Privacy Notice

According to definition by The office for personal data protection personal data is any information about identifiable person. Identifiable person is a natural person which can be identified (both directly and indirectly) especially through use of a specific identifier (name, number, network identifier) or through use of specific physical, physiological, genetic, psychical, economical, cultural or social features of this person.

Web-site www.cesfur.org (abbr. as "web") has been established to support preparation and organization of a furry meeting CeSFuR (abbr. as "con"). Personal data handled by this web a processed for this purpose. Processing follows directives given by EU General Data Protection Regulation (abbr. as "GDPR"). In that context, both the controller and the processor of the personal data on this web is a society CeSFur, z.s. (abbr. as "orgateam") registered by Town Court in Prague.

Personal data are processed in the extended defined through purpose of processing declared in this document. In general:

  • Storage period. Each purpose of processing defines circumstances under which it is valid. If no purpose is valid, corresponding data are deleted.
  • Purpose of processing. Each purpose which is not based on consent is necessary in order to provide a requested service.
  • Other purposes of processing. If consent is necessary, we collect the consent together with corresponding data. You can withdraw the consent either through profile of your account (My Account) or your registration (My Registration). If you have started but not completed your registration, all consents are withdrawn after 24 hours automatically. Withdrawal does not affect processing done based on a consent given earlier. Consent can be withdrawn only by the person who gave the consent.
  • Rights of web visitors. Web visitors has the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.
  • Supervisory authority. Web visitors can lodge a complaint with a supervisory authority.
  • Data source. All personal data are collected from natural persons.
  • Automated decision-making and profiling. Not done.

Extent of personal data processing depends on a requested services. A visitor of the web can register an account or submit registration for the con which creates a personal account if no account is available. Therefore, the web recognizes two groups which can request services: visitor logged into an account or visitor who has initiated registration process (abbr as "users") and others (abbr as “general public”).

If you are interested about processing of your personal data, contact us through Contact Form. We will respond you within a month (in specific cases this can take up to two months). Questions and requests which are unjustifiable especially if appearing repeatedly will be considered as misuse and might be refused.

General Public

General public are web visitors who have not logged into a web account. Processed personal data and purposes of processing are shown in the table below. Cells marked with X show that given personal data are processed for given purpose. Purposes of processing marked with * require consent which can be withdrawn anytime. Details about purposes of processing are summarized below the table.

Purpose of Processing
Personal Data
Response to a question Con information* Application logs
E-mail X X
Name or nickname X
IP address X

Details about purposes of processing are following:

  • Response to a question. Purpose is deliver a response and keep context of potential conversation. Unless there is no other purpose:
    • Data are deleted 1 month after the con.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • Data are necessary for the requested service. If this data is not supplied, we cannot deliver accurate response.
  • Con information. Purpose is to deliver con details and news. Unless there is no other purpose:
    • Data are deleted once the consent is withdrawn. Consent is withdrawn 1 month after the con automatically.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • This purpose requires consent.
  • Application logs. Purpose is to allow maintenance, troubleshooting and resolving consequences of defects. Unless there is no other purpose:
    • Data are deleted 1 month after the con.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • Data are necessary for the requested service. If this data is not supplied, we cannot keep service provided by this web in working condition.

Users

A user is a visitor of the web who has logged into an account or who has initiated registration less than 24 hours ago but has not completed it. Once a user initiates registration process for either the con or the account, the web will process necessary personal data in order to fulfill obligations based on registration rules. Any other data will require consent.

Users can grant consent with processing of personal data during registration or through Profile sections associated with their account (My Account) or their registration (My Registration) once they log in. Users can withdraw consent through Profile sections of their account once they log in. In case of incomplete registration, all consents granted through the registration process are withdrawn after 24 hours automatically. Once there is no valid purpose of processing, corresponding personal data are deleted. Date and time of granting/withdrawing consent is recorded.

Processed personal data and purposes of processing are shown in the table below. Cells marked with X show that given personal data are processed for given purpose. Purposes of processing marked with * require consent which can be withdrawn anytime. Details about purposes of processing are summarized below the table.

Purpose of processing
Personal data
Account Attending the Con Binding Communication Quick Communication* Accommodation Proof of Accommodation* Avatar Application Logs
E-mail X X X
Name X X X
Birth date X X X
Citizenship X X X X
Phone number X
Telegram account ID X
Address (permanent) X X X
ID number X
Avatar nickname, species, and picture X
IP address X

Details about purposes of processing are following:

  • Account. Purpose is to establish identity of the account owner and to support the uniqueness condition of the account. Unless there is no other purpose:
    • Data are deleted after the account is erased.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • Data are necessary for the requested service.
  • Attending the Con. Purpose is to ensure uniqueness of a user, match a natural person with a user once the user arrives at the con and check age restrictions. Unless there is no other purpose:
    • Data are deleted 1 month after the con or after all missing obligations (by the user or the con) are cleared (whichever is later). Canceling the registration invalidates this purpose with the exception of obligations and the following condition. If a user has been restricted in registration in following editions as a result of violating the rules, this reason is valid until the restrictions are lifted.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data can be shared with an accommodation facility in Czech Republic.
    • Data are necessary for the con to fulfill obligations.
  • Binding Communication. Purpose is to provide a communication channel for sharing essential (or critical or legal) information about the con, registration process, and attendance. Unless there is no other purpose:
    • Data are deleted 1 month after the con or after all missing obligations (by the user or the con) are cleared (whichever is later). Canceling the registration invalidates this purpose once the missing obligations are cleared.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • Data are required for the con to fulfill obligations.
  • Quick Communication. Purpose is to provide communication channel which allows fast response rate or even real-time communication. Unless there is no other purpose:
    • Data are deleted once the consent is withdrawn. Consent is withdrawn 1 month after the con automatically.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are not shared with any 3rd party.
    • This purpose requires consent.
  • Accommodation. Purpose is to allow orgateam to offer a user booking a bed and book a bed in a selected accommodation facilities if the offer is accepted and if the bed is still available. Unless there is no other purpose:
    • Data are deleted 1 month after the con or after registration is canceled or after accommodation lists are finalized before the con (applies only to users for which the con has not booked a bed).
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are shared with an accommodation facility in Czech Republic.
    • Data are necessary for the con to fulfill obligations based on registration rules and nature of the place of the con (accommodation at the location is limited).
  • Proof of Accommodation. Purpose of processing is allowing the orgateam to request for Proof of Accommodation from an accommodation facility if a user needs such a document for visa purposes and if the con has booked a bed for the user. Unless there is no other purpose:
    • Data are deleted once the consent is withdrawn. Consent is withdrawn 1 month after the con automatically.
    • Data are accessible to some orgateam members and entrusted persons.
    • Data are shared with an accommodation facility in Czech Republic.
    • This processing requires consent.
  • Avatar. Purpose is to create a badge which enables access to the con. Unless there is no other purpose:
    • Data are deleted 1 month after the con or after all missing obligations (by the user or the con) are cleared (whichever is later). Canceling the registration invalidates this purpose.
    • Data are accessible to orgateam members and users who are attending the con. Data will be printed on a badge and might be printed in a conbook in case of users who decide to contribute to the con beyond basic registration.
    • Data can be shared with a printing facility located in Czech Republic.
    • Data are necessary for the con to fulfill obligations.
  • Application logs. Purpose is to allow analysis of failed login attempts and disputes. Unless there is no other purpose:
    • Data are deleted 1 month after the con or after all missing obligations (by the user or the con) are cleared (whichever is later).
    • Data are accessible to some orgateam members.
    • Data are not shared with any 3rd party.
    • Data are necessary for the con to fulfill obligations.