Privacy Policy

Effective from: 1. 1. 2026

1. Who we are (data controller)

The controller of your personal data is the association Tutte Le Note, z. s., registered office Střední 403, 252 28 Černošice, Czech Republic, ID No. 62939882, e‑mail tuttelenote@gmail.com, tel. +420 723 361 532 (the “choir”).

We take your privacy seriously and process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.

2. What data we process, why, and on what legal basis

a) Members’ area (parents and choir members)
We process your e‑mail, name and your child’s membership in order to enable sign‑in to the members’ area and to share information about rehearsals, concerts, sheet music and retreats. To sign you in, we send a one‑time code to your e‑mail.
Legal basis: performance of the relationship between the choir and the member, and our legitimate interest in operating the members’ area.

b) Photographs and recordings of the choir’s activities (including children)
We publish photographs and recordings from concerts, rehearsals and events — which may include children — on the website and social media.
Legal basis: consent of the legal guardian. Consent is voluntary and can be withdrawn at any time; upon withdrawal we will remove the relevant photographs from the website.

c) Communication
When you contact us (by e‑mail, phone or a form), we process the data needed to handle your request.
Legal basis: legitimate interest in mutual communication.

d) Website statistics (Google Analytics)
If you grant consent to statistics cookies, we measure website traffic anonymously using Google Analytics (Google Ireland Ltd.). Without consent, nothing is measured.
Legal basis: consent. For details and withdrawal, see the Cookie Policy.

e) Website operation and security
Our hosting provider stores operational logs (e.g. IP addresses) for the time necessary to run and secure the site.
Legal basis: legitimate interest.

3. Children’s data

The choir works with children, so we pay increased attention to protecting their data. Consents (in particular to publishing photographs) are granted by the legal guardian and can be withdrawn at any time.

4. Who we share data with (processors)

Hosting and e‑mail provider: Seonet Multimedia s.r.o. (Gigaserver.cz) — website, database and e‑mail delivery.
Google Ireland Ltd. — website statistics (with consent only); may involve transfer outside the EU under appropriate safeguards (standard contractual clauses).
Where relevant, Černošice Art School (ZUŠ) as part of running the choir.

We do not sell your data or share it for third‑party marketing.

5. How long we keep data

We keep data only for as long as necessary for the given purpose — for the duration of membership, for the validity of your consent, or until you withdraw it. After that we delete or anonymise it.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object, and to withdraw consent at any time. You can exercise these rights at tuttelenote@gmail.com.

You also have the right to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech DPA), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

7. Changes

We may update this policy; the new version will be published on this page with its effective date.