Register

Privacy and Cookie Policy

Last updated: 6 October 2026

This Privacy and Cookie Policy explains how personal data are processed when you visit and use the CEEDUCON website and how cookies and similar technologies are used.

This policy applies to the CEEDUCON website operated by the Czech National Agency for International Education and Research (“DZS”).

General information about personal data processing by DZS is available in the Principles of Personal Data Protection. This website policy provides additional information specific to the operation of this website and its cookies.

Separate privacy information applies to registration for CEEDUCON, participation in the conference, speakers, photographs, video and audio recordings and other event-related processing.

1. Data Controller

The controller of personal data processed in connection with this website is:

Czech National Agency for International Education and Research
Na Poříčí 1035/4
110 00 Prague 1
Czech Republic

Company ID: 61386839
VAT ID: CZ61386839
Email: info@dzs.cz
Phone: +420 221 850 100
Data box ID: tj8vfp3

For matters specifically related to CEEDUCON, you may also contact:

Email: ceeducon@dzs.cz

Data Protection Officer

The Data Protection Officer of DZS is:

Linda Anušić
Email: gdpr@dzs.cz
Phone: +420 725 358 686

2. Applicable Legal Framework

Personal data are processed in accordance with applicable legislation, in particular:

  • Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”);
  • Act No. 110/2019 Coll., on the Processing of Personal Data;
  • Act No. 127/2005 Coll., on Electronic Communications, in particular the rules governing the storage of information on, and access to information stored on, users’ devices.

Where a technology is not strictly necessary for the provision of a service expressly requested by the visitor, it is activated only after the visitor has provided the required prior consent.

3. Personal Data Processed When You Visit the Website

When you access the CEEDUCON website, certain technical information may be processed automatically.

This may include:

  • IP address;
  • date and time of access;
  • requested URL and referring URL;
  • browser type and version;
  • operating system and device information;
  • server response and technical communication data;
  • information necessary to detect errors, attacks or other security incidents.

Purpose

These data are processed for the purposes of:

  • delivering the website to your device;
  • maintaining the availability and stability of the website;
  • detecting and preventing misuse, attacks and security incidents;
  • troubleshooting technical problems;
  • protecting the website, its visitors and DZS information systems.

Legal basis

We process technical data necessary to operate and secure the CEEDUCON website under Article 6(1)(e) GDPR, as part of the public-interest tasks entrusted to DZS in international cooperation in education and the organisation of related conferences. The processing is based on Section 5(b) of Czech Act No. 110/2019 Coll.; the entrusted tasks are specified in Articles IV and V(e) and (t) of the DZS founding charter, as amended.

No technical information is used for marketing or behavioural profiling without the visitor’s consent.

Retention

We retain ordinary access and error logs for no longer than 12 months from their creation. Records needed to address a specific incident are retained separately for as long as necessary to investigate and resolve it or to establish, exercise or defend specific legal claims.

4. Cookies and Similar Technologies

The CEEDUCON website uses cookies and, where applicable, similar technologies such as browser storage.

Cookies are small data files stored on or accessed from a visitor’s device.

Strictly necessary technologies

These are necessary for:

  • basic website functionality;
  • security;
  • remembering privacy and cookie choices;
  • providing functions expressly requested by the visitor.

They may be used without consent where the legal conditions for the exemption from consent are met.

Optional technologies

These include, in particular:

  • analytics technologies;
  • optional third-party content;
  • embedded media that communicate with third-party providers.

Optional technologies are disabled by default and are activated only after the relevant consent has been given.

Simply continuing to browse the website, scrolling, closing the cookie banner or otherwise failing to make a choice is not considered consent.

5. Cookie Consent Management – Complianz

The website uses the Complianz consent management solution to record and respect visitors’ cookie choices.

Complianz may store the following strictly necessary preference cookies:

Cookie Purpose Storage period
cmplz_policy_id Records the version of the cookie policy/consent configuration 6 months
cmplz_functional Records the visitor’s functional preference 6 months
cmplz_consented_services Records services for which consent has been given 6 months
cmplz_preferences Records preference choices 6 months
cmplz_statistics Records the visitor’s analytics consent choice 6 months
cmplz_marketing Records the visitor’s marketing/third-party consent choice 6 months
cmplz_banner-status Records whether the consent banner has been handled 6 months

The periods shown reflect this website’s configuration. Your browser may shorten the storage period.

These cookies are used to remember privacy choices and do not themselves constitute consent to analytics or marketing.

The consent configuration may be renewed earlier where there is a material change in the technologies used, processing purposes, recipients or other circumstances relevant to the visitor’s original choice.

6. Your Cookie Choices

When first visiting the website, you are given a genuine choice regarding optional technologies.

You may:

  • Accept optional technologies;
  • Reject optional technologies;
  • Manage individual categories or services.

Rejecting optional technologies does not prevent access to the basic content and functions of the CEEDUCON website.

Optional technologies remain disabled where:

  • you reject them;
  • you close or leave the consent interface without giving consent;
  • you do not interact with the consent interface.

Consent may be changed or withdrawn at any time through the Cookie settings tab permanently displayed on every page of the website.

Withdrawal of consent is as easy as giving consent.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where technically possible, cookies associated solely with a withdrawn consent are removed after withdrawal.

7. Google Analytics 4

Subject to your prior consent, the website uses Google Analytics 4 (“GA4”) to obtain statistical information about how visitors use the website.

The service is provided by Google group companies, including Google Ireland Limited and, where relevant, Google LLC and other Google entities.

Data that may be processed

Depending on the configuration, Google Analytics may process:

  • pages and sections visited;
  • approximate time and duration of visits;
  • website interactions and events;
  • referring website or source;
  • device and browser characteristics;
  • approximate geographical information;
  • IP address and technical network information;
  • online and device identifiers.

DZS does not intentionally send names, email addresses or other directly identifying registration information to Google Analytics.

Purpose

Google Analytics is used to understand website usage and to improve the structure, functionality and content of CEEDUCON websites.

Legal basis

Google Analytics is activated only after consent.

The legal basis for processing is:
Article 6(1)(a) GDPR – consent.

The storage of or access to non-essential information on the visitor’s device is likewise performed only after prior consent in accordance with applicable electronic communications legislation.

Google Analytics cookies

Where consent has been provided, GA4 may use, in particular:

Cookie Purpose Storage period
_ga Distinguishes browser instances/users for statistical measurement up to 2 years
_ga_* Maintains and associates analytics session and property information up to 2 years

The periods shown reflect this website’s configuration. Your browser may shorten the storage period.

GA4 data retention

User-level and event-level data retention in Google Analytics 4 is set to no more than 14 months. Google deletes expired data through its scheduled monthly deletion process. This setting does not apply to standard aggregated reports and is separate from browser cookie lifetime.

8. Google Tag Manager / Google Tag

The website may use Google Tag Manager or related Google tag technology to manage website tags.

These technologies are not permitted to activate Google Analytics or any other optional tracking or storage before the corresponding consent has been provided.

The configuration must ensure that:

  • analytics and other optional tags are disabled by default;
  • a rejection is respected;
  • a withdrawn consent stops further optional processing;
  • no optional cookies or similar storage are created before consent.

Where the Google tag itself is treated as an optional third-party technology, it is loaded only after the corresponding consent.

9. YouTube and Embedded Media

Some pages may contain videos embedded from YouTube, a Google service.

Where possible, YouTube content is embedded using the privacy-enhanced youtube-nocookie.com mode.

Privacy-enhanced mode reduces certain forms of storage but does not prevent the visitor’s browser from communicating with Google when the video content is loaded.

Loading or playing embedded YouTube content may therefore result in the processing of information such as:

  • IP address;
  • device and browser information;
  • technical identifiers;
  • information about the page containing the video;
  • video loading and playback information;
  • interactions with embedded content.

Additional requests may be made to Google-operated domains used for video delivery, images, fonts and related technical resources.

Legal basis

YouTube content that involves optional third-party processing is not loaded until the visitor provides consent.

The legal basis is:
Article 6(1)(a) GDPR – consent.

A visitor who does not consent must still be able to use the remainder of the website, although the embedded video itself may not be available.

10. Third-Party Services and External Resources

The website may use third-party technical services only where they are necessary for website operation or where the visitor has provided the appropriate consent.

External services must be periodically reviewed.

A third-party service that is newly introduced and requires consent must not be activated for visitors until:

  1. it has been assessed;
  2. this policy and the consent interface have been updated where necessary; and
  3. a valid consent mechanism has been implemented.

The mere presence of a link to an external website does not normally cause data to be transferred to that website until the visitor follows the link.

11. WordPress and Website Administration

The CEEDUCON website uses WordPress as its content management system.

WordPress may use technical cookies for administration, authentication, security or other strictly necessary functions.

Cookies relating to authenticated WordPress administration, such as login or administrator preference cookies, apply to authorised website administrators and are not used to track ordinary CEEDUCON visitors for advertising purposes.

12. Recipients and Processors

Personal data are accessible, where necessary, to authorised DZS staff and the following providers: Websupport s.r.o. (web hosting) and, after your consent, Google Ireland Limited (Google Analytics website statistics and embedded YouTube videos). Website administration is carried out by DZS staff. Processors act under an agreement and DZS instructions. Data may also be disclosed to public authorities where required by law.

13. Transfers Outside the European Economic Area

When you use Google Analytics or YouTube (after your consent), personal data may be transferred to Google LLC in the United States. The transfer is based on the European Commission adequacy decision for the EU–US Data Privacy Framework, under which Google LLC is certified.

14. Registration for CEEDUCON

Conference registration is separate from ordinary use of the CEEDUCON website.

CEEDUCON registration may be provided through the Attendu event-management platform.

For personal data processed by Attendu on behalf of DZS in connection with registration and event management:

  • DZS remains the controller for the relevant CEEDUCON participant data;
  • Attendu acts as a processor under EU data protection law to the extent it processes guest data on DZS instructions.

Attendu may separately act as a controller for data processed for its own independent purposes, for example account or service administration where applicable.

Registration and participation: Information about personal data processing for CEEDUCON registration and participation is available here: DZS Information on the processing of personal data for participants of educational events and the taking of recordings.

15. Photographs, Video and Audio Recordings

Photographs, video recordings and audio recordings may be taken during CEEDUCON.

Photographs and recordings: Information about photographs and audio-visual recordings at CEEDUCON is available here: DZS Information on the processing of personal data for participants of educational events and the taking of recordings.

16. Retention of Personal Data

Personal data are not kept for longer than necessary for the purpose for which they were collected.

Retention periods for ordinary access and error logs are specified in Section 3, cookie lifetimes in Sections 5 and 7, and GA4 data retention in Section 7. Event-related retention periods are set out in the separate privacy notices for registration, participation and event documentation.

Data may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

17. Provision of Personal Data

Technical data necessary for establishing a connection with the website must be processed in order to deliver the website.

Providing consent for analytics, YouTube or other optional technologies is voluntary.

You will not be denied access to the basic CEEDUCON website merely because you refuse optional cookies or withdraw your consent.

Information required for conference registration is governed separately by the event registration notice. Mandatory and optional registration fields must be clearly identified.

18. Automated Decision-Making and Profiling

Personal data collected through ordinary use of the CEEDUCON website are not used by DZS to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Website analytics are used for statistical and website-improvement purposes, not to make such decisions about individual visitors.

19. Your Rights

Subject to the conditions laid down by applicable law, you have the right to:

  • obtain confirmation as to whether your personal data are being processed;
  • access your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • object to processing based on a public-interest task where applicable;
  • receive personal data in a portable format where the conditions for data portability are met;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a supervisory authority;
  • exercise rights relating to automated individual decision-making where applicable.

The availability of an individual right depends on the particular legal basis and circumstances of processing.

Exercising your rights

For questions concerning personal data or to exercise your rights, contact the Data Protection Officer:

Linda Anušić
Email: gdpr@dzs.cz
Phone: +420 725 358 686

You may also contact DZS through data box ID tj8vfp3.

Requests are handled in accordance with the time limits and conditions established by the GDPR.

20. Right to Lodge a Complaint

If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

You may contact DZS or its Data Protection Officer before lodging a complaint, but you are not required to do so.

21. Security of Personal Data

DZS uses appropriate technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • accidental or unlawful destruction;
  • loss;
  • alteration;
  • unauthorised disclosure;
  • other unlawful processing.

Access to personal data is limited according to roles and operational necessity.

22. Changes to This Policy

This policy is reviewed periodically and whenever there is a material change in:

  • website technologies;
  • cookies or similar technologies;
  • processors or other recipients;
  • purposes or legal bases of processing;
  • international transfers;
  • applicable legislation or regulatory guidance.

Where a change materially affects processing based on consent, visitors will be asked to make a new choice where required.

The current version of this policy is always made available on the CEEDUCON website.

Last updated: 6 October 2026

Skip to content