Information on the Processing of Personal Data of FLORBAL ID Users and Related Services
What is the Purpose of This Document?
The aim is to provide you with information about the processing of personal data that you provide to us. When the text refers to "us" or "our company," it means Český florbal s.r.o., or the "association," which refers to the Český florbal association. You will also learn who processes your personal data and what rights you have in this context.
Kdo bude zpracovávat Vaše osobní údaje?
The controller of your personal data is Český florbal s.r.o., ID No.: 27945383, with its registered office at Lomnického 1705/5, 140 00, Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 128420 (hereinafter also referred to as the "Controller"). Access to your personal data will be granted to our employees and processors, such as providers of mailing and database systems, but only to the extent necessary to fulfill related obligations.
Why Do We Process Your Personal Data?
By registering for Florbal ID, you entered into an agreement with our company and became our customer. We process your personal data to provide you with the registration of an online customer account, services related to the management and administration of your user accounts, and to fulfill obligations (both to you and to our business partners).
We provide services free of charge and for your benefit. However, to ensure the project's viability without introducing fees and to maintain user (customer) satisfaction, we share certain personal data and information about your preferences with our business partners based on your consent. By using the Florbal ID service, you agree to the transfer of some of your personal data for the purpose of receiving advertisements and promotional materials about the products and services of our business partners (via the Florbal ID application and/or email and/or SMS). The processing of personal data by business partners always involves only the data necessary for sending offers and communications, strictly limited to the commercial focus areas of these entities.
Within user preferences, you have the option to limit the collection of personal data to anonymized aggregated data only (non-targeted advertising). Further details on the processing of personal data by our business partners can be found below in this section.
The provision of personal data is not mandatory. However, if you do not provide the personal data marked as mandatory during the registration of the service or an additional service, we will not be able to provide you with the respective service or enter into a contract with you for its provision.
What Personal Data Do We Process?
To fulfill our contractual obligations and provide the aforementioned services, we process your identification and contact information. In connection with providing our services to you, we primarily handle the following personal data:
Name, surname, gender, status, and title
Address: permanent or temporary residence, delivery address, and other location data; date of birth, personal identification number, ID card or passport number, and residence permit if required for providing associated services, especially for legal entities.
Copies of documents/identification cards (e.g., Player Card), membership ID (FIS ID), and other identifiers, as well as payment instruments.
Network identifiers and designations: such as IP addresses, tags, profiles, email addresses, registrations, user accounts, and movements within online environments and applications.
Contact details: such as phone numbers, email addresses, data box numbers, representatives, and social media profiles.
For some related services within Florbal ID, it may be necessary to provide and verify your phone number, age, or other declared information.
On What Legal Basis Do We Process Personal Data?
The reason for this processing is the fulfillment of the contract that you enter into with our company through electronic registration. The personal data collected is processed for the purpose of providing services to you, contacting you, and developing business relationships or relationships arising from concluded contracts or laws.
a) Compliance with legal obligations (examples below)
Record-keeping, tax, and accounting obligations;
Legal obligations related to arranging, providing, and receiving subsidies;
Archiving and file management under special legal regulations;
Retaining data related to sold goods and services provided under specific legal regulations;
Cooperation with public authorities;
And others…
b) Fulfillment of contracts, contract negotiations, protection of contractual obligations (examples below)
Fulfillment of rights and obligations arising from contracts with customers or business partners;
Services associated with the proper operation of the website and app;
Fulfillment of requirements arising from contracts (Controller and business partners);
Contracts and legal obligations with business partners;
Dealing with third parties as part of the provided service.
c) Protection of the Controller's legitimate interests
Protection of the Controller's rights and legitimate interests;
User activities on websites or in the app for the purpose of improving and enhancing the services we provide;
Customer satisfaction surveys to improve the Controller's services;
Photo documentation of organized events;
Statistics and performance measurements.
d) Consent (of the data subject)
Based on granted consent (e.g., cookies or newsletters), which is voluntary and can be revoked at any time by notifying the Controller.
Sending newsletters and commercial communications. If you agree to receive newsletters, your personal data will be processed electronically for these purposes.
Conducting user activity evaluations – i.e., offering products and services from the Controller and its business partners based on your expressed preferences in the user environment and/or during events organized by the Controller.
Providing your personal data and information to our business partners to establish their commercial collaboration with you and/or your employers.
Based on our legitimate interest, we will also process non-mandatory data you provide, data on the use of services, and the transaction history conducted via Florbal ID. If you allow cookies, we will also process data about your device and data on browsing and interaction with the websites where you used FLORBAL ID, for purposes allowed by the cookie banner (more information HERE).
For commercial communications, we process basic interactions with such communications (e.g., opening the message, clicking on a link to our website). The legal basis for this processing is our legitimate interest in developing and improving the quality of our products and services. You can opt out of receiving such commercial communications at any time using the method provided in each message.
What Personal Data and Information Do We Share with Business Partners?
We will also use the data to send commercial communications related to the service, for the duration of the service and two months following its termination. If you use products or services from third parties through Florbal ID registration, we will only share mandatory data necessary for the promotion/advertising of their products/services.
If you use our additional services through FLORBAL ID, we will process data related to those services:
For the additional service Ceskyflorbal.tv, we process information about the selection of this service, the start and end dates of the service, and details about its usage.
For the additional service fanshop.ceskyflorbal.cz, we process information about the date and amount of purchases, including items purchased.
For the additional service of ticket sales, we process information about the date and amount of purchases, including seat locations.
For other currently offered and utilized additional services, we process information about the provision/use of such services, as well as any other information you have provided to us for the purpose of delivering those services, including communication related to the provision of the service.
Does the Processing of My Personal Data Involve Automated Decision-Making, Including Profiling?
Automated decision-making refers to decisions made by a machine (computer) without human intervention, which have legal or similarly significant effects on you (e.g., contract termination). Such processing of personal information does not occur in our system; all relevant decisions are always made by our designated staff member.
Management of Provided Personal Data / Revocation of Consent
You can manage the provided personal data by editing your personal profile within your user account. Open your personal profile and select the "Personal Data and Privacy" section in the navigation. Here, you can customize and modify the shared personal data according to your preferences.
If you want to prevent profiling and the display of personalized content and ads, you can revoke your provided consent at any time in the "Personal Data" section by unchecking the relevant box and saving the changes in your user account preferences.
Use of Profiles from the FIS Database (Florbal Information System)
If you are a registered user, we will transfer the historical information (data) you provided in the membership sports account within the FIS system to the application and your Florbal ID user account. Our goal is to avoid duplicate records and multiple user accounts for a single user. Each user will have a unique user account. If you are a member (if you select this option), your data in the database will be automatically linked.
Will Your Personal Data Be Transferred Outside the European Union?
Your data will primarily be stored on servers within EU member states. However, some of our external processors may be located outside the EU and EEA, such as in the USA (involving the use of data centers – cloud solutions).
Data transfers to third countries only occur if there is an adequacy decision by the European Commission or appropriate safeguards for data protection are in place, and these processors provide sufficient organizational and technical guarantees to protect your data and personal information.
How Long Will Your Personal Data Be Retained?
We process and retain personal data for as long as necessary. Mandatory data is processed and maintained for the period required by legal regulations (up to 10 years for certain taxes and obligations under AML regulations or in cases of mandatory documentation and archiving).
To fulfill other rights and obligations from contractual relationships and to comply with legal obligations under generally applicable regulations (at least 5 years from the date of collection).
For our legitimate interests, we retain personal data for the necessary duration to assert these interests, but no longer than 2 years from the date of collection, unless a specific reason arises to retain this data longer.
Personal data shared with our business partners is retained for a maximum of 1 year from the date of collection. Data for satisfaction surveys is stored for no more than 1 month after the service ends.
If you request data deletion, you can contact the Controller directly or follow the instructions provided by the respective service provider.
What Rights Do You Have as a Data Subject?
1. Right of Access to Personal Data
You have the right to know (i) whether we process your personal data, (ii) what personal data we process, (iii) for what purpose it is processed, and (iv) whether it has been or will be shared and with whom.
2. Right to Rectify Inaccuracies or Incompleteness
If we process your data inaccurately or incompletely, you have the right to request correction, clarification, or completion.
3. Right to Erasure of Personal Data
You can request the deletion of your personal data if (i) it is no longer needed for the purposes for which it was collected, (ii) the processing is unlawful, (iii) your reasons for deletion outweigh its retention, or (iv) the legal basis for processing has ceased to exist.
4. Right to Restrict the Processing of Personal Data
Under the conditions set out in the GDPR (2016/679/EU), you have the right to request restrictions on the scope or purpose of processing your personal data.
5. Right to Data Portability
You have the right to request that we transfer, provide, or otherwise transmit your personal data to third parties (another data controller) as permitted by law. We are not required to transfer data that infringes on the rights of others.
6. Right to Object to the Processing of Personal Data
You can object to the processing of your personal data if it is based solely on the Controller’s legitimate interest. In such cases, it will be assessed whether your rights and freedoms outweigh the Controller’s legitimate interests. If your objection is justified, the Controller will stop processing your personal data.
In case of repeated or clearly unfounded requests to exercise the above rights, we reserve the right to charge a reasonable fee for fulfilling such requests or refuse their implementation. You will be informed of such a procedure.
If you have doubts or believe that your data protection rights have been violated, you can contact us or, in cases of serious misconduct, the Office for Personal Data Protection (ÚOOÚ):
Address: Pplk. Sochora 27, 170 00 Prague 7
Phone: +420 234 665 111
Website: www.uoou.cz
Who Else Processes the Received Personal Data?
Your personal data is shared only in cases prescribed by law (e.g., accountant, tax advisor, lawyer, medical facility, or insurance company) or with your consent, always under conditions and purposes of processing and with entities bound by legally recognized or contractual confidentiality obligations. Our employees are trained in handling personal data and do not knowingly perform additional processing beyond the necessary purpose.
To fulfill the Controller's contractual obligations to you, we work with contractual entities that act as processors/controllers in relation to you. They also assist in fulfilling legal obligations to public authorities.
A list of our business partners for the purpose of data sharing is available on our website.
For questions or more information about our privacy practices, you can contact us at ochrana-udaju@ceskyflorbal.cz.