top of page

Privacy Policy

The controller of personal data is the Český svaz surfingu, zs., with registered office at V Luhu 754/18, 140 00 Prague 4, IČ 092 26 621, registered in the federal register under sp. stamp L 73519 at the Municipal Court in Prague (hereinafter referred to as "ČSS"). 

​

This information is valid as of August 1, 2022.

​

WHAT DATA WE PROCESS AND FOR WHAT PURPOSE

We process your personal data so that we can ensure the function of the sports association as best as we can. For this purpose, we process:

  • the name and address of permanent residence that we require when registering for races;

  • social security number and date of activity required by Act No. 115/2001 Coll., on the support of sports, for your registration as an athlete in the sports register;

  • e-mail and telephone number through which we will communicate with you;

  • payment information if you participate in one of our events

​

The sports register is not public. Only data on the number of registered athletes are publicly accessible. 

​

If you visit our website, we process data from cookies and other tracking technologies in order to ensure their functionality and improve our activity using third-party analytical tools, which you will find below. Here we rely on our legitimate interest to spread sports awareness.

​

HOW WE WORK WITH DATA

We carry out the processing manually and automatically using software that helps us in the performance of our activities and without which we would practically not be able to implement the CSSS. We do not perform automated individual decision-making or profiling.

​

TO WHOM CAN WE PROVIDE DATA

To ensure our initiative, we use the tools of the following processors:​

  • Google Ireland Ltd. (Google Analytics service), with registered office at Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, for the purpose of web analytics.

  • Facebook Ireland Ltd. (Facebook pixel service), 4 Grand canal Square, Grand Canal Harbour, D2 Dublin, Ireland, to increase conversions.

  • The National Sports Agency, an organizational component of the state, with headquarters at nábřeží Edvarda Beneš 128/4, Malá Strana, 11800 Prague 011 for the purpose of registering athletes in the Sports Register

  • LiveHeats Pty Ltd, ABN 73612699564, for the purpose of administering individual races.

​

In order to ensure the proper organization of races and other events, we may also provide your data to the following entities:

  • Prague Surf Club, zs., with registered office at U Nikolajky 1298/37, 150 00 Prague 5, IČ 065 06 801, for the purpose of organizing the Caparica Czech Surf Open race.

  • Bali Cliff Surf Club, zs., with registered office at Pod kopcem 388/12a, 147 00 Prague 4, IČ 118 26 878, for the purpose of organizing the Bali Big Wejf race.

  • CZECH SURF s.r.o., with registered office at Buchlovská 9, 987 06 Velehrad, ID 030 95 444, for the purpose of organizing the SunRICE & CURRY Czech Cup race.

  • HIGH5, zs., with registered office at Tovární 596, Horní Staré město 541 02 Trutnov, IČ 226 09 563, for the purpose of organizing the Quiksilver & Roxy Czech and Slovak Surfing Championship.

  • International Surfing Association, with headquarters at 5726 La Jolla Blvd, California 92037, USA (hereafter referred to as ISA) for the purpose of registering competitors in international competitions.

  • Czech Federation Stand Up Paddle, association, with registered office at Pod kaštany 236/2, 160 00 Dejvice Prague 6, IČ 016 33 449, for the purpose of registering competitors in international races organized by ISA.

 

WHERE DATA MAY BE PROCESSED

We use secure electronic repositories located in the European Union. In accordance with legal regulations, we can transfer data to countries outside the European Union or the European Economic Area, but only if adequate security and sufficient guarantees are provided.

For the transfer, we use guarantees in the form of a safe country according to the decision of the European Commission on adequate protection, or standard clauses on the protection of personal data adopted or approved by the European Commission.

​

HOW LONG DO WE KEEP THE DATA WITH US?

We process personal data only for the time necessary to ensure the proper operation of the ČSS, or until you unsubscribe from newsletters. Regardless of the standard length of personal data retention period, you can ask us to delete your personal data.

​

WHAT RIGHTS YOU HAVE

In connection with the processing of personal data, you can contact us via e-mail ceskysurfing@gmail.com and request:

  • The right of access, which allows you to request a copy of the personal data we process about you and to request more detailed information about the processing.

  • The right to rectification if the personal data we hold about you is not up to date.

  • The right to erasure if the purpose of the processing has ceased or the processing is unauthorized.

  • The right to restrict the processing of personal data that you think is inaccurate or not necessary.

  • The right to object to processing that we carry out on the basis of legitimate interest, including direct marketing. If we do not have a sufficiently convincing legitimate reason for processing, we do not process personal data for the given purpose.

  • The right to file a complaint with the Office for the Protection of Personal Data with headquarters in Plk. Sochora 27, 170 00 Prague 7 – Holešovice, www.uoou.cz.

If you receive e-mails from us, you have the option to unsubscribe from them via the link provided in such communication or by direct request sent to our e-mail.

You can also exercise the above rights by sending a request to the address V Luhu 754/18, 140 00 Prague 4, Czech Republic.

If the requests related to the exercise of your rights are manifestly unreasonable or unreasonable (especially if they are repeated), we may refuse your request.

​

HOW TO EXERCISE RIGHTS

Only you or your authorized representative can submit the application. If we are unsure of the applicant's identity, we may ask you for additional information to verify your identity. 

Our obligation to comply with the request in some cases depends on the purpose for which we process your data. Some rights can only be exercised for certain processing purposes, or there are exceptions. If we do not comply with your request, we will always justify our decision.

​

WHAT SECURITY MEASURES WE TAKE

In order to protect personal data, we have implemented the following measures:

  • Access control, password security policy

  • User activity logging 

  • Security of devices, systems, network, websites

  • SW update, patch management

  • Rules for personal data processing and disposal

bottom of page