Privacy Policy

1) Data Controller

The Data Controller is:

‍Seyfor, a. s.
‍Drobného 49, 602 00 Brno, Czech Republic
‍ID No. (IČO): 01572377 | VAT ID (DIČ): CZ01572377D-U-N-S number: 36-132-2137
File number: B 7072 maintained by the Regional Court in Brno

For questions regarding the protection of personal data, you can contact the Controller in writing at the registered office address or by email at gdpr@seyfor.com.

2) What Personal Data We Process

The scope of processing depends on the website features you use and the data you provide. Typically, we process:

A) Data for registration/orders and event participation

• First and last name, or company name
• Email and phone number
• Billing information (billing address, ID No./VAT ID, and other details necessary for issuing an invoice)
• Order/registration details (selected service or ticket type, date, payment status, participation variant)
• Content of communication and requests related to participation

B) Data for marketing communications (if you provide consent)

• Email (or phone number, if provided and marketing is also conducted via this channel)
• Records of granting and withdrawing consent (e.g., date and time, method of granting, form identifier, possibly IP address) to be able to demonstrate consent

C) Technical data on website usage

• IP address, device/browser data, and operational logs necessary for the operation, security, and protection of the website

(Details on how we use cookies and similar tracking technologies on our website can be found in our separate Cookie Policy.)

3) Purposes of Processing and Legal Bases

3.1 Registration/order and fulfillment provision
Purpose: processing a registration or order, issuing invoices, providing ordered services, organizational communication, customer support.
‍Legal basis: performance of a contract and taking steps prior to entering into a contract.

3.2 Compliance with legal obligations
Purpose: mainly accounting and tax obligations, archiving of documents, and fulfilling other obligations arising from legal regulations.
‍Legal basis: compliance with a legal obligation.

3.3 Legitimate interests of the Controller
Purpose: website and IT security, prevention of misuse, protection of legal claims, and internal record-keeping necessary for operation.
‍Legal basis: legitimate interest of the Controller.

3.4 Marketing communications (newsletters, offers, news)
Purpose: sending marketing communications related to AI Horizons Prague and related activities of the Controller (typically via email).
‍Legal basis: consent of the data subject granted by actively ticking the relevant checkbox. Providing consent is voluntary and failing to provide it is not a condition for registration or completing an order.

4) Retention Period

• We retain data related to registration/orders for the duration of the contractual relationship and subsequently for the time necessary to comply with legal obligations and to protect legal claims.
• We retain data processed on the basis of marketing consent until the consent is withdrawn.
• We retain records of the granting/withdrawal of consent to the necessary extent for a reasonable period to demonstrate compliance.

5) Recipients of Personal Data and Processors

Personal data may be disclosed to authorized employees of the Controller and contractual partners acting as data processors who provide necessary services. These processors include in particular:

• Webflow, Inc. – a web hosting and platform provider. Data from web forms is only technically routed through this processor's infrastructure, and necessary processing of visitors' IP addresses takes place to ensure the operation and security of the website.
• Make (Make B.V.) – an integration platform provider that facilitates the automated transfer of data from web forms to our internal systems.
• ClickDimensions LLC – a provider of a CRM, email marketing, and marketing automation tool used to record and process registrations and orders, as well as data for newsletter distribution and the management of marketing consents.

These processors process personal data exclusively based on the Controller’s instructions and in accordance with the concluded Data Processing Agreements (DPAs).

6) Transfers to Third Countries

Some of our processors (in particular Webflow, Inc. and ClickDimensions LLC) have their registered office or technical infrastructure outside the European Union/EEA, in the United States of America. In such cases, the Controller ensures an adequate level of personal data protection through appropriate safeguards under Article 44 et seq. of the GDPR, primarily through the processors' certification under the EU-US Data Privacy Framework, or by entering into Standard Contractual Clauses (SCCs) approved by the European Commission.

7) Withdrawal of Consent and Opting out of Marketing

You can withdraw your consent to receive marketing communications at any time:

• by unsubscribing via the link in the marketing email, or
• by email to gdpr@seyfor.com.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8) Rights of the Data Subject

You have the right to request access to personal data, its rectification or erasure, restriction of processing, to object to processing based on legitimate interest, and, in cases specified by legal regulations, the right to data portability. If processing is based on consent, you have the right to withdraw your consent at any time.

9) Supervisory Authority

If you believe that the processing of personal data violates legal regulations, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, address: Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz).

10) Automated Decision-Making and Profiling

The Controller does not engage in automated decision-making or profiling that would have legal effects concerning you or similarly significantly affect you.

11) Security

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

‍