Privacy policy

1.1The controller of personal data is Tomáš Kasalický, IČO 14033917, with registered office at Mladotova 663/2, Kolovraty, 103 00 Praha 10 (the “Controller”). Contact for all questions and for exercising your rights: kasalicky@proton.me. No data protection officer has been appointed.

1.2This policy applies to the demo version of rhythmees, the platform for dance clubs (the “Platform”), at demo.rhythmees.com (the “Demo”) and to communication related to it. It does not apply to the portals and websites of individual clubs, which have their own policies.

2.1When the Demo is visited, technical data are processed: IP address, browser and device type, time and pages visited. They are processed in the operational logs of the hosting provider and kept for the period set by that provider, usually a few days.

2.2To protect against abuse (limiting the number of attempts to enter the Demo), the Controller stores the IP address together with the time of the attempt; these records are deleted automatically after 2 days at the latest.

2.3The legal basis is the Controller’s legitimate interest in ensuring the operation and security of the Demo (Article 6(1)(f) GDPR).

3.1The Controller uses the Vercel Web Analytics service, which measures traffic in aggregate, without cookies and without identifying individual visitors. The legal basis is the legitimate interest in improving the Demo (Article 6(1)(f) GDPR).

4.1By choosing a role, the user signs in to a shared sample account. The Controller records the time of entry and the chosen role, without any link to the user’s IP address or other identifiers.

4.2If a user receives a personal access link, the Controller keeps the link’s label (usually the name or club of the recipient), its validity period and the times it was used. These records are kept for the validity period of the link and then for no longer than 12 months, on the basis of the Controller’s legitimate interest in evaluating interest in the Platform (Article 6(1)(f) GDPR).

4.3The Demo is not intended for processing real personal data. If a user nevertheless enters such data or uploads a file, it is visible to other users of the Demo and is irreversibly deleted, including uploaded files, at the next reset of the Demo, usually during the following night.

5.1If a user writes to the Controller (e.g. to request access or with a question about the Platform), the Controller processes their e-mail address, name and the content of the communication in order to handle it and, where applicable, to negotiate the provision of the Platform (Article 6(1)(b) and (f) GDPR).

5.2These data are kept for as long as necessary to handle the matter and for subsequent negotiations, for no longer than 3 years from the last communication.

6.1The Demo uses only strictly necessary cookies and browser storage: the sign-in session to the Demo, remembering a personal access link, the chosen language and the colour theme. The Demo does not work without them, and therefore no consent is required for them under Section 89(3) of Act No. 127/2005 Coll.

6.2The Demo does not use third-party advertising, marketing or tracking cookies.

7.1The Controller uses the following processors: Vercel Inc. (hosting and visitor statistics), Supabase Inc. (database and sign-in), GitHub, Inc. (automation of the nightly reset of the Demo) and Proton AG (e-mail communication).

7.2Some processors are established in the USA. Transfers of data to the USA are covered by the EU–US Data Privacy Framework or, where applicable, by standard contractual clauses approved by the European Commission; Switzerland is covered by an adequacy decision.

7.3The Controller does not sell data, does not transfer it for marketing purposes and does not carry out automated decision-making or profiling.

8.1As a data subject, the user has the right of access to their personal data, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. These rights can be exercised at kasalicky@proton.me; the Controller will respond without undue delay and within one month at the latest.

8.2The user also has the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

9.1The Demo contains fictitious profiles of minors only to demonstrate the features for parents. The Demo is not intended for persons under 15 years of age.

9.2The Controller may update this policy; the current version with its effective date is always published on this page. See also the Demo terms of use.