How we handle GDPR

Data controller
reSITE z.s., registered association with its address at Voršilská 130/10, Nové Město, 110 00 Praha, Czech Republic, ID: 22760954 (hereinafter also “We” or “Us”), is responsible as controller for the processing and protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), „GDPR“.

Our contact details
You may contact us in matters concerning personal data use and protection in writing at Voršilská 130/10, Nové Město, 110 00 Praha or in person at Martinská 360/2, 110 00 Staré Město, Prague, Czech Republic, or at info@resite.org, or by calling: +420 723 055 517.

In the course of our activities, we process personal data of various categories of persons (“data subjects”), mainly of our supporters (our members), interns, associates and business partners and of those who visited our conferences and events.

Supporters (our members)
If you registered as our member to contribute via the registration form available at https:// www.resite.org/support-us we shall process those data that you have filled in the registration form‚ i.e. your identification and contact details, the amount of your contribution and the payment method, and possibly other data too) in order to comply with our legal obligations, in particular in the tax and accounting area.

We use the provided email address in line with the membership terms to send our members exclusive invitations and –unless you unsubscribe- also our newsletter.

Interns and volunteers
We process personal data concerning our interns and volunteers that they provide when they join, mainly when it is necessary, and if bank account number to know where to send the pay. We further process personal data we are obliged to do so by labour law or other laws in particular accounting, tax, social security, health insurance laws et cetera.

Besides, we process personal data of our interns and volunteers on the legitimate interest ground (only to the extent necessary) in particular to increase effectiveness of management, planning and organization of work and improve communication. Also, we typically publish photos and brief bios about our interns and volunteers on our website, since we consider our team presentation to be an important part of online communication with the public.

Visitors to conferences, workshops and other events
If you purchased a ticket or registered for a conference or other event organized by us, and/or you attended our events, we shall process personal data that you have provided in the process of purchasing your ticket or registration (i.e. in particular your name, surname, email address, company you work for, your country, field of work and work position, bank details), information about the purchase and that you took part in the event, and possibly also photographs and video recordings of you taken during the event.

As event organizer, we require this data to carry out ticket sales and to arrange your participation in the conference/event. The data provided is also used to improve your customer experience and to keep you up to date and provide you with details of the event. On the legitimate interest ground, we may also use your contact details to send you our newsletter and we may use photographs and video recordings taken during the event to inform the public about the event and to promote similar events and projects.

Apart from us, other persons – processors- may participate in processing your personal data, particularly the ticket sale company.

Newsletter subscribers
If you subscribe to our newsletter we include your email address in our database and will be sending you on a regular basis our newsletter. You may unsubscribe at any time; you will find the link to unsubscribe in every newsletter footer.

Associates and business partners
We work with a range of business partners and associates. Their personal data may be processed where necessary to realize these collaborations and depending on its subject, extent and type.

Means of processing and protection of personal data
Apart from us, other persons -processors- may participate in processing your personal data, where it is necessary or appropriate. We process personal data electronically, using various IT systems. We have implemented adequate technical and organizational measures to protect your personal data and to prevent unauthorized access to personal data, change, erasure or loss, illegal sharing and processing or other abuse. All persons who may have access to the personal data, respect your right to privacy and are obliged to comply with the GDPR.

• Your rights under the GDPR
• Right of access to personal data and right to data portability
• You have the right to obtain from us information as to what personal data we process specifically about you. In response to your request, we will provide you with a copy of all such data in electronic format, unless you request other format. Additionally, you have the right to obtain certain personal data in a structured, commonly used and machine-readable format which enables full text searches.
• Right to rectification
• Upon request, we will rectify inaccurate or complete incomplete data concerning your person.
• Right to erasure (right to be forgotten)
• We are obliged to erase personal data in particular, personal data no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing, when the data subject objects to the processing and there are no overriding legitimate grounds for the processing; when it becomes apparent that the personal data have been unlawfully processed or the personal data have to be erased for compliance with a legal obligation.
• Right to withdraw consent to processing of personal data at any time
• Right to lodge a complaint with the Office for personal data protection (Pplk. Sochora 27, 17000 Praha 7, Czech Republic, phone number: +420 234 665 111, website: www.uoou.cz )

Right to object to processing of personal data
You have the right to object to processing of your personal data carried out on the legitimate interest ground; that is to say (put simply) in case the processing is necessary neither for the performance of a contract, nor for compliance with a legal obligation. For example, if you are a (former) intern, you may object to your photograph and bio being published on our website. If you have attended one of our events, you may request that we remove your contact details from our database and delete a video or a picture taken of you at the event. Should we assess your objection legitimate, we will delete or anonymize your data.

Updated: 3rd of August 2018