Personal Data Processing Policy

The personal data administrator is Nadační fond Svět železnice, Trocnovská 1/2, 130 00 Prague 3, Company ID (IČ): 24432164, VAT ID (DIČ): CZ24432164, registered in the Commercial Register maintained by the Prague Municipal Court, Section N, File 2859, Data Box ID: psfmaer, e-mail: info@svetzeleznice.cz.

We have not appointed a Data Protection Officer. For any matters concerning the processing of personal data, please contact us at the e-mail address or data box specified above.

This website does not offer registration, user accounts, orders, or contact forms, and we do not distribute a newsletter. We do not actively collect or request any data from website users. However, we may process some personal data associated with visiting the website, contacting us, when organising competitions, or in connection with the professional contacts of our representatives.

Certain technical data is automatically recorded during every visit (IP address, browser type and version, operating system and device, referring page, and the date and time) to improve website operation, security, and to protect against attacks and abuse. This has its legal basis in the legitimate interest in securing operation of the website (Article 6(1)(f) GDPR). The data is retained for 90 days.

We monitor which pages users visit and their location. We use analytic tools only to the extent that corresponds to your consent settings. We only evaluate data in aggregated form. We do not track individual persons, and we do not combine data across websites.

This serves to evaluate and improve website content and is based on Article 6(1)(a) GDPR in cases required for the use of analytics cookies or similar technologies; to gather technical data necessary for the operation of the website as stated in Article 6(1)(f) GDPR. We retain this data in aggregated form for 14 months in accordance with the specific analytic tools used and in accordance with its settings and the rules set out in its terms.

If you write to any of the e-mail addresses listed on the website, call the telephone numbers provided, or send us a message via our data box, we process the data you provide us yourself (e.g. name, e-mail address, telephone number, and the content of your message).

This is to handle your enquiry, request, or application, and related communication to process your request, or, where applicable, negotiations regarding a contract if the enquiry concerns a contract (Article 6(1)(f) and (b) GDPR). This data is retained for 6 months from resolution unless longer retention is necessary for the protection of our legal claims, or unless a legal regulation imposes a data retention obligation. Documents subject to accounting and archiving regulations are retained for the period stipulated by law.

The website uses only technical cookies necessary for its proper functioning. Under Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, no consent is required for storing them.

We do not use marketing, advertising, or profiling cookies. If we were to use analytics, marketing, or other non-technical cookies or similar technologies, they would be activated only based on prior demonstrable consent to the extent corresponding to the given purpose. The option to reject such cookies will be offered just as easily as the option to accept them.

You can disable the storage of cookies at any time in your browser settings. Some parts of the website may not function correctly if you do so.

The website contains links to pages operated by other entities, in particular to the ČD Nostalgie portal and to our profiles on social networks (Facebook, Instagram, and YouTube). These are only links. By clicking on them, you leave our website, and the processing of your data is then governed by the policies of the operator of the relevant website. We are not responsible for the content or the processing of data on those websites.

We do not disclose personal data to third parties for their own purposes. We do not sell the data, and we do not use it for automated decision-making or profiling.

Personal data may be accessed to the necessary extent by our processors and service providers to ensure the technical operation of the website and our activities. The providers are:

• Webflow, Inc. (USA) web hosting services: operation and hosting of the website.
• Google Analytics and possibly other analytics services: traffic statistics, if this service is activated on the website and if you grant consent to its use.
• Mailing services, cloud storage: operation of e-mail inboxes.

For services provided by entities outside the European Economic Area, we ensure that personal data is transferred in compliance with GDPR requirements and through the appropriate mechanism for transfers to third countries where such a transfer is relevant. In the case of Webflow, Inc., the mechanisms set out in its current documentation on international transfers currently apply, in particular the EU-U.S. Data Privacy Framework (where applicable to the given processing), or other mechanisms under the GDPR.

We may also disclose data to public authorities when required to do so by law.

In relation to your personal data, you have the right:

• to access the data and be informed how we process it,
• to rectify inaccurate data or complete incomplete data,
• to erasure of the data under the conditions set out in the GDPR,
• to restriction of processing,
• to data portability where the conditions of the GDPR are met,
• to object to processing based on a legitimate interest.

You can exercise your rights by e-mail at info@svetzeleznice.cz or via the data box address: psfmaer. We will respond to your request without undue delay, and no later than within one month of receiving it. In complex cases, this period may be extended by a further two months under the conditions of the GDPR.

You also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

We may update this policy, for example, when introducing new website features or changing the services used. The current version is always available on this page.