Privacy Policy for the Mobile Validation App

This Privacy Policy outlines how your personal data is processed and protected in connection with the use of the mobile App for validating tickets or other identification cards (hereinafter referred to as “Identifiers”). Please read this policy carefully to understand how we handle your personal data and how we protect your privacy.

1. Identification of the Data Controller and Processor

The data controller of your personal data is the issuer of your Identifier. The controller collects, stores, and decides on the purposes for processing the personal data of the holders of the Identifiers.

The data processor is the provider of the mobile validation app, which is Absolook s.r.o., Company ID: 24708259, with its registered office at Petrská 1426/1, 110 00 Prague 1. The processor processes personal data solely based on the instructions of the controller, and for the purpose of verifying the validity of the Identifier.

2. Scope of Personal Data Processing

The App may process the following types of personal data:

  • Identification data: name, surname, email address, Identifier number, and potentially other data provided to the controller, such as a photo of the holder, company name, address, or date of birth.
  • App usage data: information about the validation of the Identifier, the date and time of access, and transaction data related to the validation of the Identifier.

3. Purpose of Personal Data Processing

The purpose of processing personal data is determined by the controller. The data may be processed for the following purposes:

  • Validation of the Identifier: verification of the authenticity of the tickets you have purchased.
  • Ensuring security: verification of access rights to secure areas and rooms, prevention of fraudulent use of the Identifier, and protection against misuse.
  • Entitlement to discounts: verification of entitlement to receive discounts or other benefits.
  • Legal obligations: storing records to comply with legal and regulatory obligations.

4. Legal Basis for Processing Personal Data

Your personal data is processed based on:

  • Performance of a contract: processing is necessary for the performance of the contract between you and the controller, i.e., to provide the ticket validation service.
  • Legitimate interest: ensuring the security or availability of the services provided to you by the controller (prevention of fraud, verification of the authenticity of the Identifier and its holder).

5. How Personal Data is Stored and Secured

Your data is stored on secure servers and is protected against unauthorized access, misuse, loss, or disclosure. We use appropriate technical and organizational measures to keep your data safe (encryption, access restricted to designated users, logging, auditing).

6. Who Has Access to Your Data?

Your personal data may be disclosed to the following parties:

  • Service providers: those who assist us in operating the App (e.g., cloud service providers).
  • Public authorities: if required by law or if necessary to protect our rights or the rights of third parties.
  • Controller’s partners: for the purpose of ensuring the functionality of your Identifier. In such cases, it is the controller’s responsibility to inform you about their other partners.

7. Data Retention Period

We retain your personal data only for as long as necessary to achieve the purposes mentioned above or for the period required by applicable laws. After this period, your data will be securely deleted or anonymized.

8. Your Rights

In accordance with applicable laws, you have the right to:

  • Request access to your personal data.
  • Request the correction of inaccurate or incomplete data.
  • Request the deletion of personal data if it is no longer necessary for the purposes for which it was collected.
  • Object to the processing or request the restriction of processing.
  • Request the transfer of data to another controller.
  • If you believe that your data protection rights have been violated, you have the right to file a complaint with a supervisory authority.

9. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be published in the App, and in the case of significant changes, we will notify you via email or through a notification in the App.

10. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us at jana.spickova@absolook.cz or by writing to Absolook s.r.o., Šrobárova 40/2002, Prague 10 – Vinohrady, 101 00.

This Privacy Policy is effective as of January 1, 2024.