This personal data processing notice (hereinafter also the "Notice") serves to inform you as a natural person (hereinafter also "You") about the reasons, manner, scope and purpose of processing your personal data by the Laichter House Foundation Fund in connection with your activities related to the foundation fund or Laichter House located at Chopinova 1543/4, Vinohrady, 120 00 Prague 2 (hereinafter also the "House") in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (hereinafter also "GDPR").
· 1. DATA CONTROLLER ·
1.1. The controller of personal data within the scope of this Notice is Nadační fond Laichterův dům (Laichter House Foundation Fund), with its registered office at Chopinova 1543/4, Vinohrady, 120 00 Prague 2, ID No.: 19969171, registered in the foundation register maintained by the Municipal Court in Prague under file no. N 2395 (hereinafter also the "Controller").
1.2. For any questions related to the protection of your personal data and their processing, you may contact the responsible person of the Controller: Štěpán Lars Laichter, phone: +420 776 318 136, e-mail: lars@laichter.house.
· 2. SCOPE OF THE NOTICE ·
2.1. This Notice applies to you if you:
access and use the website available at laichter.house, operated by the Controller (hereinafter also the "Website"),
create a user account on the Website or have one set up when establishing your Club membership as per point (iv) below (hereinafter also the "User Account"),
provide the Controller with a monetary or non-monetary gift or contribution of a similar nature (hereinafter also the "Gift"),
become a member of the literary club organized by the Foundation Fund, also known as "Lit klub" (hereinafter also the "Club"),
are permitted by the Controller to use common spaces in the House as part of its activities (hereinafter also "Use of Premises"),
participate in an event organized by the Controller or are otherwise part of the Controller's marketing activities (e.g. you are a recipient of information and news sent by the Controller).
· 3. PURPOSE OF PERSONAL DATA PROCESSING ·
3.1. Your personal data is processed:
in connection with your access to the Website and its use, for the purpose of proper functioning of the Website, customizing your experience on the Website, analyzing usage trends and improving the Website, and potentially also for protection against fraudulent activities,
if you provide your personal data to the Controller through a contact form on the Website, e.g. for the purpose of inquiring about a tour of the House or the use of the House premises for private purposes, for the purpose of communication with you,
if you create a User Account through the Website, or a User Account is set up for you when establishing your Club membership, for the purpose of creating and managing such User Account, including access to the account,
in the case of providing a Gift, for the purpose of accepting and administering the Gift and related steps by the Controller and concluding the relevant agreement,
if your Club membership is established, for the purpose of establishing, maintaining and managing your membership and related facts and administrative actions, providing potential benefits arising from your Club membership,
for the purpose of establishing, initiating and administering your Use of Premises and ensuring related actions, including establishing and administering your access authorization and your User Account within the Use of Premises (e.g. for logging into wifi or other systems),
in connection with the Foundation Fund's marketing activities, particularly in connection with sending newsletters and other commercial communications, and potentially also in connection with other marketing activities such as online or in-person meetings or social events, and further for the purpose of including your contact details in the Controller's contact database for commercial and marketing communication (hereinafter also "Marketing").
3.2. In connection with accessing the Website and Marketing activities conducted online, the Controller also processes your personal data in the form of cookies, within the scope of your chosen preferences, with the exception of functional cookies that are necessary for the functioning of the Website and are always processed by the Controller.
· 4. SCOPE OF PROCESSED PERSONAL DATA ·
4.1. In connection with the fulfilment of the purpose of personal data processing by the Controller as defined in this Notice, personal data that you provide to the Controller for any of the purposes stated in Section 3.1 of this Notice will be processed.
4.2. In the case of your access to the Website, provision of data through a contact form on the Website, and creation of your user account through the Website, the following personal data will be processed in particular:
identification data (name and surname, or other personal identifiers contained in your e-mail address if provided to the Controller through the contact form on the Website),
contact data (e-mail address and phone number if provided to the Controller through the contact form on the Website),
localization, technical and time data (including IP address and time of visit to the Website, browser type, device information and your activity on the Website),
cookies.
4.3. In the case of creating your user account through the Website or within the establishment of your Club membership, the following personal data will be processed in particular:
identification data (name and surname, or other personal identifiers contained in your e-mail address),
contact data (e-mail address and phone number),
localization, technical and time data (including IP address and time of visit to the User Account, browser type, device information and your activity within the User Account) and security data (e.g. User Account password),
cookies.
4.4. In the case of providing a Gift to the Controller, the following personal data will be processed in particular:
identification data (name and surname, and possibly also date of birth and address),
contact data (e-mail address, phone number, home address),
data related to the provided Gift (e.g. amount and nature of the Gift; in the case of a monetary Gift provided by electronic payment means, the number and other identifiers of your bank account, payment card or other payment instrument).
4.5. In the case of the establishment and duration of your Club membership, the following personal data will be processed in particular:
identification data (name and surname, and possibly also date of birth and address),
contact data (e-mail address, phone number, home address).
4.6. In the case of the establishment and duration of your Use of Premises, the following personal data will be processed in particular:
identification data (name and surname, and possibly also date of birth and address),
contact data (e-mail address, phone number, home address),
security data (e.g. password) for the purpose of establishing and managing access authorization to the premises,
video recordings made by the security camera system,
data on entry to the House premises using an access chip.
4.7. In the case of Marketing, the following personal data will be processed in particular:
identification data (name and surname, or other personal identifiers if provided to the Controller),
contact data (e-mail address, and possibly your home address for identification purposes in the case of granting consent to the processing of your personal data within a Marketing event),
photographs and video recordings taken during meetings, events or other marketing activities,
cookies (in the case of filling out an online contact form on the Website for the purpose of receiving newsletters or other commercial communications).
4.8. More detailed information about the cookies processed by the Controller can be found in the Cookie Processing Policy.
4.9. During the processing, you will not provide or otherwise make available any personal data falling into the category of special data pursuant to Article 9 of the GDPR.
· 5. LEGAL BASIS FOR PERSONAL DATA PROCESSING ·
5.1. Your personal data will be processed on the basis of:
Article 6(1)(a) GDPR, i.e. based on your consent, which applies in particular to the processing of your personal data provided to the Controller through a contact form on the Website, further for Marketing purposes (e.g. contact details provided through the newsletter subscription form on the Website, or personal data processed in connection with your participation in Marketing events), and further cookies in connection with your access to the Website, with the exception of functional cookies,
Article 6(1)(b) GDPR, i.e. in connection with the creation of your user account on the Website or in connection with the establishment of your Club membership and Use of Premises, further with the performance of a gift agreement between you and the Controller, Club membership or Use of Premises and access to said premises,
Article 6(1)(c) GDPR, i.e. in connection with the fulfilment of legal obligations applicable to the Controller, in particular in connection with information and other obligations under applicable legislation, and further in connection with the fulfilment of financial or statistical obligations,
Article 6(1)(f) GDPR, i.e. based on the legitimate interest of the Controller, particularly in cases where the Controller exercises protection of its rights and legitimate interests in the processing of your personal data, including monitoring the use of the Website, monitoring security or integrity breaches of the Website or your User Account or source codes, cybersecurity control and assurance, further use of personal data for improvement, optimization and development of the Website, further for security purposes in the House premises in connection with Use of Premises by Club members, and further for the Controller's Marketing activities, including sending information, news and other commercial communications, provided that you have entered the final phase of negotiations to conclude a contractual relationship with the Controller or have already concluded such a contractual relationship.
· 6. DURATION OF PERSONAL DATA PROCESSING ·
6.1. The processing of your personal data as defined in this Notice will last for the duration of the processing purpose within the meaning of this Notice:
in the case of your access to the Website, for the duration of your visit to the Website, and subsequently for the period necessary to achieve the relevant purpose, usually no longer than 12 months from your last access to the given web interface,
in the case of providing your data through a contact form on the Website, for the duration of the relevant communication with you,
in the case of creating your User Account, for the duration of the existence of this User Account, and subsequently for the necessary period, usually no longer than 3 years from the deletion of the User Account,
in the case of providing a Gift, for the duration of the agreement, and subsequently for the necessary period, usually no longer than 3 years from the termination or complete fulfilment of the agreement,
in the case of the establishment and duration of your Club membership, for the duration thereof and subsequently for the necessary period, usually no longer than 3 years from the termination of Club membership,
in the case of establishing and duration of your Use of Premises, for the duration of such Use of Premises, and subsequently for the necessary period, usually no longer than 3 years from the termination of the Use of Premises,
in the case of your personal data processed on the basis of your consent (e.g. for Marketing purposes), for the duration of validity of your consent, or until such consent is revoked, unless further processing of such personal data is based on another legal basis pursuant to Section 5.1 of this Notice.
6.2. Even after the termination of personal data processing for the purposes stated in this Notice, the Controller may continue to retain your personal data in cases where applicable laws require or allow it. In such cases, your personal data will be retained for the prescribed period and processed only for the purposes established by such legislation.
· 7. TRANSFER OF PERSONAL DATA TO THIRD PARTIES ·
7.1. In the context of personal data processing defined in this Notice, third-party services may be used, particularly software services. Your personal data will therefore also be transferred for processing to these external service providers, who will act as processors or sub-processors of your personal data. Currently, such external service providers include:
Google Ireland Ltd. (Firebase / Google Cloud) – website operation and hosting, backend infrastructure, data storage, user authentication, file storage, technical logs, security and service stability.
Google LLC (Google Analytics) – website traffic analysis and user behavior.
Stripe Payments Europe Ltd – online payment and gift processing, management of payment transactions.
Meta Platforms Ireland Ltd – marketing analytics, conversion measurement and remarketing through Meta Pixel (Facebook and Instagram).
Seznam.cz, a.s. – marketing analytics, conversion measurement and ad targeting through Seznam tools (e.g. Sklik, Seznam retargeting).
7.2. The Controller is further authorized to provide personal data to suppliers of external advisory services (e.g. tax, accounting or legal services).
7.3. Processing of personal data will take place primarily within the European Union (EU). If your personal data were to be transferred outside the EU, such transfer will be subject to appropriate data transfer mechanisms (e.g. standard contractual clauses or the Data Privacy Framework in the case of the USA), including prior assessment and appropriate safeguards. Upon request, we will provide you with further information.
· 8. INFORMATION ON RIGHTS RELATED TO PERSONAL DATA PROCESSING ·
8.1. The Controller is authorized to process your personal data for the purposes, to the extent, in the manner and for the period defined in this Notice.
8.2. As a data subject, you have the following rights:
Right of access to processed personal data – you may request a copy of your personal data processed by the relevant Controller. If the relevant record contains personal data of another natural person, such data will be redacted to protect the privacy rights of third parties. If your request cannot be fulfilled for other reasons provided by law, you will be informed by the relevant Controller.
Right to information – you may inquire how the Controllers process your personal data.
Right to rectification – you may request the rectification or supplementation of your personal data processed by the relevant Controller if you consider them inaccurate or incomplete.
Right to erasure – you may request the erasure of your personal data processed by the relevant Controller if they are no longer necessary for the purpose of their processing or retention.
Right to restriction of processing – under certain circumstances, you may request the relevant Controller to restrict the processing of your personal data.
Right to data portability – you have the right to request the relevant Controller to transfer to you or a third party designated by you the personal data you have provided, processed by the relevant Controller on the basis of this Consent, in a machine-readable format.
Right to withdraw consent – you have the right to withdraw this Consent at any time, which, however, does not affect the lawfulness of the processing of personal data carried out before such withdrawal.
8.3. More details about your rights can also be found on the website of the Office for Personal Data Protection uoou.gov.cz.
8.4. If you wish to exercise any of your rights defined in Section 8.2 of this Notice, please contact the contact person specified in Section 1.2 of this Notice.
8.5. You may file a complaint with the Office for Personal Data Protection – address: Pplk. Sochora 27, 170 00 Praha 7; phone: +420 234 665 800; e-mail: posta@uoou.gov.cz; data box: qkbaa2n.
8.6. You may also assert your rights before the competent court.
This version of the Privacy Policy is effective as of 1 January 2026. The Controller reserves the right to amend this Privacy Policy at any time at its own discretion.