General Data Protection Regulation

Information on Personal Data Processing

Our company, Cubex Centre Prague spol. s r.o., ID No. 05046645, with its registered office at Na Strži 2097/63, 140 00 Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 257069, has been providing rental spaces for event organizers, congresses, conferences, and other social events for an extensive period of time. During the course of this activity, the processing of personal data of clients and other individuals has naturally occurred.

Below you will find detailed information about the processing of personal data by our company, specifically:

  • what personal data our company processes
  • for what purposes it does so
  • what rights you have as the data subject and how you can exercise these rights

Audiovisual Recordings from the Camera System

Cubex Centre Prague spol. s r.o. collects, processes, and uses your personal data, specifically the recordings of individuals' movements from the camera system installed in the premises of Cubex Centre Prague (hereinafter referred to as the "monitored premises").

We exclusively obtain and record only such personal data that are necessary for the protection of the monitored premises and the property within, and for ensuring the safety of the individuals present within the monitored premises. The areas where the camera system is installed within the monitored premises are marked with signage. Cubex Centre Prague monitors the movement of individuals within the premises (entrance lobby, foyer, individual halls, entrances to the premises, elevator, storage, and company facilities). Cubex Centre Prague is both the operator and the controller of the camera system.

These personal data are processed by the data controller for the purposes of its legitimate interests and the interests of individuals entering the monitored premises under Article 6(1)(f) of the General Data Protection Regulation (EU Regulation No. 2016/679, hereinafter referred to as "GDPR"). The legitimate interest is the protection of property in the monitored premises and the assets brought into it, in addition to the safety of the individuals present within the monitored premises.

We collect and retain recordings of individuals' movements within the monitored premises solely for the purpose of protecting property and the safety of the individuals present within the monitored premises. Cameras are placed with consideration for the protection of your privacy, only to the necessary extent needed.

Security Measures for Your Personal Data

Your personal data protection is ensured through appropriate technical and organizational measures. These measures primarily concern protection against unlawful or accidental destruction, loss, alteration, or unauthorized access to transmitted, stored, or otherwise processed personal data.

Despite our best efforts to maintain a consistently high standard of personal data protection, it cannot be ruled out that information you have provided to us via the internet may be accessed or used by other persons.

Recordings will be used only in cases of suspected criminal acts against property or individuals and will be handed over to the Czech Police. During the processing period, neither the data controller nor the camera system operator has access to the recordings.

Recordings from the camera system are retained for a maximum of 48 hours (according to the impact assessment of the camera system on individuals' rights and freedoms) and are then overwritten.

Third-Party Access to Personal Data

The above personal data are not disclosed to third parties. For the operation of the camera system, we use the services of a data processor: NONCORE, a.s., Václavské náměstí 772/2, 110 00 Prague 1, Nové Město, ID No. 290 32 628, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File No. 15935.

Location of Data Storage

Recordings from the camera system are stored in the Czech Republic. The collected personal data are not used for any automated decision-making or profiling. The camera systems are not equipped with facial recognition software.

Audiovisual Recordings from Events

Cubex Centre Prague is authorized, with the consent of the event organizer, to make, use, and publish photographs, audio recordings, and video recordings taken during the event. The personal data of individuals included therein are protected in accordance with the relevant provisions of GDPR.

Additional Services Related to the Event

If you have ordered additional services from our company besides space rental (e.g., catering, graphic signage, etc.), we will process your personal data also for the purpose of providing the specific requested service.

For this purpose, our company will process your personal data, especially your name, surname, residential address, billing address, and email address, all depending on the nature of the service you have ordered.

Our company provides these services through third parties, i.e., it does not directly provide the stated service. For this purpose, our company cooperates with other entities that provide the services (catering company, printers, etc.). For the purpose of providing the specific service, your personal data will be transmitted to the specific recipient – the service provider. Detailed information about the recipient of your personal data will be provided during our communication or upon your request.

Your personal data will be processed for this purpose for the duration of the respective event and/or provision of the specific service, and further for the period until the final settlement of services and closure of the event, and then archived for the period specified by applicable legal regulations (accounting law, tax laws).

For this processing, our company is the data controller.

Newsletter Subscription

If you organized an event with our company, or if you confirmed your consent to receive newsletters on our website, your business contact became part of our database, which we use to send newsletters. We will send you newsletters containing information about the services our company offers you. The newsletter may also constitute commercial communication within the meaning of Act No. 480/2004 Coll., on certain information society services.

For the purpose of sending newsletters, our company as the controller will process your name, surname, email address, and possibly phone number and information about the entity where you are professionally active.

You can unsubscribe from the recipient list at any time by sending an email to rezervace@cubexcentrum.cz. After withdrawing your consent, we will no longer send you newsletters. The withdrawal of your consent does not affect the legality of processing before its withdrawal, nor does it affect other processing of your personal data for other purposes.

General Conditions for Personal Data Processing

For all the above purposes, the following applies:

  • We protect your personal data to prevent unauthorized use or disclosure to persons who are not authorized to process them.
  • We do not disclose your personal data without your consent.
  • For processing your personal data, we use the services of processors – server providers where the data is stored. Detailed information about processors is not disclosed due to the protection of trade secrecy. Detailed information can be provided upon your request.
  • Your personal data will be processed for a period of 10 years.

Right to Access Your Personal Data

You have the right to obtain information about whether we process your personal data or not. If your personal data are being processed, you also have the right to access your personal data and information about the processing.

If you request it, our company will provide you with a copy of the processed personal data. For additional copies that you may request, our company may charge a fee based on administrative costs. The amount of such a fee will be communicated to you in advance. If providing a copy of your personal data could adversely affect the rights and freedoms of others, you will not be provided with a copy.

Right to Rectification of Your Personal Data

Our company processes personal data in good faith that it is accurate and current. If we process inaccurate or incomplete personal data about you, you have the right to have such data corrected or supplemented upon your request.

Right to Erasure of Your Personal Data

You have the so-called "right to be forgotten," i.e., the right to have your personal data erased in cases where:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw the consent on which the processing is based, and there is no other legal ground for the processing.
  • You object to the processing based on legitimate interest or public interest, and there are no overriding legitimate grounds for the processing, or you object to processing for direct marketing purposes.
  • Your personal data was processed unlawfully.
  • Your personal data must be erased to comply with a legal obligation to which our company is subject as the controller.
  • Your personal data was collected in connection with the offer of information society services based on your consent, or where applicable, the consent of your legal representative.

Please note that there are situations in which this right does not apply, especially if the processing of your personal data is necessary for the establishment, exercise, or defense of legal claims, etc. An overview of exceptions is provided in Article 15(3) of GDPR.

Right to Restriction of Processing

In the following cases, you have the right to restrict the processing of your personal data:

  • If you contest the accuracy of your personal data, the processing will be restricted for the time necessary to verify the accuracy of the personal data.
  • If the processing is unlawful, but you request the restriction of their use instead of erasure.
  • If our company no longer needs your personal data for processing purposes, but you need them for the establishment, exercise, or defense of legal claims.
  • If you object to processing based on legitimate interest, the processing will be restricted until it is verified whether the legitimate grounds of our company override your legitimate grounds stated in the objection.

During the restriction period, your personal data will only be processed with your consent. The restriction does not apply to the storage of your personal data or their processing for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.

You will be informed in advance before the restriction is lifted.

Right to Data Portability

You have the right to receive your personal data that you provided to us in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller, where:

  • The processing is based on your consent or a contract to which you are a party, and
  • The processing is carried out by automated means.

In exercising your right to data portability, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This right cannot adversely affect the rights and freedoms of others.

Right to Object to Processing

You have the right to object to the processing of your personal data at any time, on grounds relating to your particular situation, if the processing is based on:

  • The performance of a task carried out in the public interest or the exercise of official authority vested in our company.
  • Our legitimate interests or those of a third party.

Our company will cease to process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

You also have the right to object to the processing of your personal data for direct marketing purposes. If you object, your personal data will no longer be processed for these purposes.

Automated Decision-Making and Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you, except where such processing:

  • Is necessary for entering into, or the performance of, a contract between you and our company.
  • Is authorized by Union or Member State laws to which our company abides by and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests.
  • Is based on your explicit consent.

How to Exercise Your Rights

You can exercise your rights free of charge. If your requests are manifestly unfounded or excessive, especially due to their repetitive nature, our company may charge a reasonable fee reflecting the administrative costs of providing the information, or refuse to act on the request.

To exercise your rights, please contact us via email: rezervace@cubexcentrum.cz or by post at the address mentioned in the header of this document. You can also lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable law.

Changes to This Information

Our company reserves the right to make changes to this document as necessary. The most current version will always be available on our website or upon request.

Contact Information

Cubex Centre Prague spol. s r.o.

Na Strži 2097/63, 140 00 Prague 4
Email: rezervace@cubexcentrum.cz
Phone: +420 222 123 456
Website: www.cubexcentrum.cz