Privacy policy

1. Who is the data controller?

The controller is the person who, alone or jointly with others, determines the purposes for which and decides how personal data will be processed. The data controller is RoomBet s.r.o., ID No.: 11856106, with registered office at Na Folimance 2155/15, Vinohrady, 120 00 Prague 2, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 355438 The data controller can be contacted by e-mail at info@roombet365.com or by phone at +420 605 755 898 .


2. For what purpose do we need the personal data?

The controller processes personal data to:
(a) to ensure the conclusion and subsequent performance of a contractual obligation between the controller and you (Article 6(1)(b) GDPR). Such a relationship gives rise to other legal obligations and the controller must therefore also process personal data for this purpose (Article 6(1)(c) GDPR). The processing of personal data is necessary to enable you to register on the controller's website and to create a user account, which is necessary for the proper provision of services. The user account created by you is publicly accessible to other users of the provider's website, who can visit it and monitor your statistical data in the web application. We also collect personal data in order to process any payments you are required to make in exchange for access to the service. We may also send you email notifications about the Service as part of the provision of the Service.
b) marketing purposes, in order for the controller to best tailor its product and service offerings and commercial communications about them to your needs, for this processing purpose the controller obtains your unambiguous consent (Article 6(1)(a) GDPR;
(c) the protection of its legitimate interests (Article 6(1)(f) GDPR). Providing personal data to the controller is generally a legal and contractual requirement. With regard to the provision of personal data for marketing purposes, which does not constitute the fulfilment of a contractual and legal obligation of the controller, your consent is required. If you do not give consent to the controller to process your personal data for marketing purposes, this does not mean that the controller will refuse to provide you with its product or service on a contractual basis as a result.


3. What are our legitimate interests?

The controller also processes personal data to protect its legitimate interests. In particular, the legitimate interests of the controller are the proper performance of all contractual obligations of the controller, the proper performance of all legal obligations of the controller, direct marketing, the protection of the controller's business and property.
In order to ensure that your privacy is protected as much as possible, you have the right to object to your personal data being processed solely for the most necessary lawful reasons or to have your personal data blocked. You can read more about your rights related to the processing of personal data in Article 11 of this information memorandum.


4. How was the personal data obtained?

The controller obtained the personal data directly from you, in particular when you registered and created a user account, from completed forms, from communications between you or from concluded contracts. In addition, personal data may also come from publicly available sources, registers and records.
In addition, the controller may have obtained personal data from third parties who are authorised to access and process your personal data and with whom it cooperates, as well as from information from social networks and the Internet that you yourself have placed there.


5. What categories of personal data are processed?

In order to ensure your satisfaction with the proper performance of the obligation, to ensure compliance with legal obligations, to provide a personalized offer of goods and services of the controller and for the other purposes listed above, the controller processes the following categories of personal data:
a. basic identification data - first name, last name, username, where applicable residence and profile picture;
b. contact data - telephone number and e-mail address;
c. information about your use of the controller's products and services - this is information about what products you have arranged with the controller and what you are using now, including product settings etc;
d. information from your communications with each other - information from emails, telephone records or other contact forms;
e. billing and transaction information - this includes information appearing on invoices, billing terms agreed and payments received;
f. geolocation information - information from the web browser or mobile applications you use;

g. your mobile device contact list so that you can invite friends into the application by sending them an sms. 


6. What is the legal basis for processing personal data?

The lawfulness of the processing is determined by Article 6(1) of the GDPR, according to which the processing is lawful if it is necessary for the performance of a contract, for the fulfilment of a legal obligation of the controller, for the protection of the legitimate interests of the controller or the processing is based on the consent you have given us.
The lawfulness of the processing is also based, for example, on Act No. 563/1991 Coll., on accounting, according to which invoicing data is processed and stored, Act No. 89/2012 Coll., Civil Code, according to which the controller defends its legitimate interests, or Act No. 235/2004 Coll., on value added tax.


7. Will we pass on personal data to anyone else?

We must, within the limits of the law, provide personal data to public authorities, such as tax authorities, courts, law enforcement authorities or capital market supervisory authorities, as well as to persons who will be involved in the performance of the contract.
We will also transfer personal data to processors in the marketing sector. Personal data (first name, last name and username) will also be disclosed to other third parties using the services of the administrator or visitors to the administrator's web application, in particular for the purpose of making full use of the services consisting of adding other users to the tournament, monitoring its tips and statistics, as well as related activities. The transfer of personal data to other persons is only possible if you are duly informed and consent to it.


8. Will we transfer personal data to a third country or international organisation?

We will not transfer personal data to countries outside the European Union or the European Economic Area or to any international organisation.


9. How long will we store personal data?

Personal data will be processed and stored for at least the duration of the contract. Certain personal data required, for example, for tax and billing obligations will be kept for longer, generally 5 years starting from the year following the occurrence of the fact stored.
Personal data that are relevant for the exercise of the controller's legitimate interests will be retained for a maximum of 5 years from the end of the contractual relationship with the controller. Personal data processed for marketing purposes will be retained for a maximum of 3 years from the date of acquisition.
Personal data will never be kept longer than the statutory maximum. After the expiry of the archiving period, the personal data will be securely and irretrievably destroyed so that it cannot be misused.


10. What are your rights in relation to the processing of personal data and how can you exercise them?

The controller does everything possible to ensure that the processing of your data is carried out properly and, above all, securely. You are guaranteed the rights described in this article, which you can exercise with the controller.


11. How can you exercise your rights?

You can exercise your individual rights by sending an email to info@funrivals.com or calling +420 605 755 898 .
You can also exercise your rights by sending a written request to our mailing address at the data controller's address listed above. All communications and statements regarding the rights you have exercised are provided by the controller free of charge. However, if the request is manifestly unfounded or excessive, in particular because it is repetitive, the controller is entitled to charge a reasonable fee taking into account the administrative costs involved in providing the information requested.
In the event of a repeated request for copies of the personal data processed, the controller reserves the right to charge a reasonable fee for administrative costs for this reason. The controller will provide you with a statement and, where appropriate, information on the measures taken as soon as possible and at the latest within one month.
The controller is entitled to extend the time limit by two months if necessary and in view of the complexity and number of requests. The administrator will inform you of the extension, including the reasons for it.


12. Right to information about the processing of your personal data

You are entitled to request information from the controller as to whether or not personal data are processed.
If personal data are processed, you have the right to request information from the controller, in particular, about the identity and contact details of the controller, its representative and, where applicable, the data protection officer, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the personal data, the authorised controllers, a list of your rights, the possibility of contacting the Data Protection Authority, the source of the personal data processed and automated decision-making and profiling.
If the controller intends to further process your personal data for a purpose other than that for which it was collected, it will provide you with information about that other purpose and other relevant information prior to that further processing.


13. Right of access to personal data

You are entitled to request information from the controller as to whether or not your personal data are processed and, if so, to access information on the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the period of storage of the personal data, information on your rights (rights to request the controller to rectify or erase, restrict processing, object to such processing), the right to lodge a complaint with the Data Protection Authority, information on the source of the personal data, information on whether automated decision-making and profiling takes place and information concerning the procedure used as well as the significance and foreseeable consequences of such processing for you, information and safeguards in case of transfer of personal data to a third country or an international organisation. You have the right to be provided with copies of the personal data processed. However, the right to obtain this copy must not adversely affect the rights and freedoms of others.


14. Right to repair

If there has been a change on your part, for example, of your residence, telephone number or other fact that can be considered personal data, you have the right to request the controller to correct the personal data processed.
In addition, you have the right to have incomplete personal data completed, including by providing an additional declaration.


15. Right to restriction of processing

The controller processes your personal data only to the extent strictly necessary. However, if you feel that the controller, for example, exceeds the purposes for which the personal data are processed as set out above, you can request that your personal data be processed solely for the strictly necessary legitimate purposes or that the personal data be blocked. Your request will then be subject to an individual assessment and you will be informed in detail about the processing.


16. Right to object and automated individual decision-making

If you become aware or believe that the controller is processing your personal data in breach of the protection of your private and personal life or in breach of the law (provided that the personal data are processed by the controller on the basis of public or legitimate interest or for direct marketing purposes, including profiling, or for statistical purposes or purposes of scientific or historical interest), you may contact the controller and request an explanation or rectification of the deficiency. You can also object directly to automated decision-making and profiling.


17. Right to lodge a complaint with the Office for Personal Data Protection

You may at any time contact the supervisory authority, the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/, with your complaint regarding the processing of personal data.


18. Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time, either by filling in the form/checking the box/sending the withdrawal to the address of the controller's registered office or by using the link in the e-mail communication.

Document issued on 11 October 2022.