Privacy Policy

(in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – GDPR)

1. Basic information about the controller

Nadační fond Hudba pro Věčnou naději (Music for Eternal Hope Foundation)
📍 Registered office: Šítkova 233/1, 110 00 Prague 1
🆔 IČO (Czech tax number).: 173 99 335
📧 E-mail: info@vecnanadeje.cz

Nadační fond Hudba pro Věčnou naději aka The Music for Eternal Hope Foundation (hereinafter referred to as the “administrator” or “foundation”) processes personal data in accordance with applicable legal regulations, in particular the GDPR.

This policy describes what data the fund collects about you, why, how it handles it, and what your rights are.

2. What personal data we process

The administrator processes only data necessary for its activities and the functioning of the Eternal Hope festival.

This may include, in particular, the following data:

Identification data: first name, last name, name of organization, stage name, or position.
Contact details: email, phone number, postal address.
Data on donations and support: amount of donation, variable symbol, bank details, date of donation.
Data on participation in events: role (performer, partner, guest), contractual data.
Technical data on website use: IP address, cookies, analytical data (Google Analytics, Facebook Pixel, Sklik).
Newsletter data: email addresses of registered users (Mailchimp).

3. Purposes of processing and legal grounds

Personal data is processed only to the extent necessary for:

Fulfilling contractual obligations
- concluding and fulfilling contracts with performers, partners, and suppliers,
- recording donations, issuing donation receipts.
Fulfilling legal obligations
- especially in the areas of accounting, tax records, and donation agreements.
Communication with the public and supporters
- sending invitations, thank-you notes, information about the activities of the fund and the festival (legitimate interest or consent).
Marketing and promotion of the festival
- measuring website traffic and campaign effectiveness (Google Analytics, Sklik, Facebook Pixel),
- sending newsletters via Mailchimp (based on consent).
Protection of the fund's rights and property
- keeping necessary records and storing contractual documents.

4. Retention period for personal data

Data on donors and partners: 10 years from the date of the donation or termination of cooperation.
Data on performers and event participants: for the duration of the contractual relationship + 4 years thereafter.
Data for marketing and newsletters: until consent is revoked or an objection is raised.
Accounting and tax data: according to the law, for a maximum of 10 years.

After the expiry of these periods, the data is securely deleted or anonymized.

5. Recipients of personal data

The Fund only works with trusted partners who ensure that personal data is processed securely and in accordance with the GDPR.

Personal data may be shared with:

Accounting firm – bookkeeping and processing of tax documents.
Technical service providers – website administrators, hosting providers, e-mailing providers.
Analytics and marketing tool providers:
- Google Analytics (Google Ireland Ltd.)
- Facebook / Meta Platforms Ireland Ltd.
- Sklik (Seznam.cz, a.s.)
- Mailchimp (The Rocket Science Group LLC)
Public authorities, if required by law.

The fund has concluded personal data processing agreements with all these entities in accordance with Article 28 of the GDPR.

6. Transfer of data outside the EU

Personal data may only be transferred outside the European Union when using services such as Mailchimp (USA).
In such cases, the fund ensures that an adequate level of protection is provided in accordance with Articles 44–49 of the GDPR (in particular through standard contractual clauses).

7. How we protect your data

Data is stored on secure servers within the EU.
Only authorized persons who are bound by confidentiality agreements have access to personal data.
Appropriate technical and organizational measures are used to protect data from unauthorized access, loss, or misuse.

8. Your rights under the GDPR

In accordance with the GDPR, you have the following rights:

The right to access your personal data.
The right to correct inaccurate or incomplete data.
The right to erase ("to be forgotten").
The right to restrict processing.
The right to object to processing, in particular for marketing purposes.
The right to data portability.
The right to withdraw consent to processing at any time.
The right to lodge a complaint with the supervisory authority –
Office for Personal Data Protection (Úřad pro ochranu osobních údajů),
Pplk. Sochora 27, 170 00 Prague 7,
www.uoou.cz.