On this page, you will learn everything about the processing of personal data that we implement. If we process your
personal data, here you will get detailed information about your rights and how to exercise them. You can find more
detailed information about individual processing, about your rights, and how to exercise them under the links - the
designations of individual groups of persons whose personal data we process, resp. designations of individual
- We do NOT sell personal information of any kind, NOR abuse users’ information in any other way.
- All data is stored in Amsterdam, EU.
- Every 4-6 weeks, we send you an email about Eventee updates and new features. You can unsubscribe at any time.
- We use Google Analytics and other analytics tools to understand who our customers are. We do not share any
personal information with these tools.
- We use TruConvert to track mouse movements on the Eventee website to see if our website sucks or not.
- We track which sites visitors come from to better understand our marketing spend. It's important to us because
we don't want to throw money at the wall and wait if anything happens. This is essential for our growth and our
ability to introduce new and better features in the future. Win-Win scenario.
- We use the chat tool Smartsupp for support, we share your name and email address with it so that in case we miss
your message, we know which email to reply to.
- We use the email tool Helpscout for support, we share your name and email address with it so that we can answer
- You can delete individual events created in Eventee. You can also terminate the entire account. All your data
will be permanently deleted.
- In no case do we work with your event dates, especially NOT with attendee information. Sharing information about
attendees without the attendee’s consent is your and only your responsibility.
CUSTOMER INFORMATION, OR INFORMATION ABOUT THEIR REPRESENTATIVES
The administrator of personal data is Touch Art, s.r.o., with its registered office at Kubesova 2623/2, Kralovo Pole,
612 00 Brno, registered in the Commercial Register at the Regional Court in Brno under file No. C 72788 (hereinafter
referred to as the " Administrator ").
2. YOUR RIGHTS
In relation to the given processing, you have the right to:
- ACCESS - the right to information whether or not your personal data is processed. If personal data are
processed, the right to information about the processing to the prescribed extent and the right to obtain a copy
of the processed data under certain conditions;
- CORRECTION - the right to request a correction if the processed personal data is inaccurate. Alternatively, the
right to request for completion if the data is incomplete;
- DELETION (right to be forgotten) - the right to request the deletion of data under the conditions stipulated by
law (revocation of consent, termination of the contract, illegality of processing);
- RESTRICTIONS ON PROCESSING - the right to request the designation and possible restrictions (suspension) of
processing until the data accuracy is verified, lawfulness of processing, settlement of objections or for the
protection of your interests (exercise or protection or defense of rights and legal interests);
- COMPLAINT - the right to contact the Office for Personal Data Protection with a complaint against the
Administrator, processing or the conditions of exercising rights. Contact and other information about the office
You also have the right to:
- OBJECTION - the right to request that your personal data will not be further processed due to the legitimate
interests of the Administrator.
For individual rights, their detailed characteristics, conditions of their origin, and exercise, see the relevant
link. The procedure for exercising the rights HERE.
The PERSONAL DATA PROTECTION OFFICER has not been appointed by the Administrator.
3. PURPOSE OF PROCESSING
The Administrator processes personal data for the performance of the contract and for the legitimate interest of the
Administrator: conclusion of the contract and possible subsequent performance of the contract with the Customer who
is using Eventee to organize their conference or other events.
4. LEGAL BASIS FOR PROCESSING
The legal basis for the processing of personal data is: performance of the contract if the customer is a natural
person (Article 6 (b) of the General Regulation) - in which case, the customer is the data subject. The legitimate
interest of the Administrator, if the customer is a legal entity or other entity that determines the contact and
related necessary data for the purposes of concluding the contract and performing the contract - in which case, the
data subjects are people who are intended for communication.
5. RANGE OF DATA being processed
The Administrator processes the following personal data for the above purpose:
Identification and contact details of the data subject
- if the data subject is a customer - identification and contact data, data on the provided product and
- if the data subject is a customer's representative - identification and contact details to employment, including
information on the job position.
6. THE PROVISION OF DATA IS ESSENTIAL
The provision of personal data is necessary for the conclusion and possible performance of the contract.
7. THE TIME for which personal data is stored and processed
The administrator processes personal data: contractual documents necessary for the fulfillment of the contractual
relationship for the period of performance of the contract and further within a shredding period of 10 years. Other
records and communications within a shredding period of 10 years.
8. THE PLACE where personal data will be processed
The place of processing of personal data is: Registered office of the Administrator.
9. RECIPIENTS to whom personal data may be provided
Personal data is provided to the following recipients (categories of recipients): no recipients.
10. THIRD COUNTRY
As part of the processing, personal data are NOT transferred outside the EU.
The Processor of Personal Data within the meaning of Article 4 point 8 of the General Data Protection Regulation or a
third person authorized by the Administrator to process personal data may participate in the processing of personal
data. In such cases, the Administrator minimizes the risk of unauthorized disclosure, destruction, processing, or
loss of personal data.
12. AUTOMATED DECISION-MAKING AND PROFILING
Automated decision-making means decision-making by technological means or on the basis of the results of the activity
of technological means without human interference / free decision-making.
Profiling means the use of personal data to assess certain personal aspects of a person, such as an estimate of a
person's work performance, economic situation, state of health, personal preferences, interests, reliability,
There is NO automated decision-making in connection with the processing of personal data.
There is NO profiling in connection with the processing of personal data.
Rights and their application
ARTICLE I. APPLICATION OF RIGHTS IN GENERAL
1. CHANNELS TO APPLY RIGHTS
The rights can be exercised under the following conditions:
- via the Administrator's data box;
- via the email address firstname.lastname@example.org;
- by written submission to the address Kubesova 2623/2, Kralovo Pole, 612 00 Brno;
- In person at the address: Hlinky 80, 603 00 Brno.
2. IDENTIFICATION AND SECURE COMMUNICATION
The exercise of rights must not prejudice the rights and freedoms of third parties. For this reason, the
Administrator has the right and obligation to identify the applicant for rights in necessary cases. For these
reasons, the Administrator must choose secure and reliable communication. Reliable communication, in which there is
no need to further verify the identity of the addressee, is always considered to be communication via an email
message, post office, which is provided with a verified electronic signature, communication via a data box,
communication via a postal service provider, where the document is signed and the agent's signature has been
officially verified, or the reply is sent in person.
3. ORAL APPLICATION OF RIGHTS
Exceptionally, if the beneficiary so requests, it is possible to provide information or enable the exercise of rights
orally. For oral provision of information, or on the oral exercise of rights by the party, a written record shall be
made. The condition for the oral exercise of rights, if the person concerned is not known personally, is the
verification of his identity by means of an identity card, passport, driving license or other documents from which
it can be seen that the rights are exercised by the person to whom they belong.
4. APPLICATION IN ELECTRONIC FORM
If the application is submitted, resp. if the rights are exercised by electronic filing, the reply shall also be sent
in electronic form, unless the person concerned has requested otherwise.
The information provided to the data subjects, the provision of copies to the data subjects, all communications, and
all acts related to the exercise of the data subject's rights shall be made free of charge.
6. REFUSAL AND FEE
If the request (exercise of the right) of the data subject is manifestly unfounded or disproportionate, in
particular, because it is an identical or largely identical request or a disproportionately large request which
cannot be dealt with within the statutory time limit,
- the processing of the application is conditioned by making an advance payment to cover administrative costs
associated with providing the required information or communication or performing the required actions - the
advance can be requested up to the number of anticipated costs, provided that information, communication, etc.
provided to the data subject only after full reimbursement of the costs incurred, or
- the request is not complied with, resp. the exercise of the right shall be refused in writing with a statement
7. DEADLINE FOR SETTLEMENT
The data subject's requests and responses to the exercise of the data subject's rights shall be dealt with without
delay. The answer, containing the required information, or describing the action taken following the data subject's
request, etc., must be delivered to the data subject no later than 30 days from the date of receipt of the request.
If it is, for serious reasons, not possible to settle the matter within the set time limit, the data subject shall,
in writing or by email no later than the end of this time limit, be notified that the time limit will not be met and
the reasons for it, including the time limit within which the matter will be settled; the period may not be extended
by more than 60 days.
ARTICLE II. RIGHT OF ACCESS AND COPY
- If the data subject requests so, they shall be provided with a confirmation as to whether or not their personal
data are being processed.
- If the personal data of the data subject are processed, the data subject shall be provided with information on:
- the purposes of the processing and the legal basis / title for the processing of personal data,
including a reference to the provisions of the law, and the scope and consequences of the processing;
- the potential recipient or category of recipients of the personal data;
- the transfer of personal data to third countries, if any, including information on appropriate
safeguards for the security of the data transferred to the third country;
- the period for which the personal data will be stored and if such a period cannot be determined, the
criteria for determining the period of storage;
- the right to request access to personal data concerning the data subject, the right to request their
correction or deletion, the right to request processing restrictions, the right to object to the
processing of personal data, and the conditions of individual rights and their exercise - the data
subject is always provided only with information on those rights the exercise of which is relevant in
connection with the processing of personal data;
- the right to data portability, the conditions for its creation and the conditions for its exercise - if
the exercise of this right comes into consideration with regard to the nature of the processing of
- whether there is an automated decision-making process and the data subject's rights associated with the
automated decision-making process;
- sources of personal data and, where applicable, that the personal data come from publicly available
- the right to lodge a complaint with the Supervisory Authority (Office for Personal Data Protection);
- whether there is automated decision-making in the form of profiling and the significance and expected
consequences of such processing for the data subject if implemented.
- The data subject has the right to request a copy of the processed personal data. The first provision of a copy
is free of charge. Additional copies are charged. Article I (6) also applies here.
- If the provision of a copy could harm the rights and freedoms of third parties (e.g. the copy contains personal
data of third parties for which there is no legal reason for disclosing the data subject requesting the copy),
the copy shall be anonymized accordingly. If the anonymization is not possible, or if the required information
would lose the meaning by performing appropriate anonymization, a copy will not be provided.
ARTICLE III. RIGHT OF REPAIR
- The data subject has the right to correct the processed personal data if the processed personal data are
inaccurate in terms of the purpose of processing or if they are incomplete in terms of the purpose of processing
personal data. The data subject may request the correction (including supplementation) of the processed personal
data or their supplementation.
- If the data subject exercises the right to rectify the processed personal data, the Administrator shall
immediately check the processing of personal data against which the right of rectification is exercised.
- If the Administrator concludes that the objection is, even if only partially, justified, it shall immediately
arrange for a remedy, i.e. the correction of the processed personal data or their supplementation.
- The data subject shall be notified of the result of the investigation and the measures taken in writing or by
ARTICLE IV. RIGHT TO DELETION
- The data subject has the right to the deletion of personal data, which concerns them, only:
- if personal data are not needed for the purposes for which they were collected or otherwise processed;
- the data subject revokes the consent to the processing of personal data and if there is no other legal
basis (title) for the processing of personal data;
- the data subject has raised a relevant objection to the processing of personal data;
- personal data were processed illegally, especially without a legal basis (title) for the processing of
- the deletion of personal data requires the fulfillment of a legal obligation, as follows from a legal
regulation or a decision issued on the basis of legal regulation;
- personal data have been collected in connection with the offer of information society services pursuant
to Article 8 (1) of the General Regulation.
- Deletion of personal data means the physical destruction of the carrier of personal data (e.g. destruction of
documents), or their deletion (from multimedia carriers), or other permanent exclusion from further processing
of personal data.
- If the data subject exercises the right of deletion, the Administrator shall examine the data subject's request.
If the data subject's request, even if only partially, is justified, the deletion shall be made to the extent
necessary. Article I, paragraph 7 of this part also applies here.
- Until the data subject's request is processed, the personal data against which the right of erasure has been
exercised shall be flagged.
- Personal data may not be deleted if their processing is necessary:
- for the exercise of the right to freedom of expression and information;
- to comply with a legal obligation arising from legislation;
- on grounds of public interest in the field of public health (Article 9 (2) (h) and (i) and Article 9 (3)
of the General Regulation);
- for archiving purposes in the public interest, for scientific or historical research purposes, or for
statistical purposes, where it is probable that erasure would make it impossible or seriously jeopardize
the fulfillment of the purposes of that processing;
- determination, exercise, and exercise of the Administrator's rights.
ARTICLE V. RIGHT TO RESTRICTIVE PROCESSING
- If the data subject exercises the right to restrict processing against specific a processing of personal data,
the Controller shall immediately assess the relevance of the data subject's request, primarily in terms of
fulfilling the conditions for exercising the right to restrict processing. facts concerning the processing of
personal data in question.
- The right to restrict the processing of personal data belongs to the data subject in the following cases:
- The data subject denies the accuracy of the personal data;
- The processing is unlawful and the data subject refuses to delete the personal data and calls for
restrictions on their use instead;
- The controller no longer needs the personal data for processing purposes, but the data subject requires
them to determine, enforce, or defend legal claims;
- The data subject has objected to the processing.
- Personal data which are subject to processing restrictions shall be marked.
- Where processing has been restricted, such personal data may, with the exception of their storage, be processed
only with the consent of the data subject or for the purpose of determining, enforcing, or defending legal
claims, for the protection of the rights of another natural or legal person or for reasons of overriding public
- Before the cancellation of the restriction of personal data processing, the data subject shall be notified of
the cancellation of the restriction in writing or by email. The communication shall state the moment when the
restriction on the processing of personal data will be lifted and the reason for which it will be lifted.
ARTICLE VI. RIGHT TO TRANSFERABILITY
- If personal data obtained from the data subject (either data directly transmitted by them or data obtained about
their activities, etc.), concerning the data subject, is the subject of personal data processing, the data
subject shall be entitled to the transferability of such data if the processing is based on the consent of the
data subject concerned or based on a contract with the data subject and if it is carried out automatically. The
right to portability does not include data and information generated by the Administrator on the basis of data
obtained from the data subject (e.g. profiling of the data subject's expected consumer behavior on the basis of
data obtained from the data subject, etc.).
- Under the right to portability, the data subject may request:
- the transfer of personal data which are the subject of a transferability in a structured, commonly used
and machine-readable format, in particular, not in a format requiring special paid licenses or a format
excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to the data
- the transfer of personal data which are the subject of a transferability in a structured, commonly used
and machine-readable format, in particular, not in a format requiring special paid licenses or a format
excluding further editing or other disposition (processing) of personal data (e.g. * .pdf), to another
data controller designated by the data subject in the personal data transfer request.
- The data subject's request inter alia (Article I (6)), shall not be complied with if the data subject's request
would be detrimental to the rights and freedoms of other persons (data subjects).
- Requests concerning the portability of data pursuant to paragraph 2 (a) (b) shall also not be complied with
unless the transfer is technically feasible, and a transfer that cannot be adequately safeguarded in view of the
available technological possibilities, commensurate with the nature of the data transferred and the risks
involved, shall be considered technically impracticable.
- The transferred personal data will be accompanied by information on the purpose of processing personal data and,
if the data subject requests so, information on the processing of personal data within the scope of Article 13
of the General Regulation on Personal Data Protection.
ARTICLE VII. AUTOMATED INDIVIDUAL DECISION MAKING, INCLUDING PROFILING
- Decision against the data subject, legal action against the data subject, or other measure or procedure which
will result in the data subject having adverse legal consequences or otherwise be affected by such an act (e.g.
automated rejection of an online loan application, electronic search of applicants non-human employment and
review of negative electronic system decisions), it is not possible to rely on automated individual decisions,
including profiling, unless the decision is
- necessary for the conclusion or performance of the contract between the data subject and the data
- permitted by legislation laying down appropriate measures to ensure the protection of the rights and
freedoms and legitimate interests of the data subject; or
- based on the explicit consent of the data subject.
- In the cases referred to in paragraphs 1 (a), (a), and (c) The controller shall ensure that appropriate measures
are taken to ensure that the rights and freedoms and legitimate interests of the data subject are protected from
the negative consequences of automated individual decision-making. Such measures shall include, as a minimum,
ensuring that the data subject has the opportunity to express their views and adverse review of the decision by
the Data Protection Supervisor before implementing the act, as well as human intervention, such as regular
review of unjustified adverse interference with the rights and freedoms of the data subject, resp. to their
- If the subject of the processing is sensitive data, resp. if individual decisions within the meaning of
paragraph 1 are to be based on sensitive data, paragraph 2 may be followed only if sufficient guarantees are
provided within the meaning of paragraph 2 of this Article and provided that the legal reason for processing
personal data is the explicit consent of the data subject within the meaning of Article 9 (2) (a); a) of the
General Regulation, or it is processing necessary for reasons of overriding public interest arising from the
law, which is proportionate to the objective pursued, respects the essence of the right to data protection and
provides appropriate and specific guarantees for the protection of the fundamental rights and interests of the
ARTICLE VIII. RIGHT TO OBJECT
- If the legal basis for the processing of personal data is a legal title pursuant to Article 6, point (1), letter
(e) of the General Regulation (performance of a task carried out in the public interest or in the exercise of
official authority entrusted to a lawyer) or a legal title pursuant to Article 6, point (1), letter (f) of the
General Regulation (processing necessary for the protection of the rights and legally protected interests of a
lawyer), the data subject has the right to object to the processing of personal data in question.
- Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to
object at any time to the processing of personal data concerning them and for that marketing, which shall
include profiling if such direct marketing is concerned. If the data subject objects to processing for direct
marketing purposes, personal data will no longer be processed for these purposes.
- If the data subject exercises the right to object, the Administrator shall examine the objection without
- Until the objection of the data subject is settled, the personal data concerned, resp. personal data processing
should be marked.
- Personal data against which a legitimate objection has been raised may not be further processed unless:
- there are serious legitimate reasons for further processing which outweigh the interests or rights and
freedoms of the data subject, or
- further processing was necessary to determine, enforce, or defend the rights of the Administrator.