Information on the processing of personal data

In accordance with the EU General Data Protection Regulation ("GDPR"), we would like to inform you about the processing of your personal data that we have collected about you in connection with your registration and participation in the event organized by KAM: E. Pajurka 142, Frydlant nad Ostravici, 73911, Czech Republic (the "Controller").

If you have any questions or comments about the processing of your personal data or wish to exercise any of your rights set out in the information, please contact Michael Sullivan msullivan@josiahventrure.com.

Who is responsible for processing your personal data?

The data controller of your personal data is the Controller, which is responsible for all processing carried out on its behalf.

Why and how will your personal data be processed?

Purposes of processing:

The Controller will process your personal data that we have obtained in connection with your registration for an event organised by the Controller (title, name, surname, date of birth, address, telephone, email, passport number, dietary restrictions, payment details) for the following purposes:

• Arranging your attendance at an event organised by the Controller, including any accommodation and meals, invoicing and related communications

• Bookkeeping

• Sending you information about other events organised by the Controller or its activities, which you can refuse at any time.

If you have registered with EMS at the same time as registering for an event organised by the Controller, the Controller will also process other personal data (login password, registration history) for the purpose of maintaining your online account.

The personal data will be processed by the Controller automatically (electronically) in the EMS system and possibly also manually (i.e., in paper form).

Legal basis:

The Controller is entitled to process your personal data without your consent as it carries out processing that is necessary for the conclusion and performance of a contract concluded with the data subject or for the purposes of the Controller's legitimate interests (promotional/advisory activities) and for the performance of legal obligations.

The provision of personal data is a legal/contractual requirement and without this data it will not be possible to participate in an event organised by the Controller.

Personal data on dietary restrictions are considered health data and belong to special categories of personal data (so-called sensitive data), which we can only process with your explicit consent. The provision of this data is therefore completely voluntary and by filling in the appropriate box you consent to the processing of special category personal data. You can withdraw your consent at any time via the contacts above or in your EMS profile. The withdrawal of consent does not affect the lawfulness of the previous processing.

To whom can your data be disclosed or made available?

Data Processors:

In addition to the Controller’s employees, your personal data will also be processed by third parties as data processors who process your personal data for the Controller on the basis of a Data Processing Agreement. These data processors include:

• Josiah Venture NFP, P.O.BOX 4317, Wheaton, IL 60189, USA - EMS system operator

• Collaborators of the Controller (self-employed)

• Accounting company

You can request an up-to-date list of all data processors using the contact details above.

Other recipients:

Your personal data will be provided to accommodation operators if the event organized by the Controller includes accommodation.

If you are an associate of Josiah Venture NFP, your personal data in the EMS may be shared with the CRM system to facilitate communication and collaboration within this organization.

In addition, your personal data may be disclosed to other persons in cases where disclosure constitutes a legal obligation (e.g., competent tax authorities, courts) or is strictly necessary to ensure your participation in the event or is in the legitimate interest of the Controller (e.g., legal counsel, tax advisor, courts).

Can your personal data be transferred to third countries (outside the EEA)?

Your personal data will not be transferred outside the EEA.

How long will we keep your personal data?

Personal data will be retained for the duration of the Controller's activities until you cancel your EMS account or object to receiving invitations to events organised by the Controller and other promotional material. In this case, we will retain your personal data for no longer than 10 calendar years after the year in which you attended the last event organised by the Controller (for bookkeeping purposes).

What rights do you have?

You have the right to be informed about the processing of your personal data, to access your personal data, including the right to a copy of your personal data and, where applicable, to the portability of your personal data to another controller, to have your personal data corrected or deleted (if you object to the Controller's promotional activities or if the retention period for your personal data expires), or to restrict processing (if you contest the accuracy of the personal data processed or request restriction of processing instead of deletion of your personal data).

YOU MAY OBJECT TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF CONTROLLER'S PROMOTIONAL ACTIVITIES AT ANY TIME AND THE PERSONAL DATA WILL BE ERASED AND SHREDDED (UNLESS CONTROLLER HAS ANOTHER REASON FOR PROCESSING IT).

Please make all your requests using the contact details above.

You also have the right to contact the Data Protection Office (www.uoou.cz).