GDPR Data Protection Notice
Last updated: 06/03/2026
1. Data Controller
The data controller responsible for the processing of personal data is:
SPARK – SPolek pro Aktivní Rozvoj Kreativity, z.s.
Company ID (IČO): 23783001
Registered address:
Lužická 1538/10
120 00 Prague
Czech Republic
Registered in the Association Register maintained by the Municipal Court in Prague under file number L 81115/MSPH.
Data box: stekquc
Contact email: eva@sparkczechia.org
2. Legal Framework
SPARK processes personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Czech Data Protection Act, and other applicable data protection regulations.
We are committed to ensuring that personal data is processed lawfully, transparently, and securely.
3. Legal Basis for Processing Personal Data
Personal data may be processed based on the following legal grounds:
Consent
When individuals voluntarily provide personal data, for example when subscribing to newsletters or registering for events.
Legitimate Interest
To support the activities of SPARK, including communication, community building, and improvement of our services.
Legal Obligations
When processing is necessary to comply with legal or regulatory requirements.
4. Data Protection Principles
SPARK processes personal data according to the following GDPR principles:
- lawfulness, fairness, and transparency
- purpose limitation
- data minimization
- accuracy
- storage limitation
- integrity and confidentiality.
5. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by law.
After the retention period expires, personal data will be securely deleted or anonymized.
6. Rights of Data Subjects
Under the GDPR, individuals have the following rights:
- the right to access personal data
- the right to rectification of inaccurate data
- the right to erasure (“right to be forgotten”)
- the right to restrict processing
- the right to data portability
- the right to object to processing
- the right to withdraw consent at any time.
Requests regarding these rights can be sent to the contact email listed above.
7. Complaints
Individuals also have the right to lodge a complaint with the relevant supervisory authority.
In the Czech Republic this is:
Úřad pro ochranu osobních údajů (UOOU)
www.uoou.cz
8. Security Measures
SPARK applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
These measures include secure data storage and restricted access to personal data.
