Privacy Policy

1.1 Personal data controller

1.1.1
The name of the music school: Art Master
Operator: Art Master Academy s.r.o.
Registered office at: Příčná 147/2, České Budějovice 4, 370 01 České Budějovice, Czech Republic
Company ID number: 075 97 177
VAT number: CZ075 97 177
The company is registered in the Commercial Register kept at the Regional Court in České Budějovice, Section C, Insert 28139
Phone: +420 720 594 735
Email: info@artmaster.com
Contact address: Londýnská 58, 120 00 Praha 2, Czech Republic
(hereinafter referred to as the "controller")

1.2 The controller declares that all personal data processed by the controller is strictly confidential. The controller handles them in accordance with European Union legislation and national Czech legislation applicable to the protection of personal data.

1.3 The controller collects, stores and uses your personal data within the meaning of the law
110/2019 Coll., on the processing of personal data (“Personal Data Processing Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

1.4 The controller also collects this personal data through its Website at www.artmaster.com ("Website").

1.5 This Policy is issued by the controller so that you are sufficiently informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data and what your rights are. This Policy applies to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, a legal obligation, a legitimate interest, or via your consent.

2.1 From the moment you visit the Website, the controller may process your personal data. This includes necessary cookies, and data that the controller uses to provide the smart features of the Website.

2.2 The controller primarily processes the aforementioned data to ensure the functionality of the Website. The IP address and, where applicable, other data on network communication are processed by the controller for the purpose of preventing and resolving incidents that could result in the non-functionality or limitation of the Website or could lead to its misuse (e.g. malware, cyber-attacks, batch downloading of data from services, access from anonymous web browsers, etc.), based on the legitimate interest of the controller.

2.3 Once received, purely statistical data is anonymized, aggregated and used by the controller as a global indicator of Website usage.

2.4 The IP address and the unique identifier are then processed by the controller together with the Website usage data in order to provide you with personalized recommendations on how to use the Website more effectively on repeat visits. However, in this case, the controller will only process it if you have given your voluntary and informed consent in the sense of Article 6(1)(a) GDPR to store cookies on your device or to process the data associated with it.

2.5 In addition, the controller processes your personal data as a visitor if you contact us via the contact form, by email, by phone or via the social networks Facebook, Instagram or Twitter; in the sense of Article 4(1) of the GDPR, this will by default be:

• electronic mail address (e-mail),

• phone number;

• name and surname;

• IP addresses of the devices from which the request was made via the contact form;

• network identifiers assigned by the administrator or by Facebook, Instagram or Twitter;

• your Facebook, Instagram or Twitter usernames,

2.6 This personal data is then processed by the controller on the basis of:

a.   your consent pursuant to Article 6(1)(a) of the GDPR, which in this case means the storage of cookies and the processing of the data thus obtained by linking it to data about your use of the service so that you can be shown personalized recommendations,

b. communication with customer support (before setting up a user account or when logging out of a user account), which is a legitimate interest of the controller and yours within the meaning of Article 6(1)(f) of the GDPR.

2.7 The information about your use of the controller's services as well as the information obtained from cookies, or their usability for the above purposes, is limited to the duration of the contract, i.e. usually for the duration of one visit to the Website, but no longer than 2 years or until the consent is withdrawn in accordance with Article 5 of this Policy.

2.8 By registering your user account and logging in to the service, the controller starts processing your personal data.

2.9 Within the meaning of Article 4(1) of the GDPR, the controller processes the following personal data about you in accordance with the above:

• name and surname;

• electronic mail address (e-mail);

• username;

• residential address;

• phone number;

• IP addresses of the devices from which the service was logged in or, where applicable, from which the request was made via the contact form; and other selected data from the system logs (browser data, browser language, date/time, etc.);

• data about your preferences in the use of the website;

• information about your use of the website and information about where you visited the website, when you visited and left the website, or how many times you have visited the website;

• network identifiers assigned by the controller or by Facebook, Instagram or Twitter, your usernames on these networks and, where applicable, associated emails;

• other billing information (bank account number, ID number and VAT number);

• other information that may lead to your identification (e.g. comments, remarks);

• payment details.

2.10 This personal data is then processed by the controller for the purpose of:

a. the performance of the contract for the supply of digital content and the licensing agreement referred to in Article 6(1)(b) of the GDPR and the General Terms and Conditions of the controller, which means providing and making available online courses, sending notification emails selected by you, storing and analyzing information about the use of the Website and providing personalized recommendations to facilitate your work with the Website based on this data, drawing up and sending tax documents, administering payments, informing you about planned changes to the General Terms and Conditions, dealing with your enquiries via customer support and informing you about changes to the online courses;

b. protecting servers from attacks and user accounts from misuse by third parties or misuse by certain users, informing you about planned downtime and technical maintenance of software and hardware, which is a legitimate interest of the controller and you within the meaning of Article 6(1)(f) GDPR;

c. prevent damage caused by loss, degradation or corruption of data by regularly backing up the Website, in the context of the performance of the contract and the legitimate interest in the proper provision of services;

d. so that the controller can, within the framework of its legitimate interest, inform you of what improvements and innovations it plans to make, so that you always have an up-to-date and accurate overview, within the meaning of recital 47 of the GDPR.

2.11 Other personal data pursuant to this article are processed by the controller for the duration of the digital content and license agreement, i.e. for the duration of the user account. The email address is kept by the controller both for the time necessary to send you newsletters and for legitimate interest, whereby the controller may contact you with an offer of its services for 12 months after the termination of the user account. The controller may retain the personal data collected for a maximum of 15 years after termination in case of any dispute relating to the relationship between the controller and you arising from a digital content agreement, license agreement or other contract. In addition, the controller may retain documents containing your personal data for archiving purposes, in particular tax documents containing your personal data may be retained by the controller for 10 years from the end of the relevant tax year. After this period, the controller will destroy your personal data, unless it is entitled to process these data on the basis of another legal title.

3.1 The controller may also process your personal data if you give your voluntary and informed consent within the meaning of Article 6(1)(a) GDPR. Your use of the website is never conditional on your consent, but your consent may make it easier for the controller to work with the website and may help the controller to improve the services it provides.

3.2 With the exception of the aforementioned consent, the controller will process your e-mail address, telephone number, name and surname and, where applicable, delivery address within the limits of any further consent.

3.3 Consent will most often take the form of a tick-box, which can be found, for example, during registration, in any web survey or questionnaires, or by giving it to the administrator by an active step required in an email.

3.4 You can give your consent to the controller for various purposes, either jointly or individually, e.g. to display any marketing communications from the controller and to send them to your
e-mail address, or to allow the controller to contact you by telephone or e-mail and offer you its services and products, i.e. to send you commercial communications, to inform you about loyalty promotions or events, or to allow your personal data to be subject to sociological research or market research carried out by third parties to improve the controller's services in pseudonymized form.

3.5 The controller may process personal data on the basis of consent for a period of 5 years, unless otherwise specified in the selected consent.

4.1 As a data subject, you have the following rights under the law, which you can exercise at any time. These are:

a. the right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;

b. the right to rectification or erasure of personal data or restriction of processing, whereby you have the right to have personal data that is inaccurate or incorrect rectified. If your personal data is no longer necessary for the purposes for which it was collected or is being processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of personal data, but only to temporarily restrict its processing, you can request the restriction of processing;

c. the right to request an explanation if you suspect that the processing of personal data by the controller is in breach of the law;

d. the right to contact the Office for Personal Data Protection in case of doubts about compliance with the obligations related to the processing of personal data;

e. the right to data portability, i.e. the right to obtain personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format, see Article 20 GDPR for more details;

f. the right to object to the processing of personal data processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the controller. The controller shall terminate the processing without undue delay unless it demonstrates that there is a legitimate interest/reason for the processing which overrides your interests, rights or freedoms;

g. the right to withdraw consent to the processing of personal data at any time if you have given your consent to the controller to process your personal data

5.1  Cookies are small files that are temporarily stored on your computer and help the controller to improve the user experience on the Website. Cookies are used by the controller to personalize Website content and advertisements, to provide social networking features and to analyze traffic. The Controller also shares information about your use of the Website with its social networking, advertising and analytics partners, who may combine it with other information you have provided to them or that they have collected when you use their services.

5.2 By law, the controller can only store cookies on your device that are strictly necessary for the operation of the Website. For all other types of cookies, the controller needs your consent. The controller will be very grateful if you provide this consent to help it improve the Website and services. You can, of course, change or withdraw your consent to the use of cookies on the Website at any time.

5.3  The Website may use the following types of cookies:

a.   Essential cookies: they help make Websites usable by enabling basic functions such as navigating the site and accessing secure areas of the Website. Without these cookies, the Website cannot function properly. This category of cookies cannot be disabled;

b.   Functional cookies: these cookies enable the Website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. These files are only stored and read by the controller with your prior consent;

c.   Performance cookies: these cookies allow us to count visits and measure activity so we can improve the performance of our site. They help us to know which pages are the most and least popular and see how users move around the site. If you do not allow these cookies, we will not be able to monitor its performance. These files are only stored and read by the controller with your prior consent;

d.   Advertising cookies: these cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store personally identifiable information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. These files are only stored and read by the controller with your prior consent.

The Website uses the following types of cookies:

Cookie:    Intercom
Name:     intercom-device
Function:  Used to identify the device interacting with the Messenger in order to improve security.
Expiry:     9 months 

Cookie:    Intercom
Name:     intercom-id
Function:  Allows visitors to see any conversations they've had on Intercom Websites.
Expiry:     9 months

Cookie:    Intercom
Name:     intercom-session
Function:  Identifier for each unique browser session. The user can access their conversations and have data communicated on logged out pages for 1 week, as long as the session isn't intentionally terminated with Intercom('shutdown');, which usually happens on logout.
Expiry:     1 week 

Cookie:    Mixpanel
Name:     mp_*_mixpanel
Function:  Used to identify individual users. This tool is used to measure site performance and usage patterns. Unique strings replace the * in the cookie name.
Expiry:     3 months 

Cookie:    Meta pixel
Name:     _fbp
Function:  Used to store and track visits across Websites.
Expiry:     3 months 

Cookie:    SmartLook
Name:     SL_C_*_SID
Function:  The session ID. Each new session is assigned a session ID.
Expiry:     13 months 

Cookie:    SmartLook
Name:     SL_C_*_KEY
Function:  The project key. Project keys are specific to each project you have in your organization.
Expiry: 13 months 

Cookie:    SmartLook
Name:     SL_C_*_VID
Function:  The visitor ID. Each new visitor is assigned a visitor ID.
Expiry:     13 months 

Cookie:    Google Analytic
Name:     ga*
Function:  Used to maintain the state of the session.
Expiry:     24 months 

Cookie:    Google Analytic
Name:     _ga
Function:  Used to distinguish users.

Expiry:     24 months 

Cookie:    Google Adsense
Name:     gclau
Function:  Used to to store and track conversions.
Expiry:     3 months

5.4  Consent can be expressed by means of a check box contained in the so-called cookie bar. You can subsequently refuse cookies in your browser settings or set to use only some of them.

5.5  You can also refuse cookies in general or set to activate only some cookies (depending on the type of browser) via your internet browser. You can find the cookie settings for the most commonly used browsers at the following links:   

·      Chrome;
·      Firefox;
·      Internet Explorer;
·      Opera;
·      Microsoft Edge.

5.6  If you give your consent, the controller may share information about your use of the Website with its social media, advertising and analytics partners. By giving your consent, you agree to the linking of the following services:

Google
Facebook
Instagram
Twitter

5.7  In the event that you give your consent, in order to display targeted advertising on advertising and social networks on other Websites, the controller transmits data about your behaviour on the Website to these advertising and social networks; however, it does not transmit your identification data to them.

6.1 Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. The personal data the controller collects from you will be usually transferred and stored in a country located in the European Union and/or European Economic Area („EU“), however, please note that since some of our service providers that provide hosting and other infrastructure services are located outside EU, your data may be transferred outside the EU (in particular, in the United States). Where the controller transfers personal data to a recipient outside the EU, it does so in all cases in a secure and lawful manner. In case of transfer in the United States, the controller makes sure that the recipient of personal data in the United States is certified under the so-called Privacy Shield, which is considered to provide an adequate level of protection for your personal data based on the European Commission's adequacy decision (to learn more about the Privacy Shield, please click here). If you would like to find out more about how we process your personal data under the Privacy Shield, or to make a complaint about this processing, please email us at info@artmaster.com.

Sharing of personal data with third persons

The controller may share your personal data to a limited extent with trusted external third-party service providers acting as subcontractors who provide certain services on the controller‘s behalf where necessary for the purposes set out above, i.e. sending mailings and other commercial communication, processing payments etc. The controller only provides these service providers with the personal data they need to provide those services and the controller confirms that these service providers are contractually obligated not to use personal data relating to you for any other purpose.

In addition, the Controller may transfer personal data to supervisory authorities, courts or law firms if necessary to ensure compliance with applicable laws and regulations or to exercise, enforce or defend legal rights, if permitted by law.

7.1 The data subject may obtain further information on the rights and obligations regarding the protection of personal data on the Website www.artmaster.com or by email at info@artmaster.com.

7.2 If you believe that the data controller is not handling the data correctly, you have the right to file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, mailbox ID: qkbaa2n, email: posta@uoou.cz, or take your claims to court.

7.3 This Policy is effective as of 25.5.2023