Privacy Policy

1. Overview and Scope

Festivalrankripple Collector Guild s.r.o. ("Festivalrankripple", "we", "us", or "our"), operating the platform Festivalrankripple.casa, respects your personal privacy and is committed to protecting your personal data. This comprehensive Privacy Policy outlines how we collect, store, process, and safeguard personal information obtained when you visit our website, utilize our collector trail guides, make provenance appraisal inquiries, or interact with our interactive antique database.

Our operations are fully governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR), Czech Act No. 110/2019 Coll. on Personal Data Processing, and corresponding international privacy standards including the California Consumer Privacy Act (CCPA).

2. Data Controller Information

The entity responsible for the processing of your personal data is:

• Legal Entity: Festivalrankripple Collector Guild s.r.o.
• Company ID (IČO): CZ84920194
• Registered Business Address: Karlova 148/28, Staré Město, 110 00 Praha 1, Czech Republic
• Data Protection Officer (DPO) Contact: [email protected]

3. Categories of Information We Collect

We may collect and process various categories of information depending on your level of interaction with our services:

• Directly Provided Identity & Contact Data: When submitting an inquiry via our Antiquarian Desk or booking a curated trail walkthrough, you may provide your first and last name, email address, phone number, and physical mailing address.
• Archival Appraisal Data: Images, physical item provenance descriptions, purchase history notes, and collector interest categories submitted for verification.
• Technical & Browsing Telemetry: Internet Protocol (IP) addresses, browser type, operating system version, referring URL, time spent per antique guide, and geographic region.
• Cookie & Local Storage Preferences: Records of your consent choices regarding essential and non-essential analytical cookies stored within your browser's persistent storage.

4. Lawful Bases and Purposes of Processing

Under Article 6 of the GDPR, we process your information exclusively under the following lawful conditions:

• Performance of Contract (Art. 6(1)(b)): Providing requested route reservations, hallmark identification documentation, and responses to collector inquiries.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server security, diagnosing technical anomalies, optimizing user interface performance, and preventing fraudulent inquiries.
• Consent (Art. 6(1)(a)): Delivering optional collector dispatches, newsletters, and non-essential analytical telemetry where explicitly approved.
• Legal Compliance (Art. 6(1)(c)): Fulfilling accounting, tax, and reporting obligations under Czech and European Union trade law.

5. Third-Party Service Providers & Data Transfers

We do not sell, rent, or trade your personal data to third parties. Data may be shared with trusted data processors strictly necessary for operational functionality, such as secure cloud hosting providers located inside the European Economic Area (EEA) and cryptographic communication endpoints. All third-party processors are bound by strict Data Processing Agreements (DPAs) requiring adherence to equivalent data security standards.

6. International Data Transfers

Whenever data is processed or accessed outside the EEA, we ensure that adequate safeguards are implemented in accordance with Chapter V of the GDPR, including the execution of standard contractual clauses approved by the European Commission.

7. Data Retention Durations

We retain personal data only for the period necessary to fulfill the purposes for which it was gathered:

• General Inquiries: Retained for 12 months following resolution.
• Appraisal & Transactional Archives: Retained for 5 years to maintain archival provenance consistency and satisfy Czech statutory tax requirements.
• Server Log Files: Automatically purged after 90 days.

8. Your Rights Under GDPR and Global Regulations

You have comprehensive rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request a complete copy of all personal records we maintain.
• Right to Rectification (Art. 16 GDPR): Request immediate correction of inaccurate or incomplete information.
• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request the permanent deletion of your personal data where retention is no longer legally mandated.
• Right to Restriction of Processing (Art. 18 GDPR): Request limitation on data handling pending verification.
• Right to Data Portability (Art. 20 GDPR): Obtain your structured, machine-readable records.
• Right to Object (Art. 21 GDPR): Object to any processing founded upon legitimate interests.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. You also retain the right to lodge a formal complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů – ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7 (www.uoou.cz).