Personal data processing and protection principles

Processor:

Seeya Creative s.r.o.

ID No.: 10925694
DIC: CZ10925694
Headquarters: Smetanovo nábřeží 334/4, Staré Město, 110 00 Praha

1. General
We collect and process personal data in accordance with the data protection regulations

under which we are the data controller.

This document and information on data protection are permanently available on our website https://ballineveryseason.cz (hereinafter referred to as e-shopp) in the section "Privacy Policy".

2. Collection, processing and use of personal data We collect your personal data for the following purposes:

• compliance with legal obligations,

• the performance of our contracts and obligations under them,

• protecting our property and legal rights,

• improving and developing our services,

• reaching you with advertising and offering our services based on a legitimate interest in

the development of our business, products and services. 2.1. Buyer

If you are a natural person, we process your identification, contact and performance data for the purpose of concluding and performing contracts with you as our customer. We also use this data to comply with legal obligations and to protect our assets and potential legal claims.

The data we collect in relation to you may include your name, title, the name of your company or organisation, your contact email and telephone number, your work or home address, information about your position, payment details, regional affiliation and details about your use of services and products.

We may also process your identification, contact and usage data on the basis of our legitimate interest for the purpose of contacting you with promotional

communications and the offering of our services; you can receive offers electronically (in particular by email, social media or telephone), by traditional letter. Furthermore, we use your data to improve and develop our services, i.e. because of our legitimate interest.

2.2. Potential buyers

If you move around our WEBSITE / e-shop, please note that we may process your identification and contact data on the basis of our legitimate interest for the purpose of addressing you with advertising messages and offering our services; you may receive offers electronically (in particular by telephone), by traditional letter or in person.

2.3. Processing and storage of personal data

Personal data is processed by our company in electronic or paper form, both manually and by automated means. We keep them for the time necessary for the purpose of processing. In the case of processing personal data for reasons required by law, this is the period of time specified by that law. Where we process personal data for purposes based on the legal ground of performance of a contract, the necessary period corresponds to the period of performance of that contract (order). For purposes based on legal grounds of legitimate interest, the necessary period is three years from the performance of the contract (order).

POP OUT shows may entrust a third party as a processor to process the personal data of the customer or user. The processor is not entitled to transfer this data to other entities without the consent of POP OUT shows.

3. Your rights and options 3.1. Right of access

You have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it besides us and what other rights you have in relation to the processing of your personal data. However, if you are unsure which personal data we are processing about you, you can ask us to confirm whether or not personal data relating to you is being processed by us and, if so, you have the right to access it. As part of your right of access, you can ask us for a copy of the personal data we are processing; we will provide you with the first copy free of charge and the next one with a fee.

3.2. Right to repair
If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to

have it corrected or completed without undue delay. 3.3. Right to erasure

In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:

o we no longer need your personal data for the purposes for which we processed it;
o you withdraw your consent to the processing of your personal data and it is also data for which your

consent is necessary and we have no other reason why we need to continue processing it;
o you exercise your right to object to the processing of personal data that we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests that would justify such

processing;
o you believe that the processing of personal data by us has ceased to comply with generally binding

regulations.
However, please note that even if it is for one of the reasons listed, this does not mean that we will delete all of your personal data immediately. This right does not apply if the processing of your personal data is still necessary to comply with our legal obligation or to establish, exercise or defend our legal claims (see section.

3.4. Right to restriction of processing

In some cases, in addition to the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you, in certain circumstances, to request that your personal data be marked and not subject to any further processing operations - but in this case not forever (as is the case with the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:

o you dispute the accuracy of the personal data before we agree what data is correct;
o we process your personal data without a sufficient legal basis (e.g. beyond what we need to process), but you would prefer to restrict such data before deleting it (e.g. if you expect to provide us with such data in

the future anyway);
o we no longer need your personal data for the above processing purposes, but you require it for the

establishment, exercise or defence of your legal claims;
o you object to the processing for the period we are investigating, if your objection is justified, we are

obliged to restrict the processing of your personal data. 3.5. Right to portability

You have the right to obtain from us all of your personal data that you have provided to us and that we process on the basis of your consent and for the performance of a contract. We will provide you with your personal data in a structured, commonly used and machine-readable format.

3.6. Right to object to processing

You have the right to object to the processing of your personal data based on our legitimate interest. In the case of marketing activities, we will stop processing your personal data without further action. In other cases, we will do so unless we have compelling legitimate grounds to continue such processing.

3.7. Right to lodge a complaint

Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the relevant supervisory authority. You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations. You can file a complaint against our processing of personal data with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.

3.8. How to exercise individual rights

For all matters relating to the processing of your personal data, whether it is an enquiry, exercising a right, making a complaint or otherwise, you can contact us in the following ways:

o You can email us at: VIKTORIE@seeya.cz
o You can call the following number: +420 605 441 830
o Send your official application to Smetanovo nábřeží 334/4, Staré Město, 110 00 Prague