Privacy Policy

Effective from 16 September 2026

This policy explains what personal data we process when you visit this website, write to us, or subscribe to our newsletter. We have tried to keep it readable.

Who is the controller

The controller of your personal data is Český kulturní institut v Kodani, z. s. (Czech Culture Institute in Copenhagen), Útulná 504/21, 108 00 Prague 10, Czech Republic, company ID 24653314, registered in the Czech register of associations kept by the City Court in Prague, file L 81622.

Contact address in Copenhagen: C/O Skabelonloftet / CCIC, Refshalevej 167F, 1432 København K, Denmark.
Email: info@ccic.cz

We have not appointed a Data Protection Officer, as we are not required to. Please send anything related to your data to info@ccic.cz.

What we process and why

Contact form

When you write to us through the form on the Contact page, we process your name, email address, topic and the text of your message, so that we can reply.

Legal basis: our legitimate interest in answering an enquiry you send us (Art. 6(1)(f) GDPR). If the enquiry concerns working together or taking part in our programme, it is a step prior to entering a contract (Art. 6(1)(b) GDPR).

How long: while we deal with your enquiry and for 2 years afterwards. If the enquiry turns into a collaboration, for as long as it lasts and then according to accounting and archiving rules.

Newsletter

When you subscribe, we process your email address and a record of when and where you gave consent. To measure how our emails perform, we also process whether you opened an email and which links you clicked.

Legal basis: your consent (Art. 6(1)(a) GDPR).

How long: until you withdraw consent. You can unsubscribe using the link in every email or by writing to info@ccic.cz. We keep the record of consent and its withdrawal for 3 years after you unsubscribe.

Website analytics

With your consent we measure how the site is used: which pages people view, how long they stay, where they came from, what device they use and roughly what location at city level. We use Google Analytics 4 deployed through Google Tag Manager. Google Analytics 4 does not store your IP address.

Legal basis: your consent given in the cookie banner (Art. 6(1)(a) GDPR).

How long: Google Analytics keeps event data for at most 14 months. The cookies themselves expire within 24 months at the latest.

Advertising

We do not run any advertising and there are no advertising tags on the site. If that changes, we will only load advertising tools after you consent in the cookie banner, and we will update this policy beforehand.

Running and securing the site

Our platform provider keeps technical logs including IP addresses so that the site works and can be defended against abuse and attacks. Legal basis: our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR).

Cookies

Cookies are small files stored in your browser. We use two groups.

Necessary cookies keep the site running and remember your choice in the cookie banner. The site would not work without them, so they are always stored.

Analytics cookies belong to Google Analytics 4 and are only stored if you allow them in the cookie banner. These are mainly the _ga and _ga_* cookies, valid for up to 24 months.

You can change your choice at any time through the Cookie settings link in the site footer. You can also delete or block cookies in your browser, though the site may then not work properly.

Who we share data with

We do not sell your data and we do not pass it to anyone who would use it for their own purposes. We do work with suppliers who process data for us.

We may also pass data to our accountant or lawyer where needed, and to public authorities where the law requires it.

Transfers outside the European Union. Google may process some data on servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has recognised an adequate level of protection, and standard contractual clauses approved by the European Commission are also in place. Our other suppliers process data within the European Union.

Your rights

You have the right to:

• Access — ask what data we hold about you and receive a copy.

• Rectification — have inaccurate or incomplete data corrected.

• Erasure — have data deleted where it is no longer needed or you have withdrawn consent.

• Restriction — have us pause processing, for example while you contest the accuracy of the data.

• Portability — receive data we process based on consent or a contract in a machine-readable format, or have it sent elsewhere.

• Object — object to processing based on legitimate interest; we will stop unless we can show compelling grounds to continue.

• Withdraw consent — at any time. This does not affect processing carried out before the withdrawal.

Write to info@ccic.cz to exercise any of these. We respond within one month. We may ask you to verify your identity so that we do not hand your data to someone else.

If you think we are handling your data badly, please tell us first so we can put it right. You can also complain to the supervisory authority:

Úřad pro ochranu osobních údajů (Czech Data Protection Authority)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
uoou.gov.cz · posta@uoou.gov.cz

If you live in Denmark, you may also contact the Danish Datatilsynet (datatilsynet.dk).

Automated decision-making

We do not use automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

Security

Only a limited number of people on our team have access to the data, and only where they need it for their work. The site runs over an encrypted connection (HTTPS) and we have data processing agreements in place with our suppliers.

Changes to this policy

We may update this policy from time to time, for example when we start using a new tool. The current version is always on this page and the effective date is shown under the heading. If a material change concerns processing based on consent, we will ask for your consent again.