Who is responsible for your data

This notice covers the website pulsecore-conferences.com. The controller of the personal data collected through it is:

PulseCore Conferences s.r.o.
Korunní 63, 120 00 Prague, Czech Republic
Email: bernard.gourion@pulsecore-conferences.com
Phone: +420 234 290 861

For any question about your data, or to exercise the rights described below, write to bernard.gourion@pulsecore-conferences.com.

What this website collects, and why

Most pages of this website collect nothing about you beyond the technical server logs described below. Personal data is collected only when you use one of the three forms: the contact form, the email updates form and the email preferences form.

The contact form

When you send a message through the contact form, the website stores your name, email address, company (if you give one), subject and message, together with the date and time and the IP address the message came from. The message is kept in a file on the web server, outside the part of the server that is reachable from the web, and the website also forwards it by email to the team’s mailbox.

We use it to answer your enquiry and, when you ask to book a pass, to arrange that booking. The legal basis is the steps you ask us to take before a contract (Article 6(1)(b) GDPR) and, for other enquiries, our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR).

To stop automated abuse, each connection may send at most five messages per hour. For this the website keeps a one-way hash of the sending IP address with the times of its recent attempts; only the attempts of the last hour are counted.

Email updates

When you subscribe on the Email Updates page, the website stores your first and last name and business email address, the company, job title and country if you give them, the exact consent sentence you agreed to with the date and time, and the IP address and browser identification of the request as a record of that consent. It also checks that the domain of your email address can receive email, which is a lookup of the domain name only.

Your subscription only becomes active once you open the personal confirmation link for your address. The link can be used once and expires after 7 days. Sending of these confirmation emails is not switched on yet: until it is, a new request stays unconfirmed, and an unconfirmed address never receives marketing emails.

The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time on the Email Preferences page or by writing to bernard.gourion@pulsecore-conferences.com; withdrawing does not affect what was done with your consent before.

Unsubscribing

When you unsubscribe on the Email Preferences page, your address is added to a suppression list with the date and time, IP address and browser identification of the request, and any subscription for it is marked as unsubscribed. The suppression list exists so that we do not email that address again, so an entry is kept rather than deleted. It is set aside only if you later subscribe again and confirm that new subscription. The legal basis is our legitimate interest in respecting your choice (Article 6(1)(f) GDPR).

Cookies

The website sets a cookie only on the pages with a form: pc_contact on the contact page, pc_subscribe on the Email Updates page and pc_unsubscribe on the Email Preferences page. Each one is limited to its own page, holds only a random session identifier, cannot be read by scripts, and is deleted when you close your browser. On the server, the session holds a security token that protects the form against forged submissions and the one-time message shown after you send it. These cookies are strictly necessary for the forms to work. No other page sets a cookie.

Server logs

Like any website, the web server records technical information about each request, such as the IP address, the date and time, the page requested and the browser identification, and it records technical errors of the website itself. These logs are used to run the website, to keep it secure and to fix faults, based on our legitimate interest in doing so (Article 6(1)(f) GDPR).

What this website does not use

This website uses no analytics or statistics service, no advertising, no tracking or advertising cookies, no social media plugins and no content embedded from other websites. Every page, image, stylesheet and script is served by this website itself, and the pages contain no links to other websites.

Who receives your data

Your data is seen by the PulseCore Conferences s.r.o. staff who answer enquiries, arrange bookings and manage email updates. It also passes through the provider that hosts the web server and the provider that delivers email to the team’s mailbox, which process it only to provide those services.

How long it is kept

This website does not delete enquiries or subscriber records automatically after a fixed period: they are kept while they are needed for the purposes above, and you can ask us to delete them at any time. Unused confirmation links stop working after 7 days. Entries on the suppression list are kept for as long as we send marketing emails, so that your choice keeps being respected.

Your rights

Under the General Data Protection Regulation you have the right to:

access the personal data we hold about you and receive a copy of it;
have inaccurate data corrected, and have data deleted or its use restricted;
receive the data you gave us in a commonly used format (data portability);
object to processing based on our legitimate interest, and to direct marketing at any time;
withdraw your consent to email updates at any time.

To use these rights, write to bernard.gourion@pulsecore-conferences.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work. In the Czech Republic, where PulseCore Conferences s.r.o. is based, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).