Privacy Policy

This is the Privacy Policy of Czech Video Center a.s., Czech company with ID No.: 09839194 (“Provider” or “we”). The Provider operates the application Carl for Social (“App”) and provides related marketing services (“Services”) as further described at https://carlforsocial.com (“Website”) and additional services such as webinars, newsletters and other content or events (“Additional Services”). The Services are intended for business customers (each a “Customer”) who register for our Services based on our Terms of Service (“Terms”) available at https://carlforsocial.com/terms-of-use, as updated from time to time. Each Customer may allow individual users, in particular Customer’s employees (“Users”) to use Services purchased by the Customer (each a “User”). Additional Services are intended in particular for persons using or considering the use of Services.

1. Scope of this Privacy Policy

This Privacy Policy describes how Provider as a data controller collects and uses your personal data if you fall under any of the following categories:

• If you use our Services, whether as a Customer or a User.
• If you use our Additional Services, for example by subscribing to our newsletter, blog updates or other content or news or by registering for our webinar.
• If you show an interest in our Services, for example by using our contact form.

This document also provides important information about your rights.
In addition to the information below, Provider as a data processor may also process personal data of individuals who interact with our Customers, if our Customers process their data via our Services. In such a case, our Customers act as data controllers and are solely responsible for establishing policies and ensuring compliance with all applicable laws and regulations relating to the collection of personal data of such individuals with whom they interact. However, we are committed to providing tools for protecting the privacy of such individuals. For more information about the purpose and legal grounds of such processing and about the rights of the concerned individual, please refer to the privacy policy (sometimes also referred to as a privacy notice) of the particular Customer, as these are out of the scope of this Privacy Policy.

2. Personal data we collect

Data that you provide to us

When you intend to use, or use our Services, we ask you to provide certain personal data (“Account Data”) to identify you as a Customer or a User and to allow you to invite other Users, if applicable, and to allow you and your Users to use our Services. Such data may include your name, email address, company details, billing details and other information, such as names and email addresses of your Users. By voluntarily providing us with personal data of invited Users, you represent that you are an authorized user of such personal data and that no invited User has objected to such processing by us.

We also require the following data in relation to platforms from which we draw resources for the purpose of providing our Services, i.e. Instagram, Youtube and Tiktok: ID of the account and name of the account (“Platforms Data”).

When you intend to use, or use our Additional Services, we ask you to provide certain contact details. For example: When you subscribe for our newsletter, we collect and use your email address. We ask for and collect personal data such as your name, address, phone number and email address when you register for or attend an event organized by us. When you want to download our content, we ask for your email address to send you the link for download.

You provide the personal data on a voluntary basis (there is no legal obligation to do so) but without providing the data, we are not able to provide the Services, unless we expressly specify that providing of certain information is optional.

Data that a Customer provides to us about you as a User

When a Customer invites you as a User to use our Services, they already provide us with some of your Account Data, in particular your email address and role.

Data that we collect from you when you use our Services or Website

When you visit our Website or use our Services, including our applications, we use cookies, server logs and other information gathering technologies. These technologies may provide us with personal data (“Usage Data”), such as IP address, information about devices, and other information regarding your interactions with our Websites or Services (including which version of our client app you use). Web beacons, tags and scripts may be used on our Websites or in email or other electronic communications we send to you. These assist us in understanding usage and campaign effectiveness and determining whether an email has been opened and acted upon. We gather certain information and store it in log files when you interact with our Websites and Services, including applications provided as a part of our Services.

We distinguish between the (i) essential technologies which are necessary to provide the Service and Additional Services and the (ii) non-essential technologies. We use the non-essential technologies only with your consent which you can give us via a cookie banner or in the control panel. You can withdraw your consent anytime by the same means.

3. How we use the data

We use the personal data which we collect about you to

(a) provide, operate, maintain and improve Services and Additional Services, which includes sending service messages and providing customer service and support and maintaining reasonable security of our Services (we use Account Data, Platforms Data, Usage Data and your contact information for this purpose);

(b) enable you to access and use Services and Additional Services (we use Account Data and Usage Data for this purpose);

(c) process and complete transactions, and send you related information, including purchase confirmations and invoices (we use Account Data, Usage Data and your contact information for this purpose);

(d) investigate and prevent fraudulent transactions, unauthorized access to Services, and other illegal activities (we may use Account Data, Usage Data and your contact information for this purpose);

(e) send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events (we use your contact information, which you gave us as User of our Services or Additional Services, for this purpose);

(f) monitor and analyze trends, usage, and activities in connection with our Website and Services and for marketing or advertising purposes (we may use Account Data, Usage Data and your contact information for this purpose);

(g) personalize our websites and Services (we may use Account Data, Usage Data and your contact information for this purpose);

(h) comply with our legal obligations, including our obligations related to personal data protection (we may use Account Data, Usage Data and your contact information for this purpose).

4. Data sharing and transfers

Third-party Tools:

We do not share your personal data with any Third-party Tools. “Third-party Tools” means any tools (such as AI models) provided by Third Parties. “Third Party” means a person or entity other than i) us; ii) our affiliates; and iii) our processors or sub-processors as specified below.

Our Processors

We may share your personal data with service providers to provide virtual servers, development, analytics and other services for us. These service providers may have access to or process your personal data for the purpose of providing these services for us. We do not permit our service providers to use the personal data that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us. By default, we and our service provider process your personal data only within the EU. If the data are exceptionally transferred outside the EU, we do so in accordance with applicable laws and we rely either on adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable laws, such as the Standard Contractual Clauses.

5. Security of your personal data

We take reasonable and appropriate steps to protect your personal data in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction. 

6. Legal grounds for processing (if you reside in EEA, UK or Switzerland)

We process your data for the purposes described in this Privacy Policy, based on the following legal grounds:

(i) In pre-contractual dealing:
We process your data in negotiation of potential cooperation. As part of the negotiation, we may inform you about our Services so that you may evaluate your interest in cooperation with us.

(ii) When we’re providing Services based on a contract with you:
We process your data to provide Services or Additional Services which you’ve asked for (which means we entered into a formal or informal contract, this may include your order of update emails about our Services) for the following purposes:

• providing, operating, maintaining, and improving our Services and Additional Services;
• enabling you to access and use our Services or Additional Services.

(iii) When we’re pursuing legitimate interests:
We process your information for our legitimate interests and legitimate interests of third parties (in particular of the Customer who invited you as a User or who you represent as an individual or of the partner) for the following purposes:

• providing, operating, maintaining, and improving our Services and Additional Services; this includes the processing of communication which you exchange with us via contact form or live chat;
• enabling you to access and use our Services;
• promoting our Services;
• sending promotional communications;
• investigating and preventing fraudulent transactions, unauthorized access to Services, and other illegal activities.

(iv) When we’re complying with legal obligations:
We’ll process your data when we have a legal obligation to do so, for example, if we’re responding to a legitimate governmental agency’s request.

(v) With your consent:
We may ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time.

When you are accessing our Website, we ask for your consent using the cookies and processing the collected information for: monitoring and analyzing trends, usage, and activities in connection with our Websites and Services; and personalizing the websites and Services.

If you wish to withdraw your consent, you can contact us at hello@carldatacompany.com or you can change the cookies settings.

7. Your rights (if you reside in EEA, UK or Switzerland)

To the extent available by data protection protection applicable to you (such as GDPR), you may exercise the following rights:

(a) you may request access to your data from us (information about what your specific data we process and how do we work with them); (b) you may request restriction of the processing your data (which means that we do not delete the data but we will not work with them); (c) you may request data deletion and correction (always if the legal conditions are met); (d) you may object to the processing of data – it means that you may refuse data processing based on a legitimate interest and we will limit processing, unless we prove serious and qualified legitimate reasons for the processing; and (e) you may exercise your right to data portability. To exercise any of these rights, contact us via above mentioned contact details – the easiest way is to send us an email to hello@carldatacompany.com and we would be glad to help you exercise your rights. If you believe that we are violating legal rules by processing your personal data, you have the right to lodge a complaint with the national supervising authority (Czech Office for Personal Data Protection).

You can opt-out from receiving promotional emails by clicking on the “unsubscribe” link located on the bottom of our emails or you may send a request to hello@carldatacompany.com.

8. California residents

Under the California Consumer Privacy Act (“CCPA”), we are required to inform California residents who are Users about the categories of personal information we collect about you and the purposes for which we will use this information. We collect information which you give us at the registration, in particular your name and email address and information about your use of our Services or Additional Services. We use and disclose the personal information we collect for our business purposes as identified in the CCPA for communicating with you about Services as well as for legal compliance, performing services, internal operations, protection against security incidents and activities to improve and maintain our business. California residents have the right to request that we disclose what personal information we collect from you, to delete that information, and to opt-out of the sale of your personal information, subject to certain restrictions. We do not, and will not, sell your personal information.

9. Minors

We do not knowingly collect any personal data from children under the age of 16. If you are under the age of 16, please do not use or submit any personal data through our websites or Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Policy by instructing their children never to provide personal data through our websites or Services without parental permission. If you have reason to believe that a child under the age of 16 has provided personal data to us through our websites or Services, please contact us at hello@carldatacompany.com, and we will use commercially reasonable efforts to delete that information.

10. Data retention and deletion

We retain personal data we collect from you where we have an ongoing legitimate need to do so (for example, to comply with applicable legal, tax or accounting requirements, to enforce our agreements or comply with our legal obligations). When we have no ongoing legitimate need to process your personal information, in particular after the Services contract terminates or negotiation about our cooperation fails, we will either delete or anonymize your personal data or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing, until deletion is possible.

If you contact us via contact form, or similar tool, we generally store such communication for two years from our last contact. In case you contacted us for potential cooperation, we believe this is a reasonable time for each of us to finally consider whether or not to cooperate. If you contacted us to resolve any issue, we believe this a reasonable time to finally resolve such issue.

11. Changes to this Privacy Policy

We may change this Privacy Policy from time to time. If we make any changes to this Privacy Policy, we will add or change the “Last Updated” date at the top of the page. If such changes are material in nature, we will provide you with additional notice (such as adding a statement to our website or sending you an email notification).

12. Contact details

Our full identification and contact details are:

Czech Video Center a.s.,
Komunardů 1584/42, Holešovice, Prague 7, 170 00 Prague, Czech Republic
ID No.: 09839194, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 26003

You may reach us via mail at our registered address, via our support or at hello@carldatacompany.com.