Privacy Policy

These privacy policies set out how your personal data, which you provide in connection with the use of the website www.fillafoundation.cz (hereinafter the “Website”) and by subscribing to the newsletter, registering for access to the artwork database, purchasing goods and services from us, whether via the Website or in another manner, your interaction with us (e.g. through personal meetings with representatives of the foundation) and further by your participation in exhibitions, projects or other activities organized by Filla Foundation, endowment fund, are used and protected.

The controller of personal data is Filla foundation, endowment fund, ID No.: 08237034, with registered office at Západní 256/33, Střešovice, 162 00 Prague 6; registered with the Municipal Court in Prague, file no. N 1717/MSPH (hereinafter the “Controller” or “Filla Foundation”).

All your personal data are used solely in accordance with this privacy policy. The Controller is entitled to update this policy from time to time by publishing a new version on the Website. You will be informed of substantial changes by email if we have your email address available.

All your personal data are processed on the basis of a relevant legal title under Article 6 of the GDPR Regulation.

By providing us with your personal data, you consent to the processing and administration of the provided data for the purposes and under the conditions set out below. All your personal data will be collected, stored and used in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on personal data processing.

What we collect

The Controller may collect and process the following personal data:

• Identification data: name, surname, academic title, date of birth;
• Contact data: address, email, telephone number;
• Payment and transaction data: bank details, payment data, order and payment history;
• Technical data: information about your visits to the Website and about connection sources, IP address, browser type, access time;
• Profile data: history of your participation in foundation projects, feedback, your interests and preferences;
• Marketing data: your settings and wishes regarding marketing communication;
• Image recording: from the camera system in case of events or premises operated by the foundation;
• Records of correspondence: during your communication with Filla Foundation;
• Registration data: username, password (stored in encrypted form), registration date, login history;
• Newsletter data: email address, date of newsletter subscription, content preferences;
• Data on ownership of artworks: information on owned artworks, acquisition history, valuation data (only for registered artwork owners with their explicit consent);
• Keeping records of access of registered users to the artwork database (legitimate interest in ensuring system security and integrity).

For what purpose we process your personal data

Personal data are processed exclusively for the following purposes and on the basis of these legal titles:

• Maintaining records of participants, partners and donors of Filla Foundation (performance of a contract, legitimate interest),
• Fulfilment of legal and contractual obligations (performance of a contract, legal obligation),
• Administration of participation in foundation projects, exhibitions and events (performance of a contract),
• Sending information and invitations to events (if we have consent or legitimate interest) (consent, legitimate interest),
• Improving our services and more effective communication (legitimate interest),
• Protection of legitimate interests (e.g. fraud prevention, protection of persons and property) (legitimate interest),
• Fulfilment of statutory obligations (e.g. accounting and tax obligations) (legal obligation),
• Operation of user accounts and user authentication (performance of a contract),
• Sending newsletters (consent),
• Management of the database of artworks and ownership information (consent, performance of a contract).

Personal data are retained for the period necessary to fulfil the stated purposes, but no longer than 10 years after the termination of the contractual or donation relationship, or for the period required by law.

Processing without consent

We may process your personal data without your consent if:

• it is necessary for providing a service or performing a contract,
• it is required for fulfilling our legal obligations,
• it is within the Controller’s legitimate interest (e.g. direct marketing).

In other cases, we process your data only on the basis of consent, which you may withdraw at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

Technical data and cookies

The Website uses Google Analytics for traffic analysis. The service uses cookies that allow analysis of how the Website is used. Information generated by cookies is processed by Google Inc. in accordance with its privacy policy (www.google.com/intl/cs/privacy/privacy-policy.html). By using the Website, you consent to the use of cookies for these purposes. You may restrict or block cookies in your browser settings.

The Website uses the following types of cookies:

• Necessary cookies – ensure basic website functionality (user login, language settings)
• Analytical cookies – Google Analytics for traffic measurement
• Functional cookies – storing user preferences
• Marketing cookies – only with the user’s consent

Upon your first visit, you will be informed about cookies through a cookie banner and asked for consent (except for necessary cookies). You may change or withdraw your consent at any time. Refusing cookies may result in limited website functionality.

Cookie storage periods:
Necessary cookies: for the duration of the session / max. 12 months
Analytical cookies: 24 months
Functional cookies: 12 months
Marketing cookies: 12 months

Where we store your personal data

Your personal data are stored on secure servers in the Czech Republic. Personal data are not transferred outside the European Union except where an adequate level of protection is guaranteed through an adequacy decision of the European Commission, standard contractual clauses or other appropriate safeguards under Article 46 GDPR.

Exception: Google Analytics may process data outside the EU in accordance with standard contractual clauses approved by the European Commission.

Security

The Controller has adopted appropriate technical and organizational measures to secure your personal data against loss, misuse, unauthorized access or disclosure. These measures include, for example, encryption of user passwords, access control, firewall, regular backups and staff training in data protection. Your personal data are processed automatically and manually in accordance with legal regulations.

Provision of personal data

Your personal data may be made available to employees of Filla Foundation responsible for communication with donors, partners and project participants. Where necessary, data may be provided to external collaborators and service providers (processors), e.g. IT support, accountants, carriers — always in compliance with legal regulations and confidentiality agreements.

Personal data may further be provided to:

• Public authorities based on legal regulations or final decisions
• Auditors and legal advisors to the necessary extent
• Payment service providers when processing payments

The Controller does not transfer personal data to third parties for their own marketing purposes.

Rights of data subjects

In connection with the processing of your personal data, you have the right to:

• request access to personal data,
• request correction or deletion of personal data,
• object to processing,
• restrict personal data processing,
• request data portability to another controller,
• withdraw consent – if the processing is based on consent,
• lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).

You may object to processing for direct marketing at any time, and your personal data will be immediately deleted.

Contact

For exercising your rights or any questions, you may contact us:
Email: filla@fillafoundation.cz
Address: Filla foundation, endowment fund, Západní 256/33, Střešovice, 162 00 Prague 6

For filing a complaint, contact:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Email: posta@uoou.cz
Phone: +420 234 665 111
Web: www.uoou.cz

Cookie Policy

This Website stores cookies on your device in accordance with applicable laws. Cookies are used to ensure website functionality, analyze traffic and improve user experience. By using the Website, you consent to storing technical cookies. Analytical and marketing cookies may be disabled at any time in your browser settings. More information on cookies can be found in the section “Technical data and cookies” above.

These privacy policies are valid from 1 November 2025. The Controller reserves the right to amend these policies.