Privacy policy

We are South Moravian Agency for Public Innovation, association, No.: 65338090, headquartered in Žerotínovo náměstí 449/3, Veveří, 602 00 Brno, represented by Ing. Patrik Reichl, MBA, Director, and we are the data controller of your personal data by the Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons about the processing of personal data and the free movement of such data (hereinafter: "GDPR"). We are an innovation agency and as part of our activities we collaborate with our clients and partners and provide consultancy services during these activities we also process personal data. You can find out more about how we process personal data in this document.   

GENERAL RULES FOR PROCESSING PERSONAL DATA 

What is personal data?

Personal data is any information that can directly or indirectly identify you. It typically includes your name, surname, date of birth, residence, account number, telephone or email contact, photographs, as well as your IP address and other data.

Who is the data controller?

A data controller is any entity that processes personal data in the course of its activities. In this context, we are the data controller of your personal data. We can process your personal data only if there is a legal basis for processing, and we must comply with other legal obligations, which we fulfill, among other things, through this informational document. 

What is the legal basis of personal data processing?  

If you are our partner or client, the processing of your personal data is necessary for the performance of the contract - we need your personal data to fulfill the obligations of our contractual relationship. After fulfilling contractual obligations, we may further process your personal data based on legal grounds  (e.g. accounting, tax, and subsidy obligations) or our legitimate interests (e.g. defending our legal claims or indirect marketing and presentation of our activities). We may also process your personal data based on your consent - typically for sending newsletters and processing personal data for direct marketing purposes. Your consent is voluntary and you can be withdrawn at any time.  

When processing your personal data, we ensure its security, we process only the necessary data required for specific purposes and we strive to regularly check their accuracy and relevance. 

Who do we transfer your personal data to? 

In the performance of our activities, we primarily use: 

• Google Workspace from Google, where we use cloud storage that may store your personal data. Your personal data may be transferred to the USA, where some cloud storage servers are located. You can review Google's privacy policy at this link: https://policies.google.com/privacy;
• Notion by Notion Labs, Inc., 2300 Harrison Street San Francisco, CA 94110 United States, where we store meeting notes and contact details. Your personal data may be transferred to the USA. You can review Notion's privacy policy at this link: https://www.notion.so/notion/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091; 
• MailChimp from The Rocket Science Group LLC,675 Ponce de Leon Ave NE, Suite 5000, Atlanta, for sending newsletters and commercial communications. Your personal data may be transferred to the USA. You can review MailChimp's privacy policy at this link https://mailchimp.com/help/data-privacy/;
• Slack from Slack Technologies, LLC, Salesforce Tower 60 R801, North Dock Dublin Ireland, for internal communications. Your personal data may be transferred to the USA. You can review it at this link https://slack.com/trust/privacy/privacy-policy;
• Asana from Asana, Inc. 1550 BRYANT STREET, SUITE 800, SAN FRANCISCO CALIFORNIA 94103. Your personal data may be transferred to the USA. You can review Asana's privacy policy at this link: https://asana.com/terms 
• Fusio from ANTS spol. s r.o., IČO:26902711,  Řípská 1153/20a, 627 00 Brno, which we use as an agency information system mainly for orders and contracts, address book and internal employee records;
• external accounting services from SLUTO s.r.o., IČO: 25595318, headquartered in Týnská 1053/21, 110 00 Praha – Staré Město;
• Other external service providers, such as advertising agencies.

Your personal data remains within the European Union, except for tools hosted in the USA. In such cases, we ensure compliance with GDPR by relying on the Data Privacy Framework  (more information at this link:  https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=

How long do we process your personal data? 

In the case of processing personal data for the performance of contractual obligations, we always process your personaldata for at least the duration required to fulfill the contract and subsequently for the time required by law to fulfill our legal obligations (e.g. the accounting regulations) or based on our legitimate interests for the period of limitation periods to defend our legal obligations, resolving disputes and legally enforcing our agreements or for the duration of the sustainability of the project, if the activities are part of a project funded by a subsidy. If the processing of personal data is based only on your consent, we retain them for 5 years or until the consent is withdrawn. We also process personal data to send indirect marketing communications based on our legitimate interest for 5 years (since the last interaction). We process photographs, video recordings, and recordings from workshops based on our legitimate interest, generally for 5 years; published recordings then indefinitely.

PROCESSING PERSONAL DATA ON THE WEBSITE: 

What are cookies? 

Cookies are text files stored on your device (e.g. PC, phone, tablet) when you browse a website and are managed by your internet browser. Cookies allow your device to recognize and adapt the website accordingly, for example, to display certain content or analyze the behavior of website visitors. 
When using cookies, your personal data may be processed - particularly your IP address and related user behavior, login data, preferred settings such as language selection, etc. 

What types of cookies do we use? 

Functional (technical) - these cookies are necessary to ensure the functionality of the website and also to record if you have not consented to the processing of optional cookies. We do not need your consent to use these cookies.

Analytical - cookies help us to understand visitor behavior on the website and generate statistics and reports on website traffic. This allows us to further improve the website and tailor it to visitor's needs.

Marketing (advertising) - similar to analytical cookies, these are used to track visitor behavior and preferences, which then helps us to deliver relevant advertising.

At the end of this document, you will find a table of cookies and more information about them.

On what basis do we use cookies?

We may use technical (functional) cookies based on the legal requirements or our legitimate interest. Without these cookies, we would not be able to display the website to you correctly and securely.
We may process analytical and marketing cookies on the basis of your consent. It is entirely up to you whether you choose to give us your consent. You can withdraw your consent at any time. 

How can you prevent the use of cookies? 

For the optional cookies - preferences, statistics (analytics), and marketing - you can refuse to give your consent by using the manage consent option. 
You can also adjust cookie settings via your browser or browse the website in anonymous mode. The settings must be configured separately for each of your devices. 

Who processes cookies for us? 

For analytical purposes, we use Google Analytics services from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), which uses cookies by its terms and conditions available at this link: https://policies.google.com/technologies/cookies?hl=cs.

Please note that this service may involve transferring and storing your data in the USA, where some of Google's cloud storage servers are located. Security is ensured, for example, through standard contractual clauses, Google's security policy, and the fact that both Google Analytics and Google have joined the Data Privacy Framework.  You can read Google's data processing policy at this link: https://policies.google.com/privacy.

Please note that if you give us your consent to the use of optional cookies, a third party may also handle them.

What other personal data do we process through the website? 

Newsletter subscription: 

You can subscribe to our newsletter on our website. To send you newsletters, we use your e-mail address and, where applicable, your name and the municipality you represent or your position to personalize the communication. If you are our client, we may send you newsletters as part of indirect marketing based on our legitimate interest. If you are not yet a client, we may only send you a newsletter based on your explicit consent. You have the right to opt out of receiving further commercial communications at any time via a link in your inbox.

Contact form: 

Our website may include a contact form through which you can reach us. If you contact us via the contact form, we will generally process your personal data in the following scope: name, surname, e-mail, telephone number the municipality or company, your position, and, if applicable, any additional data included in your message. We process this personal data to fulfill our contractual obligations - handling your questions and responding to your message. If we agree on further cooperation based on your message, we will continue processing your personal data to fulfil further contractual obligations and also based on our legitimate interest - e.g. for defending our legal claims or for indirect marketing communications. If you provide your consent, we may process your personal data for direct marketing. Consent is voluntary and you can withdraw it at any time.

 Event registration: 

We also organize educational events you can register for. In this case, we process your personal data generally in the scope of: name, surname, e-mail, telephone, address, municipality or company you represent, or your position in the company or additional data. We process personal data to fulfill our contractual obligations - ensuring your participation in the event (e.g. confirming your registration or sending you organizational information), fulfilling our obligations related to the use of subsidies and relevant reporting, and based on our legitimate interest - e.g. obtaining feedback and evaluating the success of the organized event. If you give us your consent, we may further process personal data for direct marketing purposes. We may also process personal data based on your consent if you enter a competition at the event. 
Your personal data may be shared with the lecturers or partners and suppliers involved in organizing the event and with grant authorities.
Photographs or video recordings may also be taken at events. We may take and publish reportage-style photographs and videos based on our legitimate interest. If you give us your consent, we may also take and publish photographs or videos for marketing and promotional purposes. Consent is voluntary and you may withdraw it at any time. We usually publish the photographs and videos on our website, social media (typically Facebook, Instagram, and LinkedIn), and in our other communication channels (e.g. newsletters or other promotional materials). Some of our events may be broadcast via online tools (typically Google Meet) or recorded and made available to attendees or the public. You will be notified in advance if the event is recorded and made public. You always have the opportunity to object when photographs and videos are taken. Please note that in the case of material that has already been published, it may not always be possible to retrospectively remove all recordings, particularly if they have been used in printed materials, shared by third parties, or published on platforms that do not allow content removal.

What are your rights in relation to data protection? 

• You have the right to:

  • Access to personal data: You can ask at any time to confirm whether we do /do not process your personal data and for what purposes, to what extent, to whom it is transferred, how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data, whether automated decision-making (including profiling) does/does not take place. You also have the right to obtain a copy of your personal data, for which we may charge you a reasonable administrative cost. 
  • Rectification: You can request that your personal data be corrected or completed at any time if it is inaccurate or incomplete. 
  • Erasure ("right to be forgotten"): We will delete your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) you withdraw your consent to the processing of your personaldata and there are no other legal grounds for processing it, (iii) you use your right to object and there are no overriding legitimate grounds for the processing, (iv) the processing is unlawful, (v) we are required to do so by law.
  • restriction of data processing: Until we have resolved any disputed issues regarding the processing of your personal data, we may not further process it except to store it or use it with your consent or to establish, exercise or defend legal claims.
  • Object to processing: You can object to the processing of your personal data based on your legitimate interest. We will evaluate your objection and inform you whether we have complied with it and whether we will (not) further process your personal data. Until the objection is resolved, the processing of personal data will be restricted.
  • Data portability: If your personal data is processed by automated means based on your consent or performance of a contract, you have the right to receive it in a structured, commonly used, and machine-readable format, and to request its transfer to another data controller where technically feasible.
  • Lodge a complaint: You can file a complaint with the Office for Personal Data Protection (you can read more at the link: www.uoou.cz).

How can you contact us? 

If you have any questions about the processing of your personal data or if you wish to exercise your rights, please contact us at our email address: info@jinag.eu.

Table of cookies: