Responsibilities and Management
Any questions, concerns, or comments regarding this Policy also may be directed to info@praguegallery.com.
PRAGUE GALLERY, Petrohradská 216/3, Prague, will maintain, monitor, test, and upgrade information security policies, practices, and systems to protect the personal data that it collects. PRAGUE GALLERY personnel will receive training, as applicable, to effectively implement this Policy.
Collection and Use of Personal Data
PRAGUE GALLERY provides various products services to its customers, some of whom are EU citizens. PRAGUE GALLERY collects personal data from individuals when they purchase our products, fill out a form on our website, log in to their account, complete surveys, request information, or otherwise communicate with us. For example, PRAGUE GALLERY customers may choose to seek live support or post to a message board.
The personal data that we collect may vary based on the customer's interaction with our website and request for our services. Generally, PRAGUE GALLERY gathers contact information, including names, email and physical addresses, phone numbers, company names, etc. We also collect payment information, including credit card information. Customers can log into their accounts online and request service online, including through a live support option; we will collect data that they choose to provide to us through these portals.
When PRAGUE GALLERY customers or non-customers use our services or website online, we will collect their IP address and browser type, contact information, and any other information that the person chooses to submit through our website.
The information that we collect from customers is used to sell the products and services they buy from us, manage transactions, report, invoicing, renewals, and other operations related to providing services and products to our customers.
PRAGUE GALLERY also serves its customers as a service provider. As a service provider, we will receive, store, and/or process personal data. In such cases, we are acting as a data processor and will process the personal information on behalf of and under the direction of our partners and/or agents. The information that we collect from our customers in this capacity is used for managing transactions, reporting, invoicing, renewals, and other operations related to providing services to our customers.
PRAGUE GALLERY uses the personal data that we collect from our customers for the following business purposes, without limitation:
maintaining and supporting our products, delivering and providing the requested products/services, and complying with our contractual obligations (including managing transactions, reporting, invoices, renewals, and other operations related to providing services to a customer);
satisfying governmental reporting, tax, and other requirements (e.g., import/export);
storing and processing data in computer databases and servers located in the United States;
verifying identity (e.g., for online access to accounts);
as requested by our customers;
for other business-related purposes permitted or required under applicable local law and regulation;
And as otherwise required by law.
PRAGUE GALLERY does not disclose personal information to third parties for purposes that are materially different than what it was initially collected for. Should this change in the future, we will provide individuals with the option to opt out.
Disclosures and Onward Transfer of Personal Data
PRAGUE GALLERY discloses personal data only to third parties who reasonably need to know such data just for the scope of the initial transaction and not for other purposes. Such recipients must agree to abide by confidentiality obligations.
PRAGUE GALLERY may provide personal data to third parties that act as agents, consultants, and contractors to perform tasks on behalf of and under our instructions. For example, PRAGUE GALLERY may store such personal data in the facilities operated by third parties, such as those mentioned in the GDPR section above this Policy. Such third parties must agree to use such personal data only for the purposes for which PRAGUE GALLERY has engaged them, and they must either:
agree to provide adequate protection for the personal data that are no less protective than those set out in this Policy;
PRAGUE GALLERY may be required to disclose an individual's personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. PRAGUE GALLERY is liable for appropriate onward transfers of personal data to third parties.
PRAGUE GALLERY does not collect Sensitive Data from its customers.
In the case of an onward transfer of your data, PRAGUE GALLERY bears responsibility for personal processing information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent. PRAGUE GALLERY shall remain liable under the Principles if our agent processes such personal information in a manner inconsistent with the Principles unless we prove that we are not responsible for the event giving rise to the damage.
Data Integrity and Security
PRAGUE GALLERY uses reasonable efforts to maintain personal data's accuracy and integrity and update it as appropriate. PRAGUE GALLERY has implemented physical and technical safeguards to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. For example, electronically stored personal data is stored on a secure network with firewall protection, and access to PRAGUE GALLERY's electronic information systems requires user authentication via password or similar means. PRAGUE GALLERY also employs access restrictions, limiting the scope of employees who have access to personal data.
Further, PRAGUE GALLERY uses secure encryption technology to protect specific categories of personal data. Despite these precautions, no data security safeguards guarantee 100 % security all of the time.
PRAGUE GALLERY personnel may access and use personal data only if they are authorized to do so and just for their authorized purpose.
Right to Access, Change or Delete Personal Data
Right to Access: Customers have the right to know what personal data about them is included in the databases and to ensure that such personal data is accurate and relevant for the purposes for which PRAGUE GALLERY collected it. Customers may review their data stored in the databases and correct, erase, or block any incorrect data, as permitted by applicable law and PRAGUE GALLERY policies. Upon reasonable request and as required by the Privacy Shield principles, PRAGUE GALLERY allows customers access to their data to correct or amend such data where inaccurate. Customers may edit their data by logging into their account profile or contacting PRAGUE GALLERY by phone or email. In making modifications to their data, Data Subjects must provide only truthful, complete, and accurate information. To request the erasure of personal data, customers should submit a written request to info@praguegallery.com.
Requests for Personal Data: PRAGUE GALLERY will track each of the following. They will provide notice to the appropriate parties under the law and contract when either of the following circumstances arises: (a) legally binding request for disclosure of the personal data by a law enforcement authority unless prohibited by law or regulation, or (b) requests received from the Data Subject. Suppose PRAGUE GALLERY gets a request for access to his/her data from a customer. Unless otherwise required under law or by contract with such customer, PRAGUE GALLERY will refer such Data Subject to the customer.
Satisfying Requests for Access, Modifications, and Corrections – PRAGUE GALLERY will endeavor to respond promptly to all reasonable written requests to view, modify, or inactivate personal data.
Changes to this Policy
This Policy may be amended from time to time, consistent with the Privacy Shield Principles and applicable data protection and privacy laws and principles. We will notify our customers if we make changes that materially affect how we handle previously collected personal data. We will allow them to choose whether their data may be used substantially differently.
Questions, Complaints, Dispute Resolution
In compliance with the Privacy Principles, PRAGUE GALLERY commits to resolve complaints about our collection or use of your personal information. European Union and Swiss individuals with inquiries or complaints regarding our Privacy Policy should first contact PRAGUE GALLERY at info@praguegallery.com.
PRAGUE GALLERY has further committed to refer unresolved privacy complaints to the EU data protection authorities, an alternative dispute resolution provider located in the EU.
PRAGUE GALLERY commits to cooperate with the panel established by the EU data protection authorities (DPAs) and/or the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the panel and/or Commissioner concerning human resources data transferred from the EU or Switzerland.
January 1st, 2022
