Privacy Policy – GDPR

Personal data protection

On the basis of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (hereinafter GDPR), we provide information regarding the protection of personal data, including what type, for what purpose and why this is done in the case of the Myslbek building. On this page, you will also find an easy-to-understand description of how to prevent us from sharing your data.

Data Controller

The controller and the one who determines for what purposes we collect personal data and how we will use it is the following entity - the owner of the Myslbek Building.
MYSLBEK, joint stock company
Ovocný trh 1096/8, Staré Město, 110 00 Prague 1
ID: 49240552
DIC: CZ49240552
The company is registered with the Municipal Court in Prague, Section B - Insert 2020


GDPR principles we follow

1. We process only adequate personal data limited to the extent necessary in relation to the purpose for which it is processed and for the period of time strictly necessary.
2. We do not process sensitive personal data. In the vast majority of cases, we work exclusively with email addresses.
3. We only process accurate personal data and take the necessary measures to erase or correct inaccurate personal data.
4. We process your personal data in a manner that ensures appropriate security of the personal data, including protection by technical and organisational measures against unauthorised or unlawful processing. The same regulations and rules apply to all contractual collaborators.
5. All data stored is used exclusively and exclusively for marketing purposes in order to inform as accurately as possible about services, products, news or events related to the Myslbek building and its tenants.
 

Sources of personal data

We obtain your personal data as follows:
- if you subscribe to Myslbek Shopping Gallery marketing communications;
- if you allow geolocation;
- if you opt-in to receive push notifications;
- if you enter competitions we run; 
- if you participate in surveys;
- if you subscribe to the www.myslbek.com website.
- if you enter a shopping mall where we use security cameras
- if you contact us by email
- if you subscribe and follow us on our social media channels


Why and for how long do we keep personal data?

Purpose of processing and legal basis
1. Processing based on consent 

We process your personal data on the basis of your consent. This is in particular when you fill in a newsletter subscription form or a form to sign up for an event on the Myslbek website, or when you give written instructions by sending an email.

In the context of this form, by sending an email, you give your consent for us to use your personal data to send you newsletters (operational information, news, events, discounts...).

We send newsletters via the professional service platform of the international direct mail provider MailChimp:  
The Rocket Science Group LLC d/b/a MailChimp
675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA
privacy@mailchimp.com

The company operating MailChimp guarantees an appropriate level of privacy: https://mailchimp.com/legal/privacy/

You can unsubscribe from the newsletter at any time. In the footer of each newsletter you will find an UNSUBSCRIBE box that you can click on. And your personal data will be deleted immediately. You can also withdraw your consent at any time by contacting gdpr@myslbek.com.

The system automatically tracks data about your e-mail usage (delivery of newsletters, opening of newsletters, etc.) so that we do not send you e-mails repeatedly. If you do not open the newsletter 3 times in a row, the system will automatically delete your personal data (e-mail) from the database.

Newsletters are prepared for us by Digital Deers s.r.o., with registered office at Opletalova 1417/25, 110 00 Prague 1, ID: 24176702 (contact email: hello@digitaldeers.com). Digital Deers s.r.o. has established and complies with data protection standards that comply with the relevant data protection legislation, in particular the GDPR. This is evidenced by the GDPR-compliant contractual relationship with the owner of the Myslbek building.


2. Processing without consent

In exceptional cases, we may also process your personal data without consent, in particular in the following cases:

To negotiate a contract or to enter into or perform a contract with you. This is particularly the case for competitions where we need your data to identify you and send you the prize. Example.
For the fulfilment of our legal obligations, in particular for accounting and tax purposes, the fulfilment of archiving obligations.
For the purposes of the legitimate interests of us as administrator or third parties. These include in particular the exercise of our rights, the resolution of disputes, the protection of persons and property (camera systems, etc.).


What personal information is involved?

In the case of processing for the purpose of sending newsletters, it is exclusively your e-mail. You do not need to fill in the form on our website to find out more.

If you fill in a printed form, a competition or game card at one of the events directly in our centre, or sign up for one of the events we organise, the form may contain more fields: your name, your employer, email, phone number or year of birth, or where you live / city / municipality. 

There is always a tick box on the form and wording where by ticking the box you agree to the processing and further use of the personal data provided for marketing purposes. We generally only use these additional categories beyond the email address for the duration of the ongoing event or competition and for twelve (12) months after the end of the event for any claims. 

You are completing the form solely on a free will basis. It is perfectly legitimate if you do not participate in similar promotions.

 
How long we keep your personal data

We only process your personal data for as long as is necessary for the purposes of the processing. We use software tools to assess whether there is still a need to process your personal data for a given purpose. If your personal data is no longer needed for any of the processing purposes, we delete the data. If you are interested in the exact time limits for archiving or destruction of your processed personal data, please contact us at gdpr@myslbek.com and we will be happy to provide you with this information immediately.


Protection and security of personal data

We will handle your personal data responsibly and in accordance with applicable Czech and European legislation. We do not use personal data for automated decision-making purposes. All data is stored on secure servers (clouds) located in the European Union, unless otherwise stated in a specific case.

Personal data is protected to the maximum extent possible using modern technologies that are appropriate to the level of technical development and the level of risk of misuse.
We maintain technical and organisational measures to prevent the misuse, damage or destruction of personal data from the time of acquisition to its disposal.


To whom can personal data be disclosed?

We may disclose the personal data we process as a controller and as a processor only to employees and contractual processors who perform administrative and technical support for the operation of applications necessary for the operation of the website and supporting applications, provide marketing or advertising or other services where the transfer of personal data is necessary. In any case, we only disclose personal data that is necessary for the performance of the relevant obligation by these persons. All such entities are bound by the data processing agreements we have entered into with them, and must comply with confidentiality and applicable data protection policies and measures.


Cookies

When you visit our building's website, we may collect data about your visits to our website and track your use of our services. This information includes your IP address and your behaviour on websites operated under the domains www.myslbek.com, www.ngmyslbek.cz, www.nakupnigaleriemyslbek.cz . Cookies help us remember your activities and preferences so that you do not have to set them again when you navigate between websites or return to a site. We also use cookies to determine what services you are interested in and then provide you with a range of services where appropriate.

This data is processed collectively by Google Analytics, which is provided by Google:
Google LLC ("Google")
1600 Amphitheatre Parkway
Mountain View
CA 94043 - United States

These data cannot be attributed to a specific entity and are anonymous. We obtain such information automatically by means of so-called cookies or tracking technologies. The purpose is to provide you with the best possible service and content. We will process and record your data for a maximum period of twelve (12) months. You can disable cookies on your computer.


Data recipients:

FACEBOOK , INSTAGRAM (META)
Facebook Ireland ltd.
462932
4 Grand Canal Square, Grand Canal Harbour, Dublin 2

Facebook Pixel
A Facebook Pixel is a code that is placed on a website. This code can collect and send data about visitors to the website to the Facebook Ads Manager.

GOOGLE
Google Ireland ltd.
IE368047
Gordon House Barrow Street Dublin 4, D04E5W5 Ireland

Google Ads
A marketing platform that allows you to serve content ads in the Google search console and evaluate their success. 

Google Analytics
An analytics platform used to collect data about user interaction with the web and analyse how users use, navigate between or access websites. 

Google Tag Manager
A system for managing measurement codes on websites. Its principle is that only one code is placed on the website and then individual measurement codes are inserted via a web interface. 

SEZNAM.CZ
Seznam.cz
Radlická 3294/10
Prague 5 - Smíchov
POSTAL CODE 150 00

Sklik
A marketing platform that allows you to display and target content advertising messages in Seznam search and on their websites and evaluate their success.

SHOPTET
Shoptet, a.s.
Dvořeckého 628/8
169 00 Prague 6

Shoptet
Shoptet's content delivery tool.


How do we use cookies:

Tracking and remarketing cookies - they help us optimize our offer for customers and reach them with banner ads or other forms of advertising on other websites.
Key cookies - without them, the site will not function properly. You may encounter problems in forms, orders or not be able to stay logged in.
Analytical - they allow you to track site traffic and usage of various features. This information allows us to improve the clarity, structure and content of the website. This is done through anonymised Google Analytics
Conversion - used to evaluate advertising campaigns and track the ways in which users come to our site. 
We also use the so-called Facebook pixel, which tracks the success of "clicks" from Facebook to the website and subsequently the accuracy of advertising campaigns in the form of so-called remarketing or retargeting. This data is also anonymous.

We use cookies on the basis of your consent, which you have expressed by setting your internet browser accordingly. You can further adjust your cookie settings as required here: http://www.allaboutcookies.org/manage-cookies/.

You can delete any cookies that are already installed on your computer. Most browsers also offer the option to not store cookies on your computer. However, if you take advantage of this option, you may have to manually adjust some preferences repeatedly each time you visit the site, and you may be limited in some services and features of the site.
 

Your rights according to GDPR 

You can request information from us about whether we process your personal data. You have the right to access this personal data, the right to obtain information about the purpose of the processing of personal data, the categories of personal data, the recipients of the personal data to whom the personal data have been disclosed, the period of storage of the personal data or the criteria for determining this period. You also have the right to request information about the list of your rights.

If the personal data we process about you is inaccurate or out of date, you have the right to request that we correct or complete it without delay. Similarly, you have the right to request that we delete your personal data that we process without undue delay, unless we have an obligation or legitimate interest to retain the data. 

If the processing of your personal data is based on your consent, you have the right to withdraw your consent to the processing of your personal data at any time. If one of the lawful grounds for processing personal data does not exist, we cannot process your personal data further. You also have the right to request the restriction of the processing of your personal data in justified cases and the right to transfer your personal data to another controller.

If you believe that we are processing your personal data in breach of the law, you have the right to lodge a complaint with the Data Protection Authority.

 
Conclusion

By entering your email address and other personal data via the newsletter form, or registering for events and activities organised by Myslbek, or by completing a printed form containing the relevant information required by the GDPR, including a link to this full information, we take it as confirmation that you have read and understood it. 

If you have any questions or wishes in connection with your personal data, you may contact us: gdpr@myslbek.com