Privacy policy and cookies

1. Introductory provisions

The protection of privacy, including the protection of personal data, is a prerequisite for mutual trust and therefore one of the fundamental values of the Czech Philharmonic Foundation. The primary purpose of the Foundation is to provide financial support to the Czech Philharmonic, individual musicians and other creative professionals working with the Czech Philharmonic, to support other personalities connected with the history of the Czech Philharmonic and Czech classical music, to support the artistic growth and development of young musicians, and to contribute to the development of a love of music among the public, especially children and young people.

Through this document, we inform you about the conditions and circumstances of the processing of personal data and about the manner and scope of personal data processing carried out by the Foundation. We also inform you about the measures ensuring the protection of personal data and about your rights related to the processing of such data.

When processing your personal data, we ensure compliance with the law of the European Union, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”), as well as with other relevant legal regulations in the field of personal data protection, and we adhere to the rules set out below.

Please familiarize yourself with the content of this notice. Should you have any questions, we will be pleased to answer them at the contact details provided below.

2. Basic information about the controller and contact details

The controller of your personal data is the Czech Philharmonic Foundation, with its registered office at Alšovo nábřeží 79/12, Old Town, 110 00 Prague 1, Czech Republic, Company ID No.: 195 84 024, registered in the Foundation Register maintained by the Municipal Court in Prague, Section N, File No. 2338

– hereinafter referred to as the “Czech Philharmonic Foundation”.

Contact details:

registered office: Alšovo nábřeží 79/12, Old Town, 110 00 Prague 1, Czech Republic

e-mail: info@czechphilfoundation.org

telephone: +420 777 999 627

data mailbox: ID yciyhg8

3. Data subjects

This information is intended for individuals whose personal data we process. We process your personal data if you are our client, donor or contributor, applicant for support, business partner, or a visitor to the website www.czechphilfoundation.org.

4. Principles relating to the processing of personal data

When processing personal data, we respect the right to the protection of personal data and comply with the following principles:

1. Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

2. Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

3. The amount of processed personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

4. Measures are taken to ensure that personal data are accurate and, where necessary, kept up to date.

5. Personal data are stored for no longer than is necessary for the purposes for which they are processed.

6. Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

5. Personal data we process

With regard to its activities, the Czech Philharmonic Foundation is required to process certain personal data, in particular for the purpose of fulfilling contractual obligations. However, the provision of personal data is also required for the establishment of a mutual relationship or for making certain services available. If you do not provide such data, it will not be possible to establish the mutual relationship or to provide the service in its full scope and quality.

We obtain only those personal data about you which you expressly provide to us or to our cooperating organisation – the Czech Philharmonic.

We also process your personal data beyond the scope of our obligations, namely for the purposes of caring for you and our other clients, in order to further develop our mutual relationships and in order to be able to approach you with targeted offers of our products and/or services. For this purpose, we need to obtain your consent.

Within joint marketing campaigns, we may process your personal data that we obtain otherwise than directly from you. For the purposes of marketing campaigns, or for the proper fulfilment of a contract, we may combine such personal data.

Personal data processed automatically:

During your visit to our website, we may collect certain information about you, such as your IP address, the date and time of access to our website, information about your internet browser, operating system or your language settings. We may also process information about your behaviour on our website, i.e. for example which links on our website you visit.

If you access our website from a mobile phone, we may also process information about your mobile device (data about your mobile phone, possible application crash records, etc.).

We also automatically process cookies. You may disable personalisation and targeted advertising at any time in the Cookies Settings.

A. During your visit to our website

(1) If you contact us by e-mail or via the contact form on our website, we receive the following information:

• your e-mail address and other information that you provide to us by e-mail;

• your first name and surname, telephone number, musical field, and the text message that you provide via the contact form.

(2) Our website offers the possibility to use social plugins.

In order to protect your data, social plugins are integrated into the website only as graphics containing a link to the relevant website of the owner of the respective social plugin. By clicking on the graphic, you transmit data to the respective provider. If you do not click on the graphic, no exchange of data takes place between you and the providers of the social plugins.

We do not accept and bear no responsibility for any losses or liabilities arising from or related to third-party platforms. Your use of third-party platforms is subject to the terms and conditions of the operators of such third-party platforms.

The following social plugins are integrated into the homepage:

• LinkedIn

(3) Data obtained through cookies

In order for our website to function properly, we use technologies such as cookies. Cookies are small text files stored on your computer or mobile device when you visit websites. They help remember your preferences for a certain period of time so that you do not have to re-enter them when you return to the website or move from one page to another.

More information about cookies and their settings can be found in a separate document.

B. If you are our client

We process personal data that you provide to us in connection with our activities or the use of our services, or in connection with the conclusion of a contract.

C. If you are our business partner

We process personal data that you provide to us in connection with the implementation of our mutual cooperation, in particular contact details, if you are a self-employed natural person or if you are a contact person authorised to act on behalf of a business partner within a specific business relationship.

The Czech Philharmonic Foundation processes personal data only in accordance with the purposes set out below and to the extent and for the period necessary to fulfil those purposes.

6. Legal basis and purposes of personal data processing

A. Processing of personal data without your consent

These are typically situations where you are required to provide us with certain personal data as a condition for us to be able to provide you with our product and/or service, or where we are entitled to process your personal data obtained in another manner:

Conclusion or performance of a contract with you

This concerns in particular the actual performance of a contractual relationship or other performance under a contract between the Czech Philharmonic Foundation and you. Personal data are required, inter alia, in order to enable the contractual relationship to be carried out without disproportionate legal risks, including negotiations on the conclusion or amendment of a contract with you.

Compliance with a legal obligation

• keeping accounting and tax records

• fulfilment of any obligation relating to client identification and control pursuant to statutory obligations

• fulfilment of other statutory obligations

Protection of rights and legally protected interests, in particular for

• protection of the rights and legally protected interests of the Czech Philharmonic Foundation, recovery of receivables, enforcement of security or other assertion of claims, development and improvement of the services provided

• handling of all dispute-related matters, in particular for the purposes of court or other disputes

• prevention of damage to the property of the Czech Philharmonic Foundation

• prevention of fraudulent conduct to which the Czech Philharmonic Foundation may be exposed

Legitimate interests

These are especially situations where there is a contractual/client relationship between you and the Foundation:

• improvement of the quality of our activities and development of new services

• ensuring the security of our systems and networks against external attacks or misuse

• sending of commercial communications

• responding to your enquiry submitted via our contact form or communicated by telephone

B. Processing of personal data based on consent

These are typically situations where you voluntarily consent to the processing of your personal data for one or more specific purposes, in particular for the purpose of receiving our newsletter, for the purpose of providing information about events organised by our Foundation, or for the processing of your photographs for the purpose of promoting the Czech Philharmonic Foundation. Based on your consent, our organisation processes your personal data for the following purposes:

• client care, i.e. activities that do not constitute performance of a contract or another statutory legal basis for the processing of personal data and that include the following activities: market research, monitoring of client behaviour on websites, dissemination of information, offering of products and services

Such consent, if granted, may be withdrawn by you at any time in accordance with the procedure specified in the consent.

7. Processing, transfer and sharing of personal data

Personal data are and will be handled and processed primarily by the controller - the Czech Philharmonic Foundation or by the Czech Philharmonic as the joint controller within the meaning of Article 26 GDPR.

We process personal data directly, both in written and electronic form. For the purpose of ensuring the objectives described above, personal data may, in addition to the Foundation and its employees, also be processed by other entities acting as processors; however, always solely on the basis of a concluded data processing agreement that respects your rights to the protection of personal data and obliges the processors to comply with applicable legal regulations relating to personal data protection. Such processors may include, for example, providers of cloud or hosting services, providers of ICT systems, software and accounting, tax advisory and legal services – the Czech Philharmonic, Salesforce, CRM for non-profit organisations, 22HLAV. All our partners are bound by a duty of confidentiality and may not use the provided data for any purposes other than those for which we have made them available.

Under certain precisely defined conditions, we are obliged to transfer some of your personal data on the basis of applicable legal regulations, for example to the Police of the Czech Republic or other law enforcement authorities and other public administration authorities. These authorities will process your personal data as independent controllers.

Upon your request, we will provide you with information about the recipients of your personal data.

Transfer of personal data to so-called third countries

Given that we provide services in an online environment where data are often transferred globally, it may occur that, in exceptional cases, personal data may be transferred to countries outside the European Union. In such cases, we transfer your personal data only provided that the European Commission has issued a decision on an adequate level of personal data protection, the recipient of your personal data is bound by the EU standard contractual clauses on personal data protection, or provided that the recipient has offered appropriate safeguards for the protection of personal data.

8. Personal data of persons under 16 years of age

A person under 16 years of age may use our website only if consent is granted by their legal representative (parent or guardian).

9. Duration of personal data processing

The above-mentioned data are processed only for the period necessary in relation to the purposes of their processing. We continuously assess whether the need to process certain personal data for a specific purpose continues to exist. Internally, however, in relation to certain purposes of personal data processing, we have already assessed the usual period of usability of personal data, upon the expiry of which we assess with particular care the need to continue processing the relevant personal data for the given purpose. In this context, it also applies that personal data processed for the purposes of:

• (a) performance of a contract are processed for the duration of the contractual relationship with the client; thereafter, the relevant personal data are usually usable for a period of ten years;

• (b) offering of products and services are processed for the duration of the contractual relationship; thereafter, the relevant personal data are usually usable for a period of ten years;

• (c) client care are processed for the duration of the contractual relationship with the client; thereafter, the relevant personal data are usually usable for a period of ten years;

• (d) protection of rights and legally protected interests by means of CCTV recordings; thereafter, the relevant personal data are usually usable for a period of fourteen days.

Personal data processed on the basis of consent are retained for the period specified in the consent or until such consent is withdrawn.

Personal data for which the purpose of processing has ceased to exist or the period for which such data may be processed has expired are irreversibly destroyed without undue delay.

10. Data security

The protection of your data is of key importance to us; therefore, we make every effort to ensure their security. We fully apply technical and organisational measures to prevent unauthorised access to such data and to prevent their destruction, loss, leakage or misuse. The methods used to secure your data are also regularly reviewed.

11. Your rights in connection with the processing of your personal data

You do not lose control over your personal data. You may access them or correct them at any time. As a data subject, you also have the following rights:

• the right to request from us, as the data controller, access to your personal data and more detailed information about their processing;

• the right to request the rectification of your inaccurate or incomplete personal data;

• the right to request that we provide you with your personal data in a commonly used and machine-readable format, enabling their transfer to another controller, if they are processed by automated means;

• the right to object to the processing;

• the right to request erasure of your personal data if we no longer have any legal reason for their further processing;

• in the case of processing based on your voluntary consent, the right to withdraw such consent at any time;

• the right not to be subject to any decision based solely on automated processing, including profiling;

• the right to obtain information about a personal data breach affecting your personal data.

If you wish to exercise any of the above rights, or if you have any questions, comments, suggestions or objections regarding the processing of personal data, please do not hesitate to contact us at our registered office at Alšovo nábřeží 79/12, Old Town, 110 00 Prague 1, Czech Republic or by e-mail at info@czechphilfoundation.org.

We will be pleased to address all your requests.

If you nevertheless wish to contact the supervisory authority, you have:

• the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, telephone: +420 234 665 111, e-mail: posta@uoou.cz, data mailbox: qkbaa2n, www.uoou.cz

12. Final provisions

This notice is issued for an indefinite period and enters into force on 1 October 2025.

We may amend this notice at any time by issuing a new complete version; the current version is published on the website of the Czech Philharmonic Foundation and is also available at our registered office.

Unless expressly stated otherwise, all information contained herein also applies to the processing of personal data of potential clients, i.e. persons with whom we have not yet established a contractual relationship but with whom we are already in contact. The information contained herein shall also apply, to an appropriate extent, to the processing of personal data of other persons with whom the Czech Philharmonic Foundation is in direct contact, even if no contractual relationship exists (e.g. representatives of legal entities).

Prague, 1 October 2025

Czech Philharmonic Foundation