Controller and contact
The organiser named above is the data controller and website operator. Use the contact form for enquiries, to exercise your rights or to withdraw consent. You may also send correspondence to the registered address shown above.
Contact formWhat data we process
| Data and purpose | Legal basis |
|---|---|
| Participant registration Crew members’ names, dates of birth and addresses, the applicant’s contact details, and vehicle details and photographs to process participation. | Legal basis Pre-contractual steps and the contract with the applicant; for other crew members, legitimate interests in organisation and safety. GDPR 6(1)(b), 6(1)(f) |
| Partnership Company and contact details, orders, materials and communications to manage cooperation. | Legal basis Performance of a contract; for company contact persons, legitimate interests in cooperation. GDPR 6(1)(b), 6(1)(f) |
| Contact form Name, email, subject and message content to handle the request and document communications. | Legal basis Legitimate interests in answering enquiries; pre-contractual steps where a contract is being discussed. GDPR 6(1)(b), 6(1)(f) |
| News subscription Email, language and consent records to send news. Subscribing is not a condition of participation. | Legal basis Voluntary consent; you can unsubscribe at any time using the contact form or the link in a marketing message. GDPR 6(1)(a); § 7, 480/2004 Sb. |
| Operation and security Technical and access data, security logs and account details to protect the website and its private areas. | Legal basis Legitimate interests in website security and protecting rights. GDPR 6(1)(f) |
| Records and complaints Accounting documents, contract and complaint data to the extent needed to meet obligations and protect claims. | Legal basis Legal obligations and legitimate interests in protecting legal claims. GDPR 6(1)(c), 6(1)(f) |
We receive other crew members’ data from the applicant. We will provide them with processing information at the first communication and no later than one month after obtaining the data, unless they demonstrably already have it. We ask applicants to pass it on; do not attach unnecessary documents or sensitive data.
Recipients and data transfers
Data is available to authorised team members and relevant service providers. Cloudflare provides hosting, the database and file storage; Resend sends sign-in emails. Transfers outside the EEA require safeguards under Chapter V of the GDPR. Google receives data only after the relevant optional service is enabled.
Cloudflare Turnstile protects sign-in and public forms against automated abuse. During verification, Cloudflare processes the IP address and technical browser information. Verification serves security purposes, not advertising analytics.
You can request details of specific recipients, countries involved in any transfer outside the EEA, and a copy of the safeguards used through the contact form.
Allowing tracking consents to loading Google Tag Manager and analytics or marketing tags activated by the organiser. Allowing external videos consents to loading YouTube from Google. These services may use cookies and process IP addresses, browser information and interactions. Exact tags must be listed here before activation. External links open outside our website and follow the destination service terms.
CookiesRetention and required information
Data are retained while handling the application and organising that festival edition; afterwards only as necessary for legal obligations or protecting claims until the relevant periods expire. Newsletter data are retained until consent is withdrawn; evidence of consent for as long as necessary to demonstrate lawfulness. Required fields are needed to process the service. We do not use automated decisions producing legal effects.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing and withdraw consent at any time without affecting prior lawfulness. Submit requests, objections or newsletter withdrawal through the contact form or by post to the controller. We normally respond within one month and explain any lawful extension. You may complain to the Czech data protection authority.
You may object to processing based on legitimate interests. You may object to direct marketing at any time; we will then stop using your data for that purpose.
We will handle your request without undue delay and within one month at the latest. We will explain any statutory extension of up to two further months within that first month.
If identity verification is necessary, we will request only the documents needed. Erasure does not apply to data we must retain by law.
Czech data protection authority ↗Content and Photos
Reportage photos and videos may be taken at the festival. Publication requires a suitable legal basis and respect for privacy and personality rights. Entry or registration does not grant unlimited consent to advertising use of your likeness or that of the entire crew. Where consent is needed for a specific use, we request it separately. Contact us about objections or a particular photograph through the contact form.
For a photograph request, provide a link or description of the image and the reason for your request. We take particular care to protect children’s and vulnerable people’s rights.