Effective date: 15.12.2025
Website: eco-resilience.cz
Organizer / Trader: (David) Paul Chaney
Registered office: Prague - Malá Strana, Petřínská 574/10, 15000
IČO: 02812134
Registered in: Živnostenský list
Contact email: info@eco-resilience.cz

​

1) What personal data we collect
 

We may collect and process the following categories of personal data:
 

A) Account data

• Name, email, phone (optional), password (stored in hashed form), account settings.
   

B) Booking and ticketing data

• Event(s) booked, ticket type/quantity, attendee details (if you provide them), booking history.
   

• Billing details required for invoices/receipts (e.g., address, company name, VAT ID if applicable).
   

C) Payment data

• Payments are handled by [payment provider]. We typically receive confirmation (status, amount, transaction reference) but do not store full card details.
   

D) Communications

• Messages you send us, customer support correspondence, and operational emails (booking confirmations, event updates).
   

E) Marketing / newsletter data

• Email address and subscription preferences; proof of consent (time/source), and unsubscribes.
   

F) Technical data

• We process limited technical data (e.g., IP address and server logs) and use only strictly necessary cookies to provide core website functions (account login, security, booking flow). We do not use analytics or advertising cookies.

 

2) Why we process your data (purposes) and legal bases

​

We process personal data only when we have a valid legal basis under GDPR Article 6. GDPR+1

 

3) Who we share data with (recipients / processors)

We may share your data with trusted service providers (processors) only as needed, such as:
 

• Hosting / IT provider: Wix

• Ticketing / CRM tools: Wix

• Payment processor: Stripe

• Email/newsletter provider: Wix

• Analytics provider: Google

• Public authorities: when required by law
   

All processors are bound by contractual obligations to protect personal data.

 

4) International transfers (outside the EEA)

​

If any of the providers above process data outside the EEA (e.g., US-based tools), we ensure appropriate safeguards, such as an adequacy decision where available, or Standard Contractual Clauses (SCCs) and additional measures where required.

​

5) How long we keep data (retention)

​

We keep personal data only as long as necessary:

• Account data: while your account is active; if you delete it, we’ll delete/anonymize where possible, but may retain limited data where needed for legal claims or statutory duties.

• Bookings and invoices: for the period required by tax/accounting laws.

• Newsletter consent records: while you’re subscribed and for a reasonable period after unsubscribing to demonstrate compliance.

• Security logs: typically short-term, unless needed for incident investigation.
   

6) Your rights (GDPR)
 

Subject to conditions and exceptions under GDPR, you have the right to:

• access your data,

• rectify inaccurate data,

• erase data (“right to be forgotten”),

• restrict processing,

• data portability (where applicable),

• object to processing based on legitimate interests,

• withdraw consent at any time (for consent-based processing, e.g., newsletter),

• lodge a complaint with a supervisory authority.
   

Czech supervisory authority (UOOU):

You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů). 

​

7) How to exercise your rights

​

Email us at privacy@eco-resilience.cz from the address used for your account, include your request and booking reference. We may need to verify your identity.

​

8) Security

​

We use appropriate technical and organizational measures to protect personal data. No method of transmission/storage is 100% secure, but we take reasonable steps to protect your data.

​

9) Children

​

Our Services are not intended for people under 18 without parental involvement. If you believe a child provided us data, contact us and we will take appropriate steps.

​

10) Changes to this Privacy Policy

​

We may update this policy from time to time. The effective date at the top indicates when it applies.