Privacy Policy

PRIVACY POLICY

This Privacy Policy (the "Policy") of the CSG FOUNDATION FUND, registered at U Rustonky 714/1, Prague 8, 186 00, Czech Republic, Company ID: 230 00 791, registered under file number N 2646 at the Municipal Court in Prague (the "Foundation Fund" or "we"), provides information on the fundamental aspects of personal data processing.

The processing of personal data, including personal data of data subjects residing outside the European Union / European Economic Area ("EU"), is carried out in compliance with applicable EU regulations, particularly in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). In cases where specific personal data processing requirements are imposed by jurisdictions outside the EU and such requirements exceed the GDPR, we also adhere to these local specifics when processing personal data.

This Policy contains the following sections:

  1. IDENTIFICATION OF THE DATA CONTROLLER
  1. PURPOSE, SCOPE, AND LEGAL BASIS FOR PERSONAL DATA PROCESSING
  1. APPLICANTS FOR FOUNDATION SUPPORT
  1. BUSINESS PARTNERS
  1. JOB APPLICANTS
  1. WEBSITE VISITORS
  1. VISITORS TO OUR PREMISES MONITORED BY CCTV SYSTEMS
  1. PARTICIPANTS IN EVENTS WE ORGANIZE OR ATTEND
  1. PROCESSING OF PERSONAL DATA BASED ON CONSENT
  1. RECIPIENTS OF PERSONAL DATA
  1. THIRD-PARTY PERSONAL DATA
  1. DATA RETENTION PERIOD
  1. RIGHTS OF DATA SUBJECTS
  1. CODE OF CONDUCT FOR PERSONAL DATA HANDLING

IDENTIFICATION OF THE DATA CONTROLLER

The Foundation Fund processes data both manually and automatically.

The Foundation Fund acts as the controller of your personal data within the meaning of the GDPR, meaning it collects, stores, and utilizes (or otherwise processes) your personal data to carry out its activities.

To ensure the Foundation Fund's objectives, personal data may be processed by certain other companies within the CSG group or by external entities acting as data processors. Data is only transferred to these entities if they meet the necessary organizational and technical security measures and are contractually bound to comply with agreed processing conditions and safeguards.

The main personal data processor is the service company CSGM a.s., registered at U Rustonky 714/1, Prague 8, 186 00, Czech Republic, Company ID: 013 84 694.

Contact details of the Data Controller:

  • Postal Address: CSG FOUNDATION FUND, U Rustonky 714/1, Prague 8, 186 00, Czech Republic.
  • Email:ochranaou@czechoslovakgroup.cz

    • PURPOSE, SCOPE, AND LEGAL BASIS FOR PERSONAL DATA PROCESSING

    Your personal data may be processed primarily for the following purposes:

  • Performance of a contract (particularly fulfilling contracts with our business partners and applicants for support, including pre-contractual measures);
  • Compliance with legal obligations (such as accounting and tax legislation obligations, i.e., providing data to tax authorities or other public institutions in accordance with legal requirements);
  • Protection of our legitimate interests (e.g., safeguarding our website and network from misuse, operation of a CCTV system on our premises, protection of our know-how);
  • Efficient communication (to facilitate business negotiations, maintain your preferences, etc.);
  • Handling requests received via email and contact forms;
  • Sending commercial communications (newsletters) and targeted advertising.

    • APPLICANTS FOR FOUNDATION SUPPORT

    If you are an applicant for foundation support under one of our programs, we typically process your personal data as follows:

    Purpose of Processing:

  • Execution of donation or other agreements
  • Financial and accounting management
  • Handling inquiries, suggestions, and feedback
  • Sending commercial communications – based on our legitimate interest in supporting foundation activities and sending commercial communications about similar goods or services that you have ordered from us (you can opt out at any time)
  • Personalizing commercial communication content – only with your consent

    • Scope of Personal Data:

  • Identification data (name, surname, Company ID, Tax ID, ID document number)
  • Contact details (address, email, phone number, title)
  • Payment details (account number, transaction history, data required for anti-money laundering compliance)
  • Other data (e.g., order details, delivery details, complaints, reviews, feedback)
  • Date of birth for age verification

    • Legal Basis for Processing:

  • Performance of a contract (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Protection of our legitimate interests (Art. 6(1)(f) GDPR)
  • Your consent (Art. 6(1)(a) GDPR)

    • BUSINESS PARTNERS

    If you are our business partner (supplier), we typically process your personal data as follows:

    Purpose of Processing:

  • Contract performance
  • Financial and accounting management

    • Scope of Personal Data:

  • Identification data (name, surname, Company ID, Tax ID)
  • Contact details (address, email, phone number)
  • Payment details (account number, bank details, payment records)
  • Other data (e.g., order details, delivery details, complaints)

    • Legal Basis for Processing:

  • Performance of a contract (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Protection of our legitimate interests (Art. 6(1)(f) GDPR)

    • DATA RETENTION PERIOD

    We process and retain your personal data for the time necessary to fulfill all rights and obligations arising from the relevant contractual relationship and for the period required by applicable legal regulations or for which you have given consent. Otherwise, the retention period is determined based on the processing purpose, which must be reasonable, or by applicable legal provisions on data protection.

  • Performance of a contract: For the duration of the contract and up to 10 years after termination
  • Legal obligations: As prescribed by applicable laws
  • Protection of legitimate interests: Up to 3 years from the start of data processing, unless a special law stipulates otherwise or there is a justified need for a longer retention period in connection with a specific case
  • Commercial communications: For the duration of the consent, or until withdrawn

    • For detailed information on data subject rights, third-party personal data processing, CCTV surveillance, and event participation, please refer to the full version of our Privacy Policy.

    Effective from: March 1, 2025.