Personal Data Processing and Protection Policy

Effective from: 9 August 2025

1. Introduction

This document sets out the principles for processing and protecting the personal data of visitors and customers of the Signal Space gallery in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable laws of the Czech Republic.

The data controller is:

SIGNAL PLAYGROUND s.r.o., Company ID: 080 81 786
Registered office: Varšavská 516/19, 120 00 Prague 2
E-mail: info@signalspace.com

2. Scope of Processed Data

We only process personal data that you provide to us, or that we obtain when you use our services and websites:

• Ticket sales: first name, surname, e-mail address, telephone number
  
  
• Newsletter: e-mail address
  
  
• Website usage: IP address, cookies, information about website behavior (e.g. clicks, visited pages)
  
  

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

• sale and delivery of tickets,
  
  
• sending newsletters and event information (based on consent),
  
  
• marketing and remarketing, including displaying targeted advertising,
  
  
• website traffic analysis and service improvement,
  
  
• compliance with legal obligations (e.g. bookkeeping).
  
  

4. Data Retention Periods

• Accounting records: 10 years
  
  
• Ticketing data: 3 years from the date of visit
  
  
• Newsletter: until withdrawal of consent + 3 years archiving of the opt-out record
  
  
• Cookies: analytical max. 1 year, marketing max. 90 days
  
  

5. Recipients of Personal Data

We share personal data only with trusted partners who comply with GDPR requirements:

• Webflow, Inc., USA – website platform provider
  
  
• PLG Czech Republic, s.r.o., Company ID: 01901613, Mánesova 2, 120 00 Prague 2 – ticketing system provider
  
  
• Ecomail.cz, s.r.o., Company ID: 027 62 943, Na Zderaze 1275/15, 120 00 Prague 2 – e-mailing service provider
  
  
• Google Ireland Limited, Ireland – analytics and advertising tools provider
  
  
• Meta Platforms Ireland Limited, Ireland – advertising and marketing tools provider
  
  
• TikTok Information Technologies UK Limited, United Kingdom – advertising and marketing tools provider (TikTok Ads)
  
  
• Microsoft Ireland Operations Limited, Ireland – advertising and marketing tools provider (Bing Ads / Microsoft Advertising)
  
  
• Seznam.cz, a.s., Company ID: 25680050, Prague, Czech Republic – advertising and marketing tools provider (Sklik)
  
  
• hosting and IT service providers – according to current contractual relationships
  
  

6. Transfers to Third Countries

Some of the listed partners may process personal data outside the EU, particularly in the USA. These transfers take place on the basis of the EU Standard Contractual Clauses and with the use of appropriate security measures.

7. Cookies and Analytical Tools

We use cookies on our websites for:

1. Strictly necessary cookies – essential for basic website functions (e.g. login, shopping cart, security). Cannot be disabled.
   
   
2. Performance cookies – collect anonymous data on how visitors use the website (e.g. Google Analytics). Improve the site but do not track specific users.
   
   
3. Functional cookies – store user settings and preferences (e.g. language, font size). Provide a better user experience.
   
   
4. Advertising/targeting cookies – track user behavior for targeted advertising (e.g. remarketing). Often shared with third parties.
   
   
5. Social media cookies – allow content sharing on social networks, or track users through these platforms.
   
   

Cookie settings can be changed at any time in the browser settings or via the cookie banner on the website.

8. Your Rights

As a data subject, you have the right to:

• access your personal data,
  
  
• rectify inaccurate data,
  
  
• erase personal data,
  
  
• restrict processing,
  
  
• data portability,
  
  
• object to the processing of personal data for marketing purposes,
  
  
• withdraw consent at any time.
  
  

9. Exercising Your Rights

You can exercise your rights by e-mail at info@signalspace.com or in writing at the controller’s registered office.

We respond to requests within 1 month of receipt. In complex cases, the deadline may be extended by another 2 months – you will be informed of the extension.

To process your request, we may ask you to verify your identity.
In justified cases, a reasonable administrative fee may be charged for handling repeated or unfounded requests.

10. Personal Data Security

We protect personal data through technical and organizational measures that minimize the risk of loss, misuse, or unauthorized access.

11. Complaints

If you believe that we process your personal data unlawfully, you can contact:

Office for Personal Data Protection
Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice
www.uoou.cz

12. Final Provisions

These principles may only be amended in writing. The current version is always published on the Signal Space gallery website.

‍

For any questions, you can contact us at info@signalspace.com.