PRIVACY POLICY
We guard your personal data very carefully. In order to inform you about the way we handle your data, we have prepared this privacy policy (“Policy”).
We are Beatworx s.r.o., Company ID: 082 62 021, with its registered office at Prokopova 148/15, Žižkov, 130 00 Prague 3, a company entered in the Commercial Register at the Municipal Court in Prague under file no. C 315901 (“we“). We operate the website www.letitroll.eu (“Website”) and we organise various festivals, concerts and other events (“Events”), for which you can buy a ticket via the Website (“Ticket”). We are a controller of your personal data.
Should you have any questions, contact us by e-mail at info@beatworx.cz. We are here for you and will be happy to help you with anything.
This Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council on the General Data Protection Regulation (you may know it as GDPR) and provides information on what personal data we process, why and how we handle it, and how long we will keep it. This applies to those who have bought a Ticket from us, attenders of our Events, as well as other users of the Website.
Do we really need your personal data?
We always try to process your personal data as little as possible. However, sometimes processing is unavoidable, for example if you wish to purchase a Ticket or attend an Event, we need your personal data to enable you to come. However, we can assure you that we will not process your personal data using automated individual processing that would have legal effects on you as a data subject or affect you in a similarly significant way.
Who do we collect your personal data from?
If you are buying a Ticket for yourself, we will get the details directly from you. However, if you are buying a Ticket for someone else, you can give us their personal details. In this case, you are responsible for ensuring that you can pass this information to us and you have all the necessary permissions to do so.
How do we process your personal data?
We process your personal data in various ways depending on the relationship between us. It depends on whether you have purchased a Ticket from us, are attending our Event or are just browsing our Website without us having any relationship with each other:
A) If you have purchased a Ticket from us on the Website, we process the following personal data about you:
Identification data. These are used to help us identify you when you enter into a contract between us. These include, for example, the name, surname, address.
Contact details. We use these to contact you if we need to. These include the phone number and email address.
Billing and bank details. We process these in connection with the identification and execution of payments. This includes, for example, information appearing on invoices, bank details and information about payments received or sent.
Information contained in a contract. These are details of the Ticket and the Event for which you have purchased the Ticket and other details relating to the contract between us.
Information from our communication. In this case, this mainly includes information in emails, records of telephone calls or information provided in contact forms, the content of our communications and information about contracts concluded via the Website.
We process this data for the following purposes and for the following period of time:
What is the legal basis for processing under the GDPR?
Performance of contractual obligations or obligations within pre-contract negotiations (Article 6(1)(b) of GDPR).
Why do we process your data?
To supply you with a Ticket and subsequently allow you to enter the Event.
How long will we process them?
For the duration of the contract or until the termination of all rights and obligations under the contract.
What specific data do we process for this purpose?
Identification data
Contact details
Billing and bank details
Information contained in the contract
Information from our communication
What is the legal basis for processing under the GDPR?
Compliance with legal obligations imposed on us by legal regulations (Article 6(1)(c) of GDPR).
Why do we process your data?
To comply with any legal obligations that apply to us.
How long will we process them?
For the period of time specified in the specific legislation under which we perform our obligations.
For example, we retain personal data relating to tax matters for 10 years from the end of the relevant tax period.
What specific data do we process for this purpose?
Identification data
Contact details
Billing and bank details
Information contained in the contract
What is the legal basis for processing under the GDPR?
It is in our legitimate interest (Article 6(1)(f) of GDPR).
Why do we process your data & how long & what specific data?
a) To protect and enforce our claims. In this case we will process them for up to 15 years. This corresponds to the longest possible limitation period provided for by law. Specific data we process for this purpose are:
Identification data
Contact details
Billing and bank details
Information contained in the contract
Information from our communication
b) To help us improve our services and to conduct surveys of your satisfaction with our services and Events. In this case we will process them for 2 years after your purchase. Specific data we process for this purpose are:
Contact details
Information contained in the contract
Information from our communication
c) To send you newsletters. In this case we will process them for a period of 3 years from the conclusion of the last contract between us, or until you object to this processing, e.g. by unsubscribing from our newsletters. Specific data we process for this purpose are:
Contact details
B) If you attend our Event and we enter into a contract with you to attend the Event (and someone else may have purchased the Ticket for you), we process the following personal data about you:
Identification data. These are used to help us identify you when you enter the Event. These include data provided to us by you or the person that purchased the Ticket for you, in particular, the name, surname and other information stated on the Ticket.
Information concerning the Event. These include details of the Event you are attending, for example the date or venue.
Information from our communication. If we have any communication with each other.
Your appearance. We take photos and videos at Events, so your appearance can be captured in the photos and videos.
We process this data for the following purposes and for the following period of time:
What is the legal basis for processing under the GDPR?
Performance of contractual obligations or obligations within pre-contract negotiations (Article 6(1)(b) of GDPR).
.
Why do we process your data?
To enable you to attend the Event.
How long will we process them?
For the duration of the contract or until the termination of all rights and obligations under the contract.
What specific data do we process for this purpose?
Identification data
Information concerning the Event
Information from our communication
What is the legal basis for processing under the GDPR?
Compliance with legal obligations imposed on us by legal regulations (Article 6(1)(c) of GDPR.
Why do we process your data?
To comply with any legal obligations that apply to us.
How long will we process them?
For the period of time specified in the specific legislation under which we perform our obligations.
What specific data do we process for this purpose?
Identification data
Information concerning the Event
Information from our communication
What is the legal basis for processing under the GDPR?
It is in our legitimate interest (Article 6(1)(f) of GDPR).
Why do we process your data & how long & what specific data?
a) To protect and enforce our claims. In this case we will process them for up to 15 years. This corresponds to the longest possible limitation period provided for by law. Specific data we process for this purpose are:
Identification data
Information contained in the contract
Information from our communication
b) To help us improve our services and to conduct surveys of your satisfaction with our services and Events. In this case we will process them for 1 year after your purchase Specific data we process for this purpose are:
Contact details
Information contained in the contract
Information from our communication
What is the legal basis for processing under the GDPR?
Article 6(1)(a) of GDPR
and Section 84 of Act No. 89/2012 Sb., the Civil Code, as amended
Why do we process your data?
To be allowed to take photos and videos at the Event
How long will we process them?
For a period of 3 years after the recording (photo or video) was made. After this period, we will not delete photos and videos that have already been published, but we will not publish them, promote them again, etc.
Your consent to the processing of your personal data can be withdrawn at any time, for example by writing to us by email. If you do not want us to process your photos or videos further, let us know and we will remove them wherever we can reasonably do so and unless we consider that we have a legitimate interest in their continued use.
If you do not wish to be audio-visually recorded at the Event, please tell the photographer or videographer when they are recording. In this case, you will not be captured on the recording.
What specific data do we process for this purpose?
Your appearance.
C) If you browse our Website or make a purchase through it, we process the following personal data about you:
Contact details. In order to send you our newsletters, if you subscribe to them, we need your e-mail address.
Cookies. We use cookies for the operation and functioning of the Website.
We process this data for the following purposes and for the following period of time:
What is the legal basis for processing under the GDPR?
We process your data on the basis of your consent (Article 6(1)(a) of GDPR).
Why do we process your data?
To be allowed to send you our newsletters if you subscribe to them.
How long will we process them?
For a period of 3 years from the date of consent, or until you object to this processing, e.g. by unsubscribing from our newsletters.
What specific data do we process for this purpose?
Contact details
What is the legal basis for processing under the GDPR?
More information can be found in the cookies section below.
Why do we process your data?
To keep track of how you use our Website, where you come to it from and which of our products you are most interested in.
How long will we process them? What specific data do we process for this purpose?
For more information on how we use cookies, please see the cookies section below.
What about cookies?
We and our partners use cookies for the proper functioning of the Website. We divide cookies into essential, functional, analytics and marketing cookies.
Essential cookies are required for the Website to run properly. We do not require your consent to use these cookies. It is in our legitimate interest to keep the Website running properly. However, you can refuse their use by clicking on the cookie icon in the bottom left corner of the Website. However, if you reject these cookies, the Website may not display correctly and your browsing experience may not be the same as you are used to.
Analytics cookies are used to compile statistics and reports. We use them to track traffic to the Website and where you came to the Website from. We need your consent to use them. Again, you can refuse them at any time by clicking on the cookie icon in the bottom left corner of the Website.
Marketing cookies enable us and our partners to, for example, offer Tickets to our Events through targeted advertising. However, we need your consent to do this. You can refuse these cookies by clicking on the cookie icon in the bottom left corner of the Website.
You can find out what cookies we currently use by clicking on the cookie icon in the bottom left corner of the Website.
Who do we transfer your personal data to?
We may transfer your data to other entities, mainly to ensure that we can operate effectively.
Our service providers become processors of your personal data. However, they are only entitled to process your personal data to the extent that we agree with them.
Specifically, we transfer your personal data to the following entities:
Google Ireland Ltd, which is the operator of Google Analytics and Google Ads marketing tools. For information on how Google processes your personal data, click here.
Meta Platforms Inc., which, for example, operates the Facebook Pixel marketing tool and other analytics tools. For information on how Meta Platforms processes your personal data, click here.
Easol Trading Limited, which provides us with a solution for selling Tickets. It is a UK based company, but we have a contractual clause with them that guarantees the same level of data protection as you have in the EU.
Stripe Inc., which provides us with a payment gateway solution. However, we do not receive any information about your payment card from the payment gateway, only whether you have made the payment.
NFCtron, which provides ticket check-in at the venue and cashless if it is used at the event.
Solvica for the purpose of processing and analysing visitor data.
MailerLite, which provides newsletter distribution software.
In the case of Let It Roll Winter, we may pass on the customer's e-mail address and name to the Ticketmaster ticketing company and Ticketportal, which handles ticket sales for the event (in case a Combo ticket is issued).
In exceptional cases, we may also transfer your personal data to public authorities if it is in our interest or if they ask us to do so.
What rights do you have in relation to the processing of personal data?
You have the right to object if we process your personal data on the basis of our legitimate interest. This objection may be sent to our contact address or by e-mail. We will then evaluate it within one month of receipt at the latest.
You also have the following rights in relation to the processing of personal data:
You have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you have the right to access that personal data and to be told what personal data it is.
You may ask us to correct incorrect data or complete incomplete data.
Under certain conditions, we are also obliged to delete your personal data or restrict its processing if you ask us to do so. Under certain conditions, you also have the right to transfer your personal data to another controller.
If you suspect that your personal data is being unlawfully processed, you may file a complaint with the Personal Data Protection Office www.uoou.cz, located at Pplk. Sochora 27, 170 00 Prague 7.
This Policy shall be effective as of May 24, 2024.