Načítám...
Načítám...
Gala Media s.r.o., Company ID: 17746493, VAT ID: CZ17746493, with its registered office at Rybná 716/24, Staré Město, 110 00 Prague, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 375982, as the data controller, processes your personal data (hereinafter referred to as the "Company").
The Company provides event services for its clients, including in particular photography services, videography services, decoration services, equipment rental, and supplementary event services. The Company, as the personal data controller, fully respects the principles of data protection when processing its clients' personal data and, in accordance with applicable legislation, informs its clients below about the manner and scope of data processing and provides them with other important information regarding the protection and processing of personal data.
The Company fully complies with the rules established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter referred to as the "Regulation"), and Act No. 110/2019 Coll., the Personal Data Processing Act, as amended, and strictly adheres to all established procedures in accordance with these regulations.
The data controller is the entity that holds the personal data of data subjects (clients) and determines the purpose and means of their processing. The Company is the personal data controller, as it collects personal data of its clients for the purposes of fulfilling obligations arising from contractual relationships, complying with related legal obligations, and, where explicit consent has been granted, for sending marketing communications and promoting the Company's services.
The Company hereby informs its clients that no Data Protection Officer has been appointed and the Company does not have a representative for the fulfilment of obligations within the meaning of the Regulation.
Company contact details:
The Company processes only those personal data that are necessary for the proper conclusion of a contractual relationship with the client, fulfilment of obligations under concluded contracts, compliance with legal obligations, protection of the Company's interests, and, where the client has granted explicit consent to the processing of personal data, also data that are necessary to inform the client about the Company's services and products, news, promotions, and other marketing communications (hereinafter referred to as "marketing purposes").
The client may also grant the Company consent to process photographs and videos taken as part of the services provided at the client's requested event. If the photographs or videos depict persons other than the client, the client is obliged to inform these persons and obtain their consent to the processing of personal data, or to inform the Company that consent from these persons has not been granted. Based on such consent, the Company processes photographs and videos for the purposes of its own promotion on its website www.galaevents.cz, as well as on social media and similar platforms.
Categories of client personal data processed by the Company:
Processing of personal data without the need for consent:
Processing of personal data with the client's consent:
Granting consent is entirely voluntary; however, it is necessary for the Company to be able to inform the client about its products and services, news, promotions, and other marketing communications. The client also grants the Company consent to use photographs and videos for the promotion of the Company's services.
The client grants consent via the electronic form on the Company's website. The Company does not provide the client's personal data to third parties for marketing purposes.
The client may withdraw their consent at any time by writing to the email address info@galaevents.cz.
Our website uses cookies. Detailed information about the types of cookies we use, their purpose, retention period, and management options can be found in our separate Cookie Policy.
The personal data of the Company's clients are processed for the duration of the Company's provision of services to those persons or for the duration of the contractual relationship.
Upon termination of the contractual relationship and settlement of all related obligations, the Company retains these personal data for the minimum period required by applicable legislation, e.g. the Accounting Act, the Archives and Records Act, the Value Added Tax Act, etc., as well as for the duration of general and special limitation periods for individual claims.
The Company adheres to the principle of data minimisation when retaining personal data. Once the purpose for processing personal data ceases to exist or the period for which the Company is required or entitled to retain personal data expires, the personal data are completely erased from the Company's records and systems.
To fulfil the above-mentioned processing purposes, clients' personal data may be processed, in addition to the Company and its employees, by other processors with whom the Company has concluded data processing agreements in accordance with the Regulation and the Act.
Personal data processors include in particular:
Some processors may be established outside the EU (Vercel, Resend, Google). In such cases, the transfer of data is ensured through Standard Contractual Clauses (SCCs) approved by the European Commission and/or adequacy decisions (EU-US Data Privacy Framework).
The Company processes personal data by automated means; however, it does not use profiling.
The right to information means all rights of the client contained in Art. 13 of the Regulation. In particular, this includes the right to know the identity and contact details of the data controller, the purpose and legal basis of the processing, the recipients or categories of recipients of personal data, the retention period of personal data, the rights of data subjects (clients), and the possibilities for exercising them.
The right of access to personal data means all rights of the client contained in Art. 15 of the Regulation. In particular, this includes the right of the client to obtain confirmation from the Company as to whether and for what purpose personal data are being processed. The client has the right to request copies of the personal data being processed from the Company. In the case of repeated and manifestly unfounded requests, the Company is entitled to charge the client a reasonable fee to cover the administrative costs of producing the copy.
The right to rectification means all rights of the client contained in Art. 16 of the Regulation, in particular the right to have the Company correct without undue delay any inaccurate or incorrect personal data relating to the client.
The right to erasure means all rights of the client contained in Art. 17 of the Regulation. In particular, this includes the right of the client to have the Company erase their personal data without undue delay upon request, provided that the conditions set out in the Regulation are met.
The right to restriction of processing means all rights of the client contained in Art. 18 of the Regulation, in particular the right to restrict the processing of their personal data to only the most essential legal grounds. This right may be exercised in particular in cases where it is not clear whether and when the personal data will need to be deleted.
The right to object means all rights of the client contained in Art. 21 of the Regulation. If the client discovers or believes that the Company is processing their personal data in a manner inconsistent with the protection of their privacy, in conflict with the Regulation, or in violation of the law, the client may request an explanation from the Company or request that the situation be remedied.
The right to data portability means all rights of the client contained in Art. 20 of the Regulation, in particular the right to obtain or transfer to another data controller the personal data that the client has provided to the Company, in a structured, commonly used, and machine-readable format.
The client also has the right to address their complaint to the Office for Personal Data Protection, which acts as the supervisory authority for personal data protection matters. The client's right to other remedies is not affected.
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Praha 7
www.uoou.cz
The individual rights set out in this article may be exercised by clients with the Company via email: info@galaevents.cz.
The Company is obliged to resolve client requests no later than within 1 month from the date of receipt of the request. In justified cases, particularly with regard to the scope of the request, the Company is entitled to extend the response period to 2 months; the Company will always inform the client in a timely manner of the need for such an extension.
The Company reserves the right to update this Privacy Policy from time to time. The current version is always available on the Company's website.
Last updated: 29 March 2026