Privacy Policy and Data Processing Principles

This page provides an overview of the main principles regarding the protection of personal data and other processed data.

  1. Who processes your data?

    We are an IT company and operator of a number of predominantly enterprise information systems, CS Development, s.r.o., ID: 48592455, registered office at Thunovská 179/12, 118 00 Praha 1, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 18605, and as the data controller we will process your personal data under the conditions set out below.

  2. What personal data do we process?

    We process only the personal data that you provide to us in connection with the use of our services.

    These are most commonly data that you provide when registering for one of our services:

    • email address
    • password only in the form of its hash, from which the original password cannot be recovered
    • first and last name or nickname (only if necessary for a specific service)
    • profile information such as age, gender, geographic location
    • other data voluntarily filled in by you (e.g. in a contact form)

    and further data that we obtain through your use of our services:

    • IP address
    • cookies (in the case of online services)
    • any other online identifier
  3. Why do we process your personal data?

    The main reason we process your personal data is so that we can manage your user accounts for our services, so that we can provide you with services you have expressed interest in, whether free or paid services (including administration and processing of payment in the case of paid services), and so that we can ensure and continuously improve the security of our services and thus your data.

    We further process your data for the purpose of:

    • improving the quality of our services and developing new ones
    • carrying out analyses and measurements to understand how our services are used
    • ensuring the security of our systems and networks against external attacks or misuse by users
    • answering your inquiry sent via the contact form or email
    • monitoring incoming calls to improve our services (Call Centre)
    • reasonable promotion of the company's activities (including, for example, publishing photographs from events organised by the company while respecting the protection of your personality)
    • debt collection
    • keeping accounting records and fulfilling other legal obligations and
    • protecting our rights (e.g. in the event of legal proceedings relating to our services)
  4. Who will have access to your data?

    Your data is safe with us. We carefully select our partners to whom we entrust your data and who are able to ensure such technical and organisational security of your data that unauthorised or accidental access to your data or other misuse cannot occur. Protecting your data is our priority. All our partners are bound by a duty of confidentiality and may not use the provided data for any purpose other than that for which we have made it available to them.

    Third parties that may have access to your personal data, depending on the service you use or have used, include:

    • persons who provide technical operation of a particular service for us or operators of technologies that we use for our services;
    • persons who ensure adequate security and integrity of our services and websites and regularly test this security;
    • payment gateway providers (payment card providers);
    • business partners or sponsors who participate in the organisation of our events, conferences, seminars, etc.
    • collection agencies for the purpose of enforcing or collecting claims of our company;
    • operators of advertising systems in connection with targeted advertising;
    • users of our websites and social networks, on which photographs and audiovisual recordings from company events will be published to an appropriate extent.

    Under certain precisely defined conditions, we are then obliged to transfer some of your personal data on the basis of applicable legal regulations, e.g. to the Police of the Czech Republic, or other bodies active in criminal proceedings, including specialised units (UOOZ, Customs Administration, etc.) and other public administration bodies.

  5. How long do we process your data?

    We will process your data for the entire period of using our services (i.e. the duration of the contractual relationship between us) and subsequently for a period appropriate to protect our rights, to enforce claims for defective performance or liability for damage caused.

    In the case of explicit consent, we will process your data for the period specified in this consent, but no longer than ten years, unless you withdraw your consent to the processing of personal data earlier.

    However, we would like to point out that personal data that is necessary for the proper provision of the service, i.e. for the fulfilment of all our obligations, whether these obligations arise from the contract between us or from generally binding legal regulations, must be processed regardless of your consent for the period prescribed by the relevant legal regulations or in accordance with them, even after the possible withdrawal of your consent.

    Data obtained within the registration for a particular service, if it is possible to use the service without your consent to the processing of personal data, are processed for the duration of the use of the registered service and typically for a further 6-12 months after its cancellation. Subsequently, typically only basic identification data and information about the reason for the termination of registration or data forming part of operational backups are stored for an appropriate period.

    Data obtained through the contact form, i.e. obtained in connection with sending your inquiry, are collected and stored for approximately 6 months from the acquisition of such data.

  6. Can we process your personal data without your consent?

    Yes, we may process your personal data without your consent, but only for the purpose of

    • providing a service or product (fulfilment of a contract concluded between you and us, where the contract also includes the actual use of a particular service without the need to sign anything);
    • fulfilling legal obligations arising for us from generally binding legal regulations (e.g. we are obliged to keep records of operational and location data under Act No. 127/2005 Coll., on Electronic Communications); or
    • processing that is necessary for the purposes of our legitimate interests (e.g. direct marketing, ensuring the security of our websites).

    The possibility and lawfulness of such processing follows directly from applicable legal regulations and your consent to this processing is not required.

  7. On what basis can we process your personal data?

    As already mentioned, we may process your personal data on the basis of your consent, but also, for example, on the basis of our legitimate interest (in particular processing for the purposes of direct marketing) or for the fulfilment of a contract concluded between us, to the extent of personal data necessary for such fulfilment. Last but not least, a reason enabling us to process your personal data even without your consent is the fulfilment of obligations arising for us from the law. We specify the specific purposes for which we carry out individual processing of your personal data above.

  8. How is my personal data secured?

    All personal data that you provide to us is secured using standard procedures and technologies. However, it is not objectively possible to guarantee the complete security of your personal data. Therefore, it is also not possible to guarantee with 100% certainty that third parties cannot gain access to the provided personal data, that it cannot be copied, published, modified or destroyed by breaching our security measures.

    In this context, however, we assure you that we regularly check whether the system contains vulnerabilities and has been exposed to attacks, and we use such security measures as far as possible to prevent unauthorised access to your personal data, and which, given the current state of technology, provide adequate security. The security measures adopted are then regularly updated.

    For the purpose of better securing your personal data, access to this data is protected by a password and sensitive data is encrypted during transmission between your browser and our websites.

    Without your help and responsible behaviour, however, we are unable to fully ensure the security of your data. Please help us ensure the security of your data by keeping your unique passwords and other access credentials to our services confidential and by following basic security principles. Please always keep in mind that emails, instant messages, chats, blogs and other types of communication with other website users are not encrypted. We therefore strongly recommend not to use these forms of communication when providing confidential information.

  9. How and when can you withdraw your consent to the processing of personal data?

    You may withdraw your voluntarily given consent to the processing of personal data at any time free of charge. Withdrawal of consent does not affect the possibility of continuing to process your personal data on the basis of your consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that we process on a legal basis other than consent (i.e. in particular if processing is necessary for the fulfilment of a contract, legal obligation or for other reasons specified in applicable legal regulations).

  10. Am I obliged to provide my personal data? What happens if I do not provide personal data?

    You provide your personal data to us voluntarily (however, for some services, the transfer of certain personal data is required for the provision of the service, i.e. if you do not provide it to us, you will not be allowed to use this service).

    Processing your personal data, often only in anonymised form, without us being able to identify you as a specific user, enables us to provide our services free of charge and to constantly improve them and develop new services. If you do not give us your consent or subsequently withdraw it, it may happen that we will no longer be able to provide certain services to you free of charge, or that we will not be able to provide them in full scope or quality. However, it is obviously not your obligation to use our free services.

  11. What rights do you have in connection with the protection of personal data?

    In relation to your personal data, you have in particular the following rights:

    • the right to withdraw your consent at any time;
    • the right to correct or supplement personal data;
    • the right to request restriction of processing;
    • the right to object or lodge a complaint against processing in certain cases;
    • the right to request data portability;
    • the right of access to personal data;
    • the right to be informed about a personal data security breach in certain cases;
    • the right to erasure of personal data (the right to be "forgotten") in certain cases; and
    • other rights specified in the Personal Data Protection Act and in the General Data Protection Regulation (EU) 2016/679 upon its entry into force.
  12. What does it mean that you have the right to object?

    If you no longer wish to receive occasional commercial communications or other information about news in our portfolio of products and services, you have the option to object to further processing of your personal data for the purposes of direct marketing. If you do so, we will no longer process your data for this purpose and we will no longer send you further commercial communications and newsletters.

    Further information on this right is contained in particular in Article 21 of the General Data Protection Regulation (EU) 2016/679.

  13. How can you contact us?

    In case of any questions regarding personal data protection or withdrawal of consent to further processing of your personal data, please use email communication at info@csdevelopment.cz or in writing at our premises address: CS Development, s.r.o., Oldřichova 52, 128 00 Praha 2, to the attention of the authorised person for personal data protection.

    In this context, we would like to inform you that we may request that you prove your identity in an appropriate manner in order to verify your identity. This is a preventive security measure to prevent unauthorised persons from accessing your personal data. For the purpose of improving service quality and maintaining records of the fulfilment of our obligations arising from law, all communication with you is monitored.