1️⃣ Who processes data

The controller of the data is the organizer of Stodola - Furrlounge z. s. Uralská 689/7 160 00 Praha 6 IČO: 24418749
contact e-mail: [email protected]

Your personal data is processed only in the span required to run the event and its registration system.

2️⃣ How is data processed

In the case of registration transfers, data of the previous registration holder is either deleted or anonymized. New personal data is processed connected with the new attendee once they agree to the transfer.

We do not process any data to do with state of health, religious beliefs, sexual orientation, political views, or any other special categories of personal data.

3️⃣ Purpose of data processing and legal basis

Personal data is only processed for organizational purposes of the event:

• managing attendee registrations,
• verifying attendee age,
• issuing badges and permitting access to event grounds,
• communication between organizers and attendees,
• displaying attendees in our internal system,
• payment processing,
• processing registration transfers.

Processing is carried out in accordance with Article 6(1)(b) of the GDPR, i.e. for the purpose of fulfilling obligations arising from registration and participation in the event.
Display in the internal list of participants is based on voluntary consent in accordance with Article 6(1)(a) of the GDPR, which can be revoked at any time in the profile settings.

In connection with the payment of the registration fee, data from the bank statement (amount, variable symbol, date, and any notes) are processed solely for the purpose of verifying and matching the payment with the corresponding registration. Processing of such data is also based on Article 6(1)(b) of the GDPR (performance of a contract for participation) and the data is only stored for the time necessary for accounting purposes and payment verification (for 1 year at most). Automatic parsing of statements is used exclusively for matching payments and does not involve any further automated decision-making or profiling.

4️⃣ Who has access to this data

The only people with access to processed data are:

• members of the event's organization team (to prepare and run the event),
• contractual partners who provide partial services (such as providing accommodation and printing badges).

In case registration is transferred, personal data of the original registration holder are not transferred. The organizers only confirm the change in the internal system after both original and new registration holder agree to the transfer

All data processors are bound by contract to maintain confidentiality and protect personal data. The data is not provided to third parties, used for marketing or provided to entities outside of the EU.

5️⃣ Data retention period

• Personal data is stored for up to 90 days after the event, then deleted from database and its backups.
• Information on event's website and user's accounts may be stored for longer and kept for future events unless the user deletes their account.
• Anonymized statistical data may be kept for longer without allowing for reverse identification.

6️⃣ Photos and video documentation

Organizing team may take photos and record sound and video in order to document the event and promote future events (for example by making highlight videos or snippets and promotional videos for social media)

A photo booth will be available at the event, allowing attendees to make commemorative photos. Photos taken there will shortly be available on a private Telegram channel, accessible only by using a private link. The photo booth's placement ensures no passers-by will be present in the photo.

By attending the event, attendees consent to photos taken and videos shot by organizers may be used in event's promotion and documentary materials. This includes making these materials public on social media and visible to people who did not attend the event.

Organizers are not responsible for any audiovisual material made by attendees for their personal use.

7️⃣ Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 of the GDPR takes place during processing.

8️⃣ Attendees' rights

You have the right to:

• request access and view your personal data,
• request changes to or deletion of your personal data,
• limit processing of your personal data,
• revoke your consent to data processing (if the processing is based on consent),
• object to data processing,
• request your personal data to be made portable.

Requests cane be made by email at [email protected].
If you have any doubts concerning how your personal data is processed in accorance to legal regulations, you may raise a complaint at the Office for Personal Data Protection.

9️⃣ Changes to this statement

This statement may be updated in the future. The up to date version can always be found on the event's website.

Effective date: January 1st, 2026

💡 Summary for registration

I consent that by registering, I read the Statement concerning GDPR and consent to my personal data being processed by organizers.
I voluntarily consent to my account being visible on the internal attendee list and I may revoke it at any time.
In case of registration transfer, I consent to the new attendee's personal data being processed in the same way.