Privacy policy

This Privacy Policy sets out how we use and protect your personal information that is provided to us through the use of the Services under the Hravýlety Project (the "Project").

The Project denotes an outdoor game for families with children in which fun tasks can be performed. The game can be played via the web portal www.hravylety.cz or the mobile application "Hravýlety", using related software and other products (hereafter " Services ").

I. Basic provisions

1. The administrator of personal data is Ms. Michaela Vejmelková, IČO: 87075725, with its registered office at Vaňkova 296/11, 198 00 Prague 14 (hereafter referred to as the “administrator”).
2. The contact details of the administrator are

   physical address: Vaňkova 296/11, Praha 9, 198 00

   email: michaela.vejmelkova@centrum.cz

3. Personal data. We receive and store information that may be personal information that you provide to us when using our services or in any other way, such as: First and last name, email address when registering an account and profile photo when completing information in your account.
4. The administrator did not appoint a data protection officer.

II. Sources and categories of personal data processed

1. The administrator processes your personal data and other information in the manner and to the extent specified below. The controller does not collect any sensitive data in the sense of the Personal Data Protection Act.
2. The Administrator processes personal data that you have provided him / or personal data that the Administrator has obtained on the basis of the performance of the Service Agreement according to your requests:
   1. your location;
   2. the unique identifier of your mobile device, your IP address;
   3. time and date of access;
   4. route, speed and its length
   5. identification of the user and persons accompanying him;
   6. files (audio, video, photo, profile photo) texts, answers to questions recorded while using the service;
   7. technical parameters (web browser and operating system parameters);
   8. cookie information;
   9. information and content that you provide through messaging, social networking, or email, and other information that you choose to share.

III. Legal reason and purpose of personal data processing

1. The legal reason for processing personal data is the fulfilment of the contract between you and the administrator.
2. The Operator is entitled to use your personal data and other information collected in connection with the provision of the Services as follows:
   1. for internal business purposes, such as analysis of the use of our services through Google Analytics, market research and optimization of trips, websites and mobile applications, as well as for communication about new products and Services;
   2. for the purposes of providing the Services;
   3. to inform about changes in our Services, about changes in the conditions of use of our Services and in other types of communication;
   4. for the purposes of logging in and using the Service, sharing content and information, verifying the user's identity.
3. The data collected is used to gradually improve trips and improve calibration of complexity.

IV. Data retention period

1. The administrator retains personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship between you and the administrator and the assertion of claims under these contractual relationships.
2. After the retention period of personal data, the administrator deletes the personal data.

V. Recipients of personal data (subcontractors of the controller)

1. The administrator may provide personal data to third parties (subcontractors):
   1. Google - For the purpose of signing in using the Firebase authentication service, and providing geolocation services
   2. Payment gateway (Apple Pay, Google Pay, Stripe)
   3. Mailjet (e-mail service provider for the purpose of sending e-mail)
2. The Web Portal may use the "Google Analytics" web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.
3. Social bookmarks: Our website contains social network bookmarks (eg Facebook, Instagram). The use of these services outside the scope of our offer is governed exclusively by the statement on the handling of personal data of the service provider.
4. The Administrator may disclose personal data and other information if required by law or a decision of a competent governmental authority and / or to protect and defend the rights or property, our services, users or the public.
5. The administrator shares your personal information as follows:
   • We may post personal information and content in a public post, such as participation in discussion forums.
   • If we have the appropriate consent from you, we use your contact details (email / phone number) to send marketing messages about products and services (direct marketing).

VI. Your rights

1. Under the conditions set out in the GDPR, you have
1. the right to access your personal data,
2. the right to correct personal data or impose restrictions on processing,
3. the right to delete your personal data in our care,
4. the right to object to the processing; and
5. the right to data portability.
6. the right to withdraw consent to processing in writing or electronically to the administrator's address or email.
2. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

VII. Terms of personal data security

1. The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
2. The administrator has taken technical measures to secure data repositories and personal data repositories in paper form.
3. The controller declares that only persons authorized by him have access to personal data.

VIII. Links to other websites

When using the Services, you may encounter links to other websites. However, if you use such a link and leave our website, you should be aware that we have no control over these other websites. Therefore, we cannot be held responsible for the protection and privacy of any information you provide when visiting such sites, and such sites are not subject to this Privacy Policy.

VIII. Final provisions

1. By using the services, you confirm that you are familiar with the terms of personal data protection and that you accept them in full.
2. You agree to these conditions by using the application or our web portal. By using our products, you confirm that you are familiar with the terms of personal data protection and that you accept them in full.
3. The administrator is entitled to change these conditions. It will publish the new version of the terms of personal data protection on its website and will receive a notice in the application.

These conditions take effect on 24.5.2020.