Legal documents
Privacy Policy
Solvo. Institut pro rozvoj potenciálu, z.ú. · IČO 19860412 · Vlastislavova 152/4, 140 00 Praha 4, Czech Republic
1. General Provisions
Introduction
We place particular emphasis on the protection of personal data of visitors to our website and other individuals who provide us with their personal data. This Privacy Policy (hereinafter the "Privacy Policy") provides you with the necessary information on how we, Solvo. Institut pro rozvoj potenciálu, z.ú., Company ID No. 19860412, with its registered office at Vlastislavova 152/4, 140 00 Prague 4, Czech Republic, collect, store, and further process your personal data in the position of a data controller in connection with the operation of our website www.solvo.institute (hereinafter the "Website") or in any other way.
Scope
This Privacy Policy explains and informs you about (i) how we collect and process your personal data, and (ii) what rights you have and how you can exercise them.
Acknowledgment
We recommend that you carefully review this Privacy Policy. By continuing to use our Website and providing your personal data, you confirm that you have been informed about how your personal data is used as described in this Privacy Policy and in the relevant privacy notices.
Applicable Legislation
This Privacy Policy provides information required under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter the "GDPR").
2. Contact Details of the Controller
Contact Information
You may contact us directly via email at office@solvo.institute or at our registered address.
3. Terms and Definitions
Personal Data
Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, surname, date of birth, location data, or email.
Processing of Personal Data
Any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Controller
A natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of processing personal data.
Processor
A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Purpose
The reason for which the controller processes your personal data.
Cookies
A cookie is a small data file (text file) that a website — when visited by a user — asks your browser to store on your device in order to remember information about you, such as your language preferences or login details. Cookies we use can be divided into first-party cookies (technical cookies), which are necessary to provide website functionality, and third-party cookies (used for advertising and marketing purposes). This also includes other technologies that function in a similar way. More information can be found in the Cookies Policy.
Recipient
A person to whom personal data is disclosed.
Third Party
A natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the controller or processor.
Consent
Any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of personal data relating to you.
4. Processed Personal Data, Purpose, Method, and Duration of Processing
Sources of Personal Data
We obtain your personal data from various sources, in particular when you visit the Website, subscribe to newsletters, complete our surveys, or participate in our events.
Collected Data
We process only the personal data you provide through the above-mentioned sources. In particular, we process identification data (name, surname, date of birth, residence, marital status, information about children, job position, organizational affiliation); contact data (email address, mailing address, phone number); payment and transaction data; survey responses; contract performance data; event participation data; cookie data; health data; and sensitive data within the meaning of Article 9 GDPR.
Purpose, Legal Basis, and Duration
We process your personal data for the following purposes: (a) Informing about updates – legal basis: consent; duration: until withdrawal, max. 3 years. (b) Conducting surveys – legal basis: legitimate interest / explicit consent for sensitive data; duration: 10 years from evaluation. (c) Organizing events – legal basis: contract performance; duration: until event completion and follow-up communication. (d) Providing agreed services – legal basis: contract performance; duration: until service completion. (e) Promotion of events – legal basis: legitimate interest; duration: 10 years after the event. (f) Website operation (essential cookies) – legal basis: legitimate interest; duration: up to 2 years. (g) Website marketing (marketing cookies) – legal basis: consent; duration: duration of consent, max. 2 years. (h) Website customization (functional cookies) – legal basis: consent. (i) Internal records and legal protection – legal basis: legitimate interest; duration: 10 years. (j) Statistics and research – legal basis: legitimate interest; duration: 10 years. (k) Compliance with legal obligations – legal basis: legal obligation.
Cookies
When using our Website, we may process your personal data through cookies and other tracking technologies. Cookies are small text files stored in your browser. We use essential cookies (necessary for proper website operation) and third-party cookies (tracking, analytical, or targeting). You may modify or delete your cookie preferences at any time.
Methods of Processing
Your personal data is processed in an automated manner, including the use of statistical methods. In some cases, it may also be processed manually.
Children's Data
We do not knowingly collect or request personal data from individuals under 16 years of age. If you are under 16, please do not attempt to register or provide any personal data.
Consequences of Not Providing Data
Providing your personal data is necessary for entering into a contract for our services, including ensuring the functionality of the Website. Without this data, we would not be able to provide our services.
5. Transfer of Personal Data to Third Parties
Data Transfers
We are entitled to transfer personal data to third parties providing services related to our services, including administration, IT support, data analytics, and data storage. These entities act as processors or controllers.
Recipients
Personal data may be shared with IT system providers, analytics and marketing service providers, and external legal service providers.
Adequate Protection
We have concluded data processing agreements with processors ensuring the same level of security. When transferring data outside the European Economic Area, we ensure adequate protection in accordance with GDPR.
Confidentiality and Exceptions
We, including processors and controllers, are obliged to maintain confidentiality of personal data. Exceptions apply where disclosure is required by public authorities (e.g., Police of the Czech Republic, tax authorities).
6. Security of Personal Data
Security Measures and Policies
We have implemented necessary technical and organizational measures aligned with best practices and risk levels. These include employee training, regular data backups, data recovery procedures, breach accountability mechanisms, and software and hardware protection.
7. Your Rights
Information Provided
If you exercise your rights, we will inform each recipient processing your data, where feasible and not disproportionately burdensome.
Exercising Rights
To exercise your rights, contact us using our contact details. We will respond within one month, with the possibility of extending this period by two additional months.
Your Rights
You have the right to access, rectification, erasure, portability, lodge a complaint, restrict processing, and object. You may withdraw consent at any time.
Rectification
You have the right to correct inaccurate or incomplete personal data. We take steps to ensure accuracy.
Erasure
You may request deletion of your personal data at any time. We will delete it without undue delay unless required for legal obligations or legal claims.
Withdrawal of Consent
You may withdraw your consent at any time without affecting prior lawful processing.
Access and Portability
You have the right to obtain information and a copy of your personal data. We may transfer your data to another controller if technically feasible and without adverse impact on others.
Restriction of Processing
You may request restriction of processing. If lifted, we will inform you without delay.
Objection
You may object to processing based on legitimate interest. We will cease processing unless compelling legitimate grounds are demonstrated.
Complaint
You may file a complaint with the Czech Data Protection Authority, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.
8. Updates to This Policy
Updates
We regularly update this Privacy Policy. Changes become effective upon publication on www.solvo.institute.
Questions and comments
If you have any comments or questions about any part of this Privacy Policy, need support, or have any claims, please contact us at office@solvo.institute.