Skip to main content

Privacy Policy

Your privacy is important to us at Moje dílna. We collect and process your personal data exclusively in accordance with the laws and regulations applicable in the Czech Republic and in compliance with the General Data Protection Regulation (GDPR). This privacy policy explains the nature, scope, and purpose of collecting and processing personal data.

1. Responsible Controller/Contact Information

The responsible controller in accordance with the data protection laws is (hereinafter referred to as the "Controller") Moje dílna z.s., a registered association in the Czech Republic, ID 04434862, with its registered office at M. Knesla 4014, 760 01 Zlín, registered under file number L 20833 at the Regional Court in Brno.
If you have any questions or suggestions regarding data protection, please do not hesitate to contact us via email at .

2. Subject of Personal Data Protection

The subject of personal data protection is personal data. According to Article 4(1) GDPR, "personal data" means any information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers.

3. Collection and Use of Your Personal Data

3.1 Data Collection through Automated Means (Logs)

When accessing our website, your device automatically transmits data for technical reasons. Your IP address is not collected within the log. The following data is stored separately (logs) from other data you may provide:

  • Date and time of access to our website
  • Name of the requested file/URL
  • Request status code (success/failure)
  • Bytes sent by the HTTP body
  • Type and version of the browser
  • Request response time
  • The legal basis for temporary storage of data is Article 6(1)(f) GDPR.

This temporary storage is necessary to maintain the functionality of the website, as well as to optimize the website and ensure the security of IT systems.

For these purposes, we have a legitimate interest in processing data according to Article 6(1)(f) GDPR.

Data contained in the logs will be deleted no later than seven days.

3.2 Registration

To use all functionalities of our platform, you can register at outdoordisplay.cz, but you must provide the following mandatory information:

  • Username
  • Email address
  • Password
  • First name
  • Last name
  • Address
  • Phone number

This information is necessary to provide you with a separate user account and to maintain it so that you can use all functions and options of our platform. Additionally, we may need this and other information for your support and communication with you.

Processing of any data entered within the registration function is necessary to provide you with the platform functions and services as intended, Article 6(1)(b) GDPR. If we collect and process your data to provide the functionalities of our platform and services as described above, you are contractually obliged to provide this data, otherwise, we are unable to provide you with our services or access to the platform.

During the registration process, this obligation may also be required concerning the fulfillment of the contract or pre-contractual obligations, even if such data is no longer necessary for the actual execution of this contract. Even after the actual conclusion of the contract, there may be contractual or regulatory obligations to retain personal data of the contractual partner.

3.3 Contact Form

If you contact Moje dílna via the provided online contact form, your input data, including contact information, will be collected and used to process and respond to your request. We collect your contact information to receive your inquiries and respond to them appropriately.

The legal basis for storing data is Article 6(1)(f) GDPR. If the contact via email aims to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

Moje dílna has a legitimate interest in responding to the user's request. Therefore, the processing of data collected through the contact form is necessary if the response would not be possible otherwise. Consequently, the legitimate interest of Moje dílna prevails, Article 6(1)(f) GDPR.

In general, data is deleted after the purpose of storage has been fulfilled. For personal data collected via online forms, this is the case when the communication with the user ends, considering all circumstances, and the inquiry is fully resolved to the satisfaction of both parties and the nature of such inquiry.

Further, additional optional information can be provided through online forms, which are entirely voluntary and help Moje dílna in communicating with the user and responding to a specific request or inquiry.

The legal basis for storing data is Article 6(1)(f) GDPR, as the legitimate interest of Moje dílna prevails.

Moje dílna is interested in addressing and responding to the user's request, particularly in contacting the user to take care of the request in a timely manner. This interest is consistent with the user's interest in receiving a response to their request, as indicated by providing the relevant data that they want to be contacted.

In general, voluntarily provided optional data is also deleted after the purpose of storage has been fulfilled. This is also the case when the communication with the user ends, considering all circumstances, and the inquiry is fully resolved to the satisfaction of both parties and the nature of such inquiry.

4. Data Transfer to Third Parties

Generally, your personal data, log data, or data provided through online forms will only be transferred without your explicit prior consent in the following cases:
If it is necessary to disclose or investigate any illegal use of our services or for criminal prosecution, personal data will be transferred to law enforcement authorities and, if applicable, affected third parties. This occurs only if there are concrete indications of illegal or abusive behavior. The transfer may also occur if it serves to enforce the terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon their request. These are law enforcement authorities, authorities investigating administrative offenses, and tax authorities.

The transfer of these data is justified by our legitimate interest in preventing abuse, prosecuting criminal offenses, and ensuring, asserting, and enforcing legal claims, and the fact that your rights and interests in protecting your personal data do not prevail, Article 6(1)(f) GDPR.

To provide services, we may rely on external companies and external service providers contractually associated with us ("processors"). In such cases, personal data will be transferred to these processors to enable them to further process the data. These processors are carefully selected and regularly monitored by us to ensure the protection of your privacy. The processors may only use the data for the purposes specified by us and are also contractually obliged to handle your data in accordance with this privacy policy and applicable Czech and European data protection laws. Data is made available to the processors on the basis of Article 28(1) GDPR.

If European data protection authorities or courts conclude that Article 28(1) GDPR is not an independent legal basis for the transfer of personal data to processors, such transfer will be considered to rely on our legitimate interest in the commercial benefit associated with the involvement of specialized processors and the fact that these benefits are considered to outweigh your interest in data protection, Article 6(1)(f) GDPR.

We also process data in countries outside the European Economic Area (EEA).

For data transfers to the USA, the European Commission decided by resolution on July 12, 2016, that the EU/US Privacy Shield provides an adequate level of data protection (Article 45 GDPR). Therefore, we use the following service providers who are certified under the EU/US Privacy Shield: Google, Inc.

5. Cookies

Moje dílna stores "cookies" to offer you a wide range of features and make your use of our website more pleasant. "Cookies" are small files that are stored on your computer through your internet browser. If you do not want to use "cookies", you can prevent their storage on your computer through appropriate settings in your internet browser. Existing cookies can be deleted at any time, which can also be done automatically. Please note that this may limit the functionality and range of functions of our website.

These cookies cannot identify you as a person. In any case, the use of cookies is justified based on our legitimate interest in customer settings and statistical evaluation of the use of our website and the fact that your legitimate interests do not prevail over ours, Article 6(1)(f) GDPR.

We may also store third-party cookies, such as:

  • Youtube (embedded videos)
  • Twitter
  • Facebook
  • Instagram
  • LinkedIn
  • Google Analytics

When loading our website, we adequately inform users about the use of cookies for analysis purposes and request consent to process the user's personal data in this regard. Additionally, we inform users about this privacy policy and its use.

The legal basis for processing personal data using cookies for analysis purposes in the case of user consent is Article 6(1)(a) GDPR. The legal basis for storing data is Article 6(1)(f) GDPR.

The purpose of using cookies that are technically necessary is to make it easier for the user to use the website. Some features of our website cannot be offered without the use of such cookies; for these, it is necessary that the browser is recognized even when navigating different web pages.

The use of such cookies is based on our legitimate interest in appropriate design, statistical evaluation, and efficient use of our website, as well as marketing, and the fact that your legitimate interests do not prevail, Article 6(1)(f) GDPR.

6. Your Rights as a Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the rights described below.

6.1 Right to Confirmation and Access (Information)

Every data subject has the right, guaranteed by European law, to request confirmation from the controller as to whether personal data concerning them is being processed.

If such processing is taking place, the data subject can request access to the following information:

  • the purposes of the processing of personal data;
  • the categories of personal data being processed;
  • the recipients or categories of recipients to whom personal data has been or will be disclosed;
  • if possible, the envisaged period for which the personal data will be stored, or if not possible, the criteria used to determine that period;
  • if personal data is not collected from the data subject, any available information about its source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR, and at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

Furthermore, the data subject has the right to information about whether personal data is transferred to a third country or an international organization. In the case that this occurs, the data subject has the right to be informed about the appropriate safeguards relating to the transfer under Article 46 GDPR.

6.2 Right to Rectify Inaccurate Data

You have the right to request that Moje dílna immediately correct any personal data concerning you that is inaccurate or incomplete. As the controller, we must comply with your request without undue delay.

6.3 Right to Restrict Processing

You have the right to request that Moje dílna restrict the processing of your personal data under the following conditions:

  • If the accuracy of the personal data is contested by the data subject, the controller will restrict its processing for a period enabling the verification of the accuracy of the personal data.
  • If the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
  • If the controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
  • If the data subject has objected to processing pursuant to Article 21(1) GDPR, pending the verification of whether the legitimate grounds of the controller override those of the data subject.
  • If the processing of your personal data has been restricted and, notwithstanding storage, such data will only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
  • If the restriction of processing is lifted under the conditions mentioned above, the controller will inform you before lifting such a restriction.

6.4 Right to Erasure ("Right to be Forgotten")

a) Right to Erasure
Every data subject has the right to request from the controller the erasure of personal data concerning them without undue delay, and the controller has the obligation to erase this personal data without undue delay if one of the following reasons applies and the processing is not necessary:

  • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • The data subject withdraws consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal ground for the processing;
  • The data subject objects to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
  • The personal data has been unlawfully processed;
  • The personal data must be erased for compliance with a legal obligation under Union or member state law to which the controller is subject;
  • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

b) Information to Third Parties
If the controller has made the personal data public and is obliged to erase the personal data pursuant to Article 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:

  • For exercising the right of freedom of expression and information;
  • For compliance with a legal obligation which requires processing by Union or member state law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • For reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) GDPR to the extent that the right referred to in (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  • Or for the establishment, exercise, or defense of legal claims.

6.5 Right to Information

If you have exercised your right to rectification, erasure, or restriction of processing with the Controller, the Controller is obligated to inform all recipients to whom your personal data has been disclosed about such rectification, erasure, or restriction, unless it proves impossible or involves disproportionate effort.

You have the right to be informed by the Controller about these recipients.

6.6 Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us as the Controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another Controller without hindrance from the Controller to which the personal data has been provided, as long as the processing is based on your consent pursuant to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR, or on a contract pursuant to Art. 6(1) lit. b GDPR, and the processing is carried out by automated means.

Furthermore, when exercising your right to data portability, the data subject has the right to have the personal data transmitted directly from one Controller to another, where technically feasible and without affecting the rights and freedoms of others.

The right to data portability only applies if the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

6.7 Right to Object

Every data subject has the right to object at any time to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

In the event of an objection, Moje dílna will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

If Moje dílna processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. This also applies to profiling to the extent that it is related to such direct marketing.

If the data subject objects to the processing of personal data for direct marketing purposes, Moje dílna will no longer process the personal data for these purposes.

For the purpose of exercising the right to object, the data subject, within the use of information society services and notwithstanding Directive 2002/58/EC, may exercise their right to object by automated means using technical specifications.

6.8 Right to Withdraw Consent to Data Processing

As a data subject, you have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the legality of the processing of personal data conducted before its withdrawal.

6.9 Automated Individual Decision-Making, Including Profiling

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them, unless the decision:

  • Is necessary for entering into, or the performance of, a contract between the data subject and the Controller,
  • Or is authorized by Union or member state law to which the Controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests,
  • Or is based on the data subject's explicit consent.

Notwithstanding the above, such decisions must not be based on specific categories of personal data in accordance with Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard the data subject's rights and freedoms and legitimate interests are in place.

In the cases referred to in points 1 to 3 above, the Controller will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the Controller, to express their point of view, and to contest the decision.

6.10 Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority to which the complaint has been submitted will inform you about the progress and the outcome of the investigation, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

7. Modifications to Our Privacy Policy

The current version of this privacy policy is always available at https://mojedilna.com/cs/ochrana-osobnich-udaju. Please note that we reserve the right to change or update this privacy policy from time to time. Relevant changes will be published at the link above.

E-shop support
  • +420 775 984 841
Courses support
  • +420 604 388 685
Moje dílna, z.s.
  • Zálešná I 4057, 760 01 Zlín
  • ID: 04434862
  • Official mailbox: yiwt73v