28/5 — 3/6/2026
66th INTERNATIONAL FILM FESTIVAL
FOR CHILDREN AND YOUTH
MY ZLINFEST
APP download

Privacy Policy

PRINCIPLES OF PROCESSING AND PROTECTION OF PERSONAL DATA

The commercial company FILMFEST, s.r.o., with its registered office at Zlín, Kudlov, Filmová 174, postal code 760 01, Company ID No.: 262 73 365, registered in the Commercial Register maintained by the Regional Court in Brno under File No. C 41255 (hereinafter referred to as the “Company”), approaches the processing of personal data with the utmost responsibility, protects all personal data it processes, and processes such data in compliance with generally binding legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”).
The purpose of these principles is to inform guests, participants and competitors of the International Film Festival for Children and Youth in Zlín (hereinafter referred to as the “Festival”), as well as purchasers making purchases of goods and tickets via the website shop.zlinfest.cz, and other persons whose data may be processed by the Company, about the manner in which the Company processes and protects personal data, including information on the rights of data subjects and the manner of exercising such rights. 

Personal Data Controller

The controller of your personal data is the commercial company FILMFEST, s.r.o., with its registered office at Zlín, Kudlov, Filmová 174, postal code 760 01, registered in the Commercial Register maintained by the Regional Court in Brno under File No. C 41255. The Company may be contacted in writing at its registered office address, by e-mail at festival@zlinfest.cz, or by telephone at +420 577 592 275.

Purpose of Personal Data Processing

The Company processes personal data primarily for the purpose of ensuring participation in, and administering the stay of, the data subject at the Festival and events organized as part thereof. Furthermore, personal data are processed for the purpose of entering into a contractual relationship, the legal basis being the performance of a contract, i.e. the delivery of goods and/or tickets to Festival events and the administration of your customer account. In addition, the Company may process personal data in order to comply with its legal obligations, in particular obligations arising from accounting and tax legislation, as well as for the establishment, exercise, and defence of legal claims. Following the termination of the contractual relationship, the Company may retain certain personal data, the processing of which is necessary for the protection of the Company’s rights and for the possible defence of legal claims, including the recovery of outstanding payments.

Processed Personal Data

For the purposes set out above, the Company processes personal data provided by you. In particular, this includes the following data:
- Identification data, such as first name, surname, academic title, date of birth, permanent address, and country of residence, 
- Contact details, namely e-mail address and telephone number.

Processing of Personal Data on the Basis of Consent

If you grant the Company your consent to the processing of your personal data for the purposes defined in such consent, you acknowledge that the provision of this consent is voluntary and may be withdrawn at any time in writing. The consent is granted until its withdrawal, or for the period specified in the consent, as applicable.

Cookies

When you visit the Company’s website, we process your personal data through cookies. The purpose of such processing is to create traffic analyses, obtain additional information about how customers use the Company’s website, and to tailor the content of the website accordingly.

Recipients of Personal Data

The Company discloses personal data solely to its authorized employees or to individual personal data processors contractually engaged by the Company, and always only to the extent necessary to fulfil the respective purposes of processing and on the basis of an appropriate legal ground for the processing of personal data. In cases stipulated by law, the Company is obliged to transfer certain personal data in accordance with applicable legal regulations, for example to law enforcement authorities or other public authorities. 

Duration of Personal Data Processing

Personal data are processed and stored for the duration of the contractual relationship and thereafter for the period during which the Company, as the controller, is obliged to retain such personal data pursuant to generally binding legal regulations, or for the period for which you have granted your consent to the Company. In other cases, the duration of processing results from the purpose of processing and must be proportionate thereto, or is determined by applicable legal regulations in the field of personal data protection.

Rights of the Data Subject

As a data subject, you have rights in connection with the processing of personal data arising from applicable legal regulations, which you may exercise. 
You have the right to request that the Company provide information regarding the processing of your personal data. 
You have the right to have the Company rectify, without undue delay, inaccurate personal data relating to you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to have the Company erase personal data relating to you without undue delay, and the Company is obliged to erase such personal data without undue delay if one of the grounds set out in the GDPR is met.  
You have the right to have the Company restrict the processing of personal data in the cases stipulated by the GDPR.  
You have the right to object to the processing of personal data relating to you if the Company processes such personal data on the following grounds:
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company, 
- the processing is necessary for the purposes of the legitimate interests of the Company or of a third party,
- for the purposes of direct marketing,
- for the purposes of scientific or historical research or for statistical purposes.
You have the right to obtain the personal data concerning you which you have provided to the Company in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from the Company, in the cases stipulated by the GDPR (the right to data portability). 
  
If the processing of personal data is based on the consent you have given to the processing of personal data, you have the right to withdraw such consent at any time. 
  
All requested changes must be submitted in writing, by e-mail to: gdpr@zlinfest.cz
  
If you believe that applicable legal regulations relating to the protection of your personal data have been violated, you have the right to lodge a complaint with a supervisory authority. The supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
   
In Zlín, on 15 April 2024