We guard your personal data very carefully. In order to inform you about the way we handle your data, we have prepared this privacy policy (“Policy”).
We are Beatworx s.r.o., Company ID: XNUMX XNUMX XNUMX, with its registered office at Prokopova XNUMX/XNUMX, Žižkov, XNUMX XNUMX Prague XNUMX, a company entered in the Commercial Register at the Municipal Court in Prague under file no. C XNUMX (“we“). We operate the website www.letitroll.cz (“Website”) and we organise various festivals, concerts and other events (“Events”), for which you can buy a ticket via the Website (“Ticket”). We are a controller of your personal data.
If you have any questions, please email us at [email protected]. We are here for you and happy to help you with anything.
This Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council on the General Data Protection Regulation (you may know it as GDPR) and provides information on what personal data we process, why and how we handle it, and how long we will keep it. This applies to those who have bought a Ticket from us, attenders of our Events, as well as other users of the Website.
Do we really need your personal data?
We always try to process your personal data as little as possible. However, sometimes processing is unavoidable, for example if you wish to purchase a Ticket or attend an Event, we need your personal data to enable you to come. However, we can assure you that we will not process your personal data using automated individual processing that would have legal effects on you as a data subject or affect you in a similarly significant way.
Who do we collect your personal data from?
If you are buying a Ticket for yourself, we will get the details directly from you. However, if you are buying a Ticket for someone else, you can give us their personal details. In this case, you are responsible for ensuring that you can pass this information to us and you have all the necessary permissions to do so.
How do we process your personal data?
We process your personal data in various ways depending on the relationship between us. It depends on whether you have purchased a Ticket from us, are attending our Event or are just browsing our Website without us having any relationship with each other:
A) If you have purchased a Ticket from us on the Website, we process the following personal data about you:
Identification data. These are used to help us identify you when you enter into a contract between us. These include, for example, the name, surname, address.
Contact details. We use these to contact you if we need to. These include the phone number and email address.
Billing and bank details. We process these in connection with the identification and execution of payments. This includes, for example, information appearing on invoices, bank details and information about payments received or sent.
Information contained in a contract. These are details of the Ticket and the Event for which you have purchased the Ticket and other details relating to the contract between us.
Information from our communication. In this case, this mainly includes information in emails, records of telephone calls or information provided in contact forms, the content of our communications and information about contracts concluded via the Website.
We process this data for the following purposes and for the following period of time:
| What is the legal basis for processing under the GDPR? | Why do we process your data? | How long will we process them? | What specific data do we process for this purpose? |
| CONTRACT performance of contractual obligations or obligations within pre-contract negotiations Article 6(1)(b) of GDPR | To supply you with a Ticket and subsequently allow you to enter the Event | For the duration of the contract or until the termination of all rights and obligations under the contract | Identification data Contact details Billing and bank details Information contained in a contract Information from our communication |
| LAW compliance with legal obligations imposed on us by legal regulations Article 6(1)(c) of GDPR | To comply with any legal obligations that apply to us | For the period of time specified in the specific legislation under which we perform our obligations
For example, we keep personal data related to tax matters for 10 years from the end of the tax period in question | Identification data Contact details Billing and bank details Information contained in a contract |
| LEGITIMATE INTEREST it is in our legitimate interest Article 6(1)(f) of GDPR | To protect and enforce our claims | For up to 15 years. This corresponds to the longest possible limitation period provided for by law | Identification data Contact details Billing and bank details Information contained in a contract Information from our communication |
| To help us improve our services and to conduct surveys of your satisfaction with our services and Events | For 2 years after your purchase | Contact details Information contained in a contract Information from our communication | |
| To send you newsletters | For a period of 3 years from the conclusion of the last contract between us, or until you object to this processing, e.g. by unsubscribing from our newsletters | Contact details |
B) If you attend our Event and we enter into a contract with you to attend the Event (and someone else may have purchased the Ticket for you), we process the following personal data about you:
Identification data. These are used to help us identify you when you enter the Event. These include data provided to us by you or the person that purchased the Ticket for you, in particular, the name, surname and other information stated on the Ticket.
Information concerning the Event. These include details of the Event you are attending, for example the date or venue.
Information from our communication. If we have any communication with each other.
Your appearance. We take photos and videos at Events, so your appearance can be captured in the photos and videos.
We process this data for the following purposes and for the following period of time:
| What is the legal basis for processing under the GDPR? | Why do we process your data? | How long will we process them? | What specific data do we process for this purpose? |
| CONTRACT performance of contractual obligations or obligations within pre-contract negotiations Article 6(1)(b) of GDPR | To enable you to attend the Event | For the duration of the contract or until the termination of all rights and obligations under the contract | Identification data Information concerning the Event Information from our communication |
| LAW compliance with legal obligations imposed on us by legal regulations Article 6(1)(c) of GDPR | To comply with any legal obligations that apply to us | For the period of time specified in the specific legislation under which we perform our obligations | Identification data Information concerning the Event Information from our communication |
| LEGITIMATE INTEREST it is in our legitimate interest Article 6(1)(f) of GDPR | To protect and enforce our claims | For up to 15 years. This corresponds to the longest possible limitation period provided for by law | Identification data Information contained in a contract Information from our communication |
| To help us improve our services and to conduct surveys of your satisfaction with our services and Events | For 1 year after your purchase | Contact details Information contained in a contract Information from our communication | |
| CONSENT Article 6(1)(a) of GDPR and Section 84 of Act No. 89/2012 Sb., the Civil Code, as amended | To be allowed to take photos and videos at the Event |
For a period of 3 years after the recording (photo or video) was made. After this period, we will not delete photos and videos that have already been published, but we will not publish them, promote them again, etc.
Your consent to the processing of your personal data can be withdrawn at any time, for example by writing to us by email. If you do not want us to process your photos or videos further, let us know and we will remove them wherever we can reasonably do so and unless we consider that we have a legitimate interest in their continued use.
If you do not wish to be audio-visually recorded at the Event, please tell the photographer or videographer when they are recording. In this case, you will not be captured on the recording.
Your consent to the processing of personal data can be withdrawn at any time, for example by writing to us by e-mail. If you do not want us to process your photos or videos any further, please let us know and we will remove them wherever reasonably possible and unless we believe we have a legitimate interest in their continued use. If you do not wish to be audio-visually captured at the Event, please tell the photographer or videographer when they are recording. In this case, you will not be captured on the recording. | Your appearance |
C) If you browse our Website or make a purchase through it, we process the following personal data about you:
Contact details. In order to send you our newsletters, if you subscribe to them, we need your e-mail address.
Cookies. We use cookies for the operation and functioning of the Website.
We process this data for the following purposes and for the following period of time:
| What is the legal basis for processing under the GDPR? | Why do we process your data? | How long will we process them? | What specific data do we process for this purpose? |
| CONSENT we process data based on your consent Article 6(1)(a) of GDPR | To be allowed to send you our newsletters if you subscribe to them | For a period of 3 years from the date of consent, or until you object to this processing, e.g. by unsubscribing from our newsletters | Contact details |
| VARIOUS More information can be found in the cookies section below | To keep track of how you use our Website, where you come to it from and which of our products you are most interested in | For more information on how we use cookies, please see the cookies section below. | |
What about cookies?
We and our partners use cookies for the proper functioning of the Website. We divide cookies into essential, functional, analytics and marketing cookies.
Essential cookies are required for the Website to run properly. We do not require your consent to use these cookies. It is in our legitimate interest to keep the Website running properly. However, you can refuse their use by clicking on the cookie icon in the bottom left corner of the Website. However, if you reject these cookies, the Website may not display correctly and your browsing experience may not be the same as you are used to.
Analytics cookies are used to compile statistics and reports. We use them to track traffic to the Website and where you came to the Website from. We need your consent to use them. Again, you can refuse them at any time by clicking on the cookie icon in the bottom right corner of the Website.
Marketing cookies enable us and our partners to, for example, offer Tickets to our Events through targeted advertising. However, we need your consent to do this. You can refuse these cookies by clicking on the cookie icon in the bottom right corner of the Website.
You can find out what cookies we currently use by clicking on the cookie icon in the bottom right corner of the Website.
Who do we transfer your personal data to?
We may transfer your data to other entities, mainly to ensure that we can operate effectively.
Our service providers become processors of your personal data. However, they are only entitled to process your personal data to the extent that we agree with them.
Specifically, we transfer your personal data to the following entities:
Google Ireland Ltd, which is the operator of Google Analytics and Google Ads marketing tools. For information on how Google processes your personal data, click here.
Meta Platforms Inc., which, for example, operates the Facebook Pixel marketing tool and other analytics tools. For information on how Meta Platforms processes your personal data, click here.
Easol Trading Limited, which provides us with a solution for selling Tickets. It is a UK based company, but we have a contractual clause with them that guarantees the same level of data protection as you have in the EU.
Stripe Inc., which provides us with a payment gateway solution. However, we do not receive any information about your payment card from the payment gateway, only whether you have made the payment.
NFCtron, which provides ticket check-in at the venue and cashless if it is used at the event.
Solvica for the purpose of processing and analysing visitor data.
MailerLite, which provides newsletter distribution software.
In exceptional cases, we may also transfer your personal data to public authorities if it is in our interest or if they ask us to do so.
What rights do you have in relation to the processing of personal data?
You have the right to object if we process your personal data on the basis of our legitimate interest. This objection may be sent to our contact address or by e-mail. We will then evaluate it within one month of receipt at the latest.
You also have the following rights in relation to the processing of personal data:
You have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you have the right to access that personal data and to be told what personal data it is.
You may ask us to correct incorrect data or complete incomplete data.
Under certain conditions, we are also obliged to delete your personal data or restrict its processing if you ask us to do so. Under certain conditions, you also have the right to transfer your personal data to another controller.
If you suspect that your personal data is being unlawfully processed, you may file a complaint with the Personal Data Protection Office www.uoou.cz, , located at Pplk. Sochora 27, 170 00 Prague 7.
This Policy shall be effective as of May 24, 5.