Privacy Policy

 

This document describes the processing of personal data by the controller, Fragile media s.r.o., Company ID No.: 282 12 797, with its registered office at Pernerova 673/47, 186 00 Prague 8, incorporated in the Commercial Register kept by the Municipal Court in Prague, File No. C 133003, which operates the website www.fragile.cz (hereinafter referred to as the “Controller”), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”).

You can contact the Controller

  • at the following address: Fragile media s.r.o., Pernerova 673/47, 186 00 Prague 8
  • at the following email: info@fragile.cz
  • via the Data Protection Officer, 2710 s.r.o., Company ID No.: 062 09 793, contact person: Mgr. Václav Šimek, attorney-at-law, email: vaclav.simek@2710.legal

 

The Controller processes personal data in the following cases:

A) communication via the contact form

The Controller processes the personal data you provide in the contact form on its website (in particular, first name, surname, contact details – email, telephone) for the purpose of responding to and processing your message. This is processing on the basis of pre-contractual negotiations (Article 6(1)(b) of the GDPR).

If a contractual relationship is established on the basis of a message in the contact form, the Controller will process the necessary data for the purpose of performance under the contractual relationship – more on this below. Otherwise, the Controller will only process your personal data for the time necessary to process the inquiry (unless there is another legal ground for processing).

B) contractual relationship

In the case of a contractual relationship, the Controller will process the personal data necessary for the performance under that contractual relationship on the basis of several legal grounds – the fulfilment of the Controller’s legal obligations, such as accounting or tax obligations (Article 6(1)(c) of the GDPR), the performance under the contractual relationship (Article 6(1)(b) of the GDPR) or the Controller’s legitimate interest, such as to retain the data in case of potential disputes (Article 6(1)(f) of the GDPR).

The Controller will process this data for the period necessary to exercise the rights and obligations and to assert claims arising from these contractual relationships, for a maximum period of 10 years from the termination of the contractual relationship, unless a longer retention period is required by law or for the reasonable protection of the Controller’s legitimate interests.

C) sending commercial communications

The Controller may send commercial communications (newsletters) to its clients regarding its services or activities in accordance with the relevant legislation (in particular, Act No. 480/2004 Coll., on certain information society services).

For this purpose, the Controller may process the personal data of clients, in particular their email addresses (if this is personal data), on the basis of the Controller’s legitimate interest (Article 6(1)(f) of the GDPR).

It is possible to unsubscribe from receiving commercial communications at any time via the link provided in each email or by contacting the Controller at the contact details above.

D) taking photographs and filming at events

Photographs or audiovisual recordings of the participants may be taken at events organised by the Controller.

The Controller may thus process, in particular, the likenesses of the participants of the event on the basis of its legitimate interest (Article 6(1)(f) of the GDPR).

These photographs and recordings can be used by the Controller for online and offline promotional materials, or for internal documentation and archiving.

The goal of the Controller is to capture the atmosphere of the event, not a detailed analysis of the individual participants. The Controller shall always ensure that its legitimate interest does not override the protection of the personal data of the participants in the event.

If a participant of the event does not consent to the capture of his or her image or its publication, he or she may object to such processing, ideally directly at the event venue or later via the contact details of the Controller.

E) interest in employment

If you apply for employment with the Controller, the Controller processes your personal data provided in the documents you submit (your cover letter, CV, etc.) or obtained during the selection procedure.

Such data may be processed on the basis of the performance of a contract or the negotiation thereof (Article 6(1)(b) of the GDPR) or on the basis of a legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

The Controller retains personal data for the duration of the selection procedure, or longer if the candidate consents or if the Controller has another legitimate reason for further retention (e.g., to protect its legal claims).

F) visit to the website

The Controller uses cookies on its website. For more detailed information, please see the separate Cookies Policy tab.

 

Automated individual decision-making

The Controller does not make decisions based solely on automated individual processing which would have legal effects on the data subject or significantly affect him or her in a similar way.

 

Transfers outside the EU

In the course of its activities, the Controller may use certain tools and services provided by companies based outside the EU, such as Google or Meta Platforms.

In these cases, processing is carried out in accordance with the GDPR, i.e., either on the basis of a decision of the European Commission on adequate protection, or on the basis of contractual clauses issued by the European Commission, or with the use of other appropriate safeguards under the GDPR.

 

Provision of personal data

Your personal data is confidential and will not be disclosed to any third party, with the following exceptions: a) situations provided for by law or obligations imposed by a public authority, b) in the case of enforcement of the Controller’s rights, c) disclosure to the Controller’s processors – service providers, e.g., legal, marketing, accounting or tax services, d) disclosure to companies in the Knowlimits Group, of which the Controller is a member, i.e., KNOWLIMITS Group a.s., Company ID No.: 241 79 396, and legal entities in the capacity of its subsidiaries and companies in which the Group has shareholdings.

 

Your rights under personal data protection

Under the conditions set out in the GDPR, you have the following rights:

  • the right of access to your personal data pursuant to Article 15 of the GDPR, whereby you also have the right to obtain a copy of your personal data, with the understanding that the first copy is free of charge and the provision of subsequent copies may be subject to a reasonable fee to cover the cost of such copy/copies,
  • the right to rectify your personal data pursuant to Article 16 of the GDPR or to restrict processing pursuant to Article 18 of the GDPR,
  • the right to erasure of your personal data pursuant to Article 17 of the GDPR, unless the data is data that the Controller is obliged to process by law or is entitled to process on the basis of its legitimate interest,
  • the right to object to processing on the basis of legitimate interest pursuant to Article 21 of the GDPR,
  • the right to data portability pursuant to Article 20 of the GDPR,
  • the right to withdraw your consent to processing in writing or electronically at the address or email of the Controller specified in this Policy.

 

You also have the right to lodge a complaint with the Office for Personal Data Protection (based at Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice, www.uoou.cz) if you believe that your right to personal data protection has been violated.