goldenlive
goldenlive
Enter your account details. After logging in, the system will automatically recognize whether you are a participant or a Member.
Controller:
GOLDEN LIVE s. r. o.
Registered office: Kosorín 9, 966 24 Kosorín, Slovak Republic
Company ID: 57 820 368
E-mail: gl@goldenlive.eu
Website: www.goldenlive.eu
Effective date: 2 August 2026
GOLDEN LIVE s. r. o., with its registered office at Kosorín 9, 966 24 Kosorín, Slovak Republic, Company ID: 57 820 368, as the controller of personal data (hereinafter referred to as the „Controller“), pays due attention to the protection of personal data and respects the right of every individual to the protection of their privacy.
This Privacy Policy and Terms of Personal Data Processing (hereinafter referred to as the „Policy“) explain how the Controller collects, uses, stores, protects and discloses personal data of natural persons when using the website www.goldenlive.eu, when registering users, using services, participating in competitions and reality-show projects, voting, communicating with the Controller and during other activities related to the Controller's operations.
The Controller processes personal data in accordance in particular with:
The GDPR requires an appropriate legal basis to be determined for the processing of personal data and requires the data subject to be adequately informed about the purposes, scope and other circumstances of the processing.
The controller of personal data is:
GOLDEN LIVE s. r. o.
Kosorín 9
966 24 Kosorín
Slovak Republic
Company ID: 57 820 368
E-mail: gl@goldenlive.eu
Website: www.goldenlive.eu
The Controller determines the purposes and means of processing personal data to the extent that it acts as a controller within the meaning of the GDPR.
If the Controller is not required to appoint a Data Protection Officer under the GDPR, requests concerning personal data protection may be sent to gl@goldenlive.eu.
The Controller may process personal data primarily of the following categories of persons:
Depending on the specific purpose, the Controller may process in particular:
The Controller does not process passwords in readable form; when storing them, it uses appropriate security mechanisms to protect login credentials.
When making payments, the Controller may process data related to the payment, its status, transaction identification and the order.
Payment data necessary to complete a payment may be processed through the payment service provider Stripe. The Controller has neither the intention nor the need to store complete payment card details if their processing is handled directly by the payment service provider.
Stripe states in its Privacy Center that it has separate personal data protection mechanisms, a DPA and rules concerning data transfers.
The Controller processes personal data according to the specific purpose.
Personal data are processed for the purpose of:
The legal basis is primarily the performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.
The Controller processes data necessary for user authentication and the secure operation of the user account.
This may include in particular:
The legal basis may be the performance of a contract pursuant to Article 6(1)(b) of the GDPR and the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, in particular for security purposes, prevention of account misuse and protection of information systems.
The Controller may process data related to paid services, subscriptions or membership fees.
The purposes of processing are:
The legal basis is primarily:
The payment transaction may be carried out through the Stripe service.
The Controller may organize competitions, castings, reality-show projects and other similar activities.
As part of these activities, the following may be processed:
The purposes may include in particular:
The legal basis is determined according to the specific processing. Administration of participation may be based on the performance of a contract, while voluntary publication of photographs, videos or voice recordings may be based on consent.
Participation in a reality-show project or another audiovisual project may involve the creation of photographs, video recordings and voice recordings.
These materials may be used in particular:
If consent is required for a specific use, the Controller will obtain it separately and in a manner allowing proof of its granting.
Consent must be specific and, where there are several different purposes, it should not automatically be considered consent to all purposes.
If the rules of a specific project allow it, the Controller may create a public participant profile.
The profile may contain, for example:
The scope of data that will be publicly available must be communicated to the participant before publication.
The Controller may organize public voting.
The following may be processed during voting, for example:
The data may be processed for the purposes of:
The Controller may use technical and organizational measures to prevent manipulation of voting.
Voting results may be published on the website or through the project's communication channels to the extent determined by the rules of the specific competition or project.
If a result contains personal data of a participant, the Controller will provide the participant with appropriate information about such processing.
Photographs, video recordings and other audiovisual materials may be used for marketing and promotional purposes only to the extent legally permissible and about which the data subject has been informed.
If consent is the legal basis, such consent must be separate from consent required for other purposes where this is necessary due to the nature of the processing.
The data subject may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Content related to the project may be published on the Controller's social media accounts.
When publishing photographs, videos or other materials containing personal data, the Controller proceeds according to the legal basis applicable to the specific processing.
Social media platforms may independently process the personal data of their users according to their own privacy policies.
When submitting a contact form, the Controller may process:
The purpose is to handle the request, communicate with the user and address their question.
Depending on the nature of the request, the legal basis is primarily the legitimate interest pursuant to Article 6(1)(f) of the GDPR or taking steps prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.
The website may use cookies and similar technologies.
Cookies may be used in particular for:
Technically necessary cookies may be used to the extent necessary to provide the requested service.
Analytical or other non-essential cookies are used in accordance with the user's settings and applicable legal requirements.
The Controller uses Google Analytics 4 to analyze website traffic and usage.
Google Analytics may process technical and online identification data that enable analysis of website usage.
When using analytical cookies, the website settings and consent mechanism must be configured to comply with applicable cookie and personal data protection requirements.
Google provides Google Analytics customers with specific data processing terms and rules concerning international data transfers.
Depending on the specific situation, the Controller uses primarily the following legal bases:
Article 6(1)(b) of the GDPR.
It is used, for example, for:
Article 6(1)(c) of the GDPR.
It is used, for example, for:
Article 6(1)(f) of the GDPR.
It may concern, for example:
When relying on legitimate interest, the Controller assesses whether its interest does not override the rights and freedoms of the data subject. The GDPR expressly includes legitimate interest among the legal bases.
Article 6(1)(a) of the GDPR.
Consent may be used in particular for voluntary:
Consent must be freely given, specific, informed and unambiguous.
In the context of reality-show and competition projects, the Controller may encounter situations where a participant provides data belonging to special categories of personal data under Article 9 of the GDPR.
This may include data concerning:
The Controller will not request such data if their processing is not necessary and legally justified.
If special categories of personal data are processed, the Controller will ensure that an applicable exception under Article 9 of the GDPR exists. One possible exception is the explicit consent of the data subject, provided that the statutory conditions are met.
If a user provides the Controller with data through a social media platform or uses social media to interact with the project, the Controller may process data that are available and lawfully obtained in connection with such interaction.
The scope of processing is governed by the specific purpose and the rules of the relevant social media platform.
Personal data may, where necessary, be disclosed in particular to:
The Controller discloses personal data only to the extent necessary to fulfil the specific purpose.
If the Controller entrusts another person with processing personal data on its behalf, it will ensure that an appropriate contractual relationship is concluded in accordance with the GDPR.
The processor may not use personal data for its own purposes beyond the applicable legal basis and contractual authorization.
Some providers of technological, analytical, cloud or payment services may process personal data outside the European Economic Area.
If personal data are transferred to a third country, the Controller will ensure that such transfer is carried out in accordance with Chapter V of the GDPR.
This may include, for example:
Google states in its current terms for European transfers that it provides mechanisms for cases of restricted transfers, including applicable contractual mechanisms.
The Controller retains personal data only for as long as necessary to fulfil the purpose for which they were collected, or for the period required by applicable law.
Indicatively, this may include:
| Purpose | Retention Period |
|---|---|
| User account | for the duration of the account's existence and for a reasonable period after its deletion |
| Payments and accounting data | according to statutory accounting and tax retention periods |
| Contact forms | for the period necessary to process the request and subsequent communication |
| Security logs | for a period appropriate to the security purpose |
| Public profile | during participation/the project or until withdrawal of the relevant consent, if consent is the legal basis |
| Marketing consent | until withdrawal of consent or according to the applicable rules |
| Audiovisual archive | according to the purpose of the project and the legal basis |
| Voting | for the period necessary to verify and evaluate voting and protect legal claims |
Specific retention periods may be adjusted according to individual projects and the Controller's statutory obligations.
The Controller adopts appropriate technical and organizational measures to protect personal data against:
Measures may include in particular:
If a security incident occurs that may constitute a personal data breach, the Controller will take appropriate measures to investigate it, limit its consequences and remedy the situation.
Where required by the GDPR, the Controller will fulfil its notification obligations towards the competent supervisory authority and the affected data subjects.
Under the GDPR, a data subject has in particular the right:
The scope of individual rights depends on the specific legal basis and circumstances of the processing.
The data subject has the right to request the Controller to confirm whether their personal data are being processed and, under the conditions of the GDPR, to access such data and additional information about their processing.
If personal data are inaccurate or incomplete, the data subject may request their correction or completion.
Under the conditions set out in the GDPR, the data subject may request the deletion of their personal data.
However, the right to erasure is not absolute. The Controller may be required to retain certain data, for example, due to a legal obligation or for the purpose of establishing, exercising or defending legal claims.
Under the conditions of the GDPR, the data subject may request restriction of the processing of their personal data.
If the conditions under the GDPR are met, the data subject may request their personal data to be provided in a structured, commonly used and machine-readable format.
Under the conditions of the GDPR, the data subject may object to the processing of personal data based on the legitimate interest of the Controller.
If personal data are processed for direct marketing purposes, the data subject has the right to object to such processing.
If processing is based on consent, the data subject may withdraw their consent at any time.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Consent may be withdrawn by sending a request to:
The data subject may exercise their rights via:
The request should preferably include:
The Controller may, to a reasonable extent, request additional information necessary to verify the identity of the applicant.
According to information from the Office for Personal Data Protection of the Slovak Republic, the Controller must handle the request without undue delay and no later than one month from its receipt; under statutory conditions, the period may be extended.
If the data subject believes that the processing of their personal data violates the GDPR or the laws of the Slovak Republic, they have the right to lodge a complaint with the competent supervisory authority.
The data subject has the right to contact the Office, particularly if they believe that their rights have not been respected in the processing of personal data.
In the course of normal use of the website, the Controller may not carry out decision-making based solely on automated processing that produces legal effects or similarly significant effects on the data subject.
If such processing were introduced, the Controller would provide data subjects with information and ensure the applicable rights under the GDPR.
The Controller pays increased attention to the protection of children's personal data.
If a specific service or project allows participation by minors, the Controller will ensure specific rules appropriate to the age of participants and the nature of the processing.
For online services, it is also necessary to take into account the specific rules of the GDPR and Slovak law concerning the consent of a child and the consent of a legal representative. The EDPB emphasizes the need for special protection of children and age-appropriate information.
A participant in a reality-show or competition may be publicly presented as part of the project to the extent that was communicated to the participant before the relevant processing began.
This may include in particular:
The scope of public disclosure must correspond to the specific purpose and legal basis.
The Controller may retain photographs, video recordings and voice recordings related to GOLDEN LIVE projects for the purposes of:
If a specific use is based on consent, withdrawal of consent is assessed according to the nature of the specific use and other legal obligations of the Controller.
The Controller undertakes to process only personal data that are adequate, relevant and necessary to achieve the specific purpose of processing.
The Controller will not request personal data merely because it could technically obtain them.
The Controller takes appropriate measures to ensure that personal data are accurate and, where necessary, kept up to date.
The data subject may request correction of inaccurate or incomplete data.
The Controller may change or update this Policy in particular due to:
The current version of the Policy will be published on the website www.goldenlive.eu .
If a change would have a significant impact on the rights or obligations of data subjects, the Controller will ensure that the data subjects are adequately informed.
For questions concerning personal data protection, please contact:
This Policy constitutes the Controller's general information documentation concerning the processing of personal data.
Specific processing conditions may be supplemented by other documents, in particular:
In the event of a conflict between the general Policy and specific information provided to a participant for a particular processing purpose, the specific purpose and legal basis shall be assessed in accordance with applicable legislation.
GOLDEN LIVE s. r. o.
Effective date: 2 August 2026
Last updated: 2 August 2026
Nastavenia Cookies