly. If the anonymization is not possible, or if the required information would lose the meaning by performing appropriate anonymization, a copy will not be provided.

ARTICLE III. RIGHT OF REPAIR

• The data subject has the right to correct the processed personal data if the processed personal data are inaccurate in terms of the purpose of processing or if they are incomplete in terms of the purpose of processing personal data. The data subject may request the correction (including supplementation) of the processed personal data or their supplementation.
• If the data subject exercises the right to rectify the processed personal data, the Administrator shall immediately check the processing of personal data against which the right of rectification is exercised.
• If the Administrator concludes that the objection is, even if only partially, justified, it shall immediately arrange for a remedy, i.e. the correction of the processed personal data or their supplementation.
• The data subject shall be notified of the result of the investigation and the measures taken in writing or by email.

ARTICLE IV. RIGHT TO DELETION

• The data subject has the right to the deletion of personal data, which concerns them, only:
  • if personal data are not needed for the purposes for which they were collected or otherwise processed;
  • the data subject revokes the consent to the processing of personal data and if there is no other legal basis (title) for the processing of personal data;
  • the data subject has raised a relevant objection to the processing of personal data;
  • personal data were processed illegally, especially without a legal basis (title) for the processing of personal data;
  • the deletion of personal data requires the fulfillment of a legal obligation, as follows from a legal regulation or a decision issued on the basis of legal regulation;
  • personal data have been collected in connection with the offer of information society services pursuant to Article 8 (1) of the General Regulation.
• Deletion of personal data means the physical destruction of the carrier of personal data (e.g. destruction of documents), or their deletion (from multimedia carriers), or other permanent exclusion from further processing of personal data.
• If the data subject exercises the right of deletion, the Administrator shall examine the data subject's request. If the data subject's request, even if only partially, is justified, the deletion shall be made to the extent necessary. Article I, paragraph 7 of this part also applies here.
• Until the data subject's request is processed, the personal data against which the right of erasure has been exercised shall be flagged.
• Personal data may not be deleted if their processing is necessary:
  • for the exercise of the right to freedom of expression and information;
  • to comply with a legal obligation arising from legislation;
  • on grounds of public interest in the field of public health (Article 9 (2) (h) and (i) and Article 9 (3) of the General Regulation);
  • for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, where it is probable that erasure would make it impossible or seriously jeopardize the fulfillment of the purposes of that processing;
  • determination, exercise, and exercise of the Administrator's rights.

ARTICLE V. RIGHT TO RESTRICTIVE PROCESSING

• If the data subject exercises the right to restrict processing against specific a processing of personal data, the Controller shall immediately assess the relevance of the data subject's request, primarily in terms of fulfilling the conditions for exercising the right to restrict processing. facts concerning the processing of personal data in question.
• The right to restrict the processing of personal data belongs to the data subject in the following cases:
  • The data subject denies the accuracy of the personal data;
  • The processing is unlawful and the data subject refuses to delete the personal data and calls for restrictions on their use instead;
  • The controller no longer needs the personal data for processing purposes, but the data subject requires them to determine, enforce, or defend legal claims;
  • The data subject has objected to the processing.
• Personal data which are subject to processing restrictions shall be marked.
• Where processing has been restricted, such personal data may, with the exception of their storage, be processed only with the consent of the data subject or for the purpose of determining, enforcing, or defending legal claims, for the protection of the rights of another natural or legal person or for reasons of overriding public interest.
• Before the cancellation of the restriction of personal data processing, the data subject shall be notified of the cancellation of the restriction in writing or by email. The communication shall state the moment when the restriction on the processing of personal data will be lifted and the reason for which it will be lifted.

ARTICLE VI. RIGHT TO TRANSFERABILITY

• If personal data obtained from the data subject (either data directly transmitted by them or data obtained about their activities, etc.), concerning the data subject, is the subject of personal data processing, the data subject shall be entitled to the transferability of such data if the processing is based on the consent of the data subject concerned or based on a contract with the data subject and if it is carried out automatically. The right to portability does not include data and information generated by the Administrator on the basis of data obtained from the data subject (e.g. profiling of the data subject's expected consumer behavior on the basis of data obtained from the data subject, etc.).
• Under the right to portability, the data subject may request:
  • the transfer of personal data which are the subject of a transferability in a structured, commonly used and machine-readable format, in particular, not in a format requiring special paid licenses or a format excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to the data subject;
  • the transfer of personal data which are the subject of a transferability in a structured, commonly used and machine-readable format, in particular, not in a format requiring special paid licenses or a format excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to another data controller designated by the data subject in the personal data transfer request.
• The data subject's request inter alia (Article I (6)), shall not be complied with if the data subject's request would be detrimental to the rights and freedoms of other persons (data subjects).
• Requests concerning the portability of data pursuant to paragraph 2 (a) (b) shall also not be complied with unless the transfer is technically feasible, and a transfer that cannot be adequately safeguarded in view of the available technological possibilities, commensurate with the nature of the data transferred and the risks involved, shall be considered technically impracticable.
• The transferred personal data will be accompanied by information on the purpose of processing personal data and, if the data subject requests so, information on the processing of personal data within the scope of Article 13 of the General Regulation on Personal Data Protection.

ARTICLE VII. AUTOMATED INDIVIDUAL DECISION MAKING, INCLUDING PROFILING

• Decision against the data subject, legal action against the data subject, or other measure or procedure which will result in the data subject having adverse legal consequences or otherwise be affected by such an act (e.g. automated rejection of an online loan application, electronic search of applicants non-human employment and review of negative electronic system decisions), it is not possible to rely on automated individual decisions, including profiling, unless the decision is
  • necessary for the conclusion or performance of the contract between the data subject and the data controller;
  • permitted by legislation laying down appropriate measures to ensure the protection of the rights and freedoms and legitimate interests of the data subject; or
  • based on the explicit consent of the data subject.
• In the cases referred to in paragraphs 1 (a), (a), and (c) The controller shall ensure that appropriate measures are taken to ensure that the rights and freedoms and legitimate interests of the data subject are protected from the negative consequences of automated individual decision-making. Such measures shall include, as a minimum, ensuring that the data subject has the opportunity to express their views and adverse review of the decision by the Data Protection Supervisor before implementing the act, as well as human intervention, such as regular review of unjustified adverse interference with the rights and freedoms of the data subject, resp. to their legitimate interests.
• If the subject of the processing is sensitive data, resp. if individual decisions within the meaning of paragraph 1 are to be based on sensitive data, paragraph 2 may be followed only if sufficient guarantees are provided within the meaning of paragraph 2 of this Article and provided that the legal reason for processing personal data is the explicit consent of the data subject within the meaning of Article 9 (2) (a); a) of the General Regulation, or it is processing necessary for reasons of overriding public interest arising from the law, which is proportionate to the objective pursued, respects the essence of the right to data protection and provides appropriate and specific guarantees for the protection of the fundamental rights and interests of the data subject.

ARTICLE VIII. RIGHT TO OBJECT

• If the legal basis for the processing of personal data is a legal title pursuant to Article 6, point (1), letter (e) of the General Regulation (performance of a task carried out in the public interest or in the exercise of official authority entrusted to a lawyer) or a legal title pursuant to Article 6, point (1), letter (f) of the General Regulation (processing necessary for the protection of the rights and legally protected interests of a lawyer), the data subject has the right to object to the processing of personal data in question.
• Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning them and for that marketing, which shall include profiling if such direct marketing is concerned. If the data subject objects to processing for direct marketing purposes, personal data will no longer be processed for these purposes.
• If the data subject exercises the right to object, the Administrator shall examine the objection without delay.
• Until the objection of the data subject is settled, the personal data concerned, resp. personal data processing should be marked.
• Personal data against which a legitimate objection has been raised may not be further processed unless:
  • there are serious legitimate reasons for further processing which outweigh the interests or rights and freedoms of the data subject, or
  • further processing was necessary to determine, enforce, or defend the rights of the Administrator.

TL;DR

We use Cookies to:

• Better understand who is our customer,
• Understand what websites customers arrived from,
• This helps us to create better content and attract more relevant customers,
• Provide technical help, like recognizing the language we should show you, etc.

We DO NOT use Cookies to:

• Retarget you with our ads on social media

What are cookies

Cookies are small text files that a website sends to your Internet browser. They allow the website to record information about your visit, such as your selected language. Thus, your next visit can be easier and more enjoyable for you. Cookies are important because browsing the Internet without them would be much more complicated. Cookies facilitate better use of our website and customize the content to your needs. Cookies are used by almost every website in the world. Cookies are useful because they enhance the user-friendliness of repeatedly visited websites.

What cookies are we using

Necessary - Without these cookies, our website cannot work properly. They provide help by telling us your language so we can render the website in the language you understand. Besides that, we also receive data about your screen resolution and other similar information.

Cookie	Domain	Description
XSRF-TOKEN	.eventee.co	This cookie is used for security purposes.
LANG	.eventee.co	This cookie is used for localisation purposes.
eventee_session	.eventee.co	This cookie is used for session data purposes.
lang	.ads.linkedin.com	LinkedIn sets this cookie to remember a user's language setting.
bcookie	.linkedin.com	LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID.
lidc	.linkedin.com	LinkedIn sets the lidc cookie to facilitate data center selection.
lang	.linkedin.com	LinkedIn sets this cookie to remember a user's language setting.
ssupp.vid	eventee.co	Cookie set by Smartsupp to record the visitor ID.
ssupp.visits	eventee.co	Cookie set by Smartsupp to record the number of previous visits, necessary to track automatic messages.
_dc_gtm_UA-70995342-1	eventee.co	Used to help identify the visitors by either age, gender, or interests by DoubleClick.
_tcSessInfo	eventee.co	Used to count the number of pages viewed by the user.
_tcSecSess	eventee.co	Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.
_tcfpup	eventee.co	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
ti_ukp	eventee.co	Visitor session hash.
nQ_userVisitId	eventee.co	Sets a unique ID for a specific visitor. This ID can be used to recognize the visitor upon re-entry and implement any preference choices made

Analytics - These are the most important cookies to us as it helps us to understand who our customers are. Without these cookies, we would be simply throwing money at the internet and hoping that someone will come and buy an Eventee license.

Cookie	Domain	Description
_ga*	.eventee.co	The _ga cookies, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report.
_gid	.eventee.co	Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance.
_gcl_au	.eventee.co	Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services.
nQ_cookieId	.eventee.co	Albacross sets this cookie to help identify companies for better lead generation and more effective ad targeting.
bscookie	.www.linkedin.com	LinkedIn sets this cookie to store performed actions on the website.
AnalyticsSyncHistory	.linkedin.com	-

Marketing - We use these to see if someone who arrived from an Ad becomes our customer so we can put more money into the right Ads and don’t waste it on random Ads no one is interested in.

Cookie	Domain	Description
personalization_id	.twitter.com	Twitter sets this cookie to integrate and share features for social media and also store information about how the user uses the website, for tracking and targeting.
_fbp	.eventee.co	This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website.
fr	.facebook.com	Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin.
UserMatchHistory	.linkedin.com	LinkedIn sets this cookie for LinkedIn Ads ID syncing.
muc_ads	.t.co	-
li_gc	.linkedin.com	-

Multimedia - You need this to be able to watch videos on our website. If you are an attendee of a Virtual event, we recommend you to keep these cookies on.

Cookie	Domain	Description
YSC	.youtube.com	YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.
VISITOR_INFO1_LIVE	.youtube.com	A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.
CONSENT	.youtube.com	YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.
CONSENT	.youtube-nocookie.com	YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.
_sl_session	.slideslive.com	-
referrer_url	.twitch.tv	This cookie is used to detect how the user reached the website by registering their last URL-address.
api_token	.twitch.tv	This cookie is set by Twitch to display the embedded video and the services required to function the same.
server_session_id	.twitch.tv	This cookie is set by Twitch to help in load balancing and optimizing the visitor experience.
experiment_overrides	.twitch.tv	-
unique_id	.twitch.tv	This cookie is set by Powr.io to preserve user states across page requests.
unique_id_durable	.twitch.tv	Cookie that is used to register whether the user is logged in. This allows the website owner to make parts of the website inaccessible, based on the user's log-in status.
AWSALBCORS	signal.appearin.net	This cookie is managed by Amazon Web Services and is used for load balancing.

You have the right to decide whether to accept or reject Cookies. You can choose your settings in the footer of our website. You can also control the use of cookies at the browser level by setting your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website. In this case, your choice will be saved only on our public website. Your decision applies to our public website and all event websites available at eventee.co/e/~.

By signing up for Eventee and using our application, you agree to our Privacy policy and Terms.