GDPR

Obecní dům, a.s. (hereinafter referred to as the Municipal House, or by the abbreviation MH) processes personal data in accordance with the legislation and regulations in effect in the Czech Republic, most notably, Act No. 110/2019 Coll. on the Protection of Personal Data and the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as Regulation)

In accordance with the Regulation, the Municipal House is a data controller for personal data processed in its departments as described in the Municipal House Charter. The Municipal House address resides at nám. Republiky 5, 111 21 Praha Staré Město and the company’s registration number is 27251918. The Municipal House is presided by head of the board of directors, who has charged the head of the office of the board of directors to be responsible for the compliance with the Regulation requirements. Pursuant to Regulation 2016/679, the Municipal House has appointed a data protection officer as of 25 May 2018. The contact information for the head of the board of directors and the head of the board of directors office and the data protection officer can be found on the MH website: http://www.obecnidum.cz/contacts or can be obtained from any MH employee.

The Municipal House processes the following categories of personal data:

In some cases, the MH may process other, further unspecified personal data, of which the MH will always inform the person concerned in advance and any time at the person’s request. All personal data are processed only within the necessary scope of duties as described in the Municipal House Charter or as required in order to conclude or fulfil contractual relationships with the physical person.

The Municipal House processes personal data in order to comply with legal requirements concerning the different scope of duties in the Municipal House departments as described in the Municipal House Charter, or in order to conclude or fulfil a contractual relationship and thus achieve its economic goals.

The scope of duties is based on legal requirements which regulate duties of the Municipal House, specifically:

The Municipal House does not transfer any personal data to recipients in other countries or international organizations that are not bound by the Regulation.

The Municipal House does not process any personal data using profiling (automated data processing).

The Municipal House only processes individual data for the period of time in which a legal reason is in effect (that is, as long as the act on the processing is in effect), or for the duration of a contractual relationship (including warranty periods and periods when a legal claim against any contractual party could arise), in which the subject of data processing is a participant. As concerns duties described in the Municipal House Charter, the processing periods are presented in the Municipal House Code Governing the Safe Destruction and Archival of Official Documents. After period for which data processing is required ends, personal data are either safely destroyed, or anonymized, or treated in accordance with special legislation (particularly Act No. 499/2004 Coll. on Archiving and Records Management and on the Amendment of Selected Acts, and Act No. 121/2000 Coll. on Copyright).

Notice of legal right of personal data subjects pursuant Act. No. 101/2000 Coll. on the Protection of Personal Data:

Pursuant to Articles 1, 11, 12 and 21 of the Act No. 101/2000 Coll. on the Protection of Personal Data, the Municipal House informs all physical persons whose personal data are processed (hereinafter also referred to as data subjects) by it, about the following legal rights which they possess:

A data subject has the right of access to personal data which have been collected concerning him or her, and to his or her personal data and the right of the correction of his or her personal data. Every data subject who discovers or believes that the controller or processor processes his or her personal data in a manner which is in conflict with the protection of the private and personal life of the data subject, or in conflict with the law, particularly if the personal data are not relevant with regard to the purposes for which they are processed, he or she is entitled to demand an explanation from the controller or processor and to demand that it is rectified without delay. In particular this may concern blocking, correcting, adding to or the removal of personal data. If the demand of the data subject is found to be justified, the controller or processor will rectify the situation without delay. If the controller or the collector does not comply with the data subject’s demand, the data subject has the right to file a complaint with the Office for Personal Data Protection (this process does not exclude the data subject’s right to lodge a complaint with the Office for Personal Data Protection immediately, without having contacted the controller or collector prior to filing a complaint).

Notice of the rights of the personal data subject for the period of 25 May 2018 pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “Regulation”):

A physical person, whose personal data are processed by the Municipal House (hereinafter also referred to as the data subject), is entitled to exercising the following rights towards the Municipal House:

1. request an access to the subject’s personal data that are processed by the Municipal House, which means the right to obtain from the Municipal House as the controller a confirmation whether the personal data concerning him or her are or are not processed and if so, then the subject has the right to obtain access to those personal data and other information as specified in Article 15 of the Regulation.
2. request the correction of the subject’s personal data that the Municipal House processes if they are inaccurate or incomplete;
3. request a removal of personal data in the cases specified in Article 17 of the Regulation, especially if the purpose or legal reasons for the processing of the personal data have ended;
4. request restriction of the personal data processing in cases specified in Article 18 of the Regulation;
5. obtain personal data related to the subject and
   1. which the Municipal House processes based on his or her consent, or
   2. which the Municipal House processes in order to fulfil a contract in which the subject is a contractual party or for the implementation of measures adopted prior to the conclusion of the contract as requested by the data subject in a structured, commonly used and machine readable format. The data subject has the right to transmit those data to another controller, under the conditions and with restrictions specified in Article 20 of the Regulation, and
6. the data subject has the right to object to the processing of the data pursuant to Article 21 of the Regulation on specific grounds relating to his or her particular situation.
7. withdraw his consent to personal data processing. This withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. In some cases as stipulated by the Regulation, the Municipal House is not obliged to act on the request of the data subject partially or fully. This concerns particularly those cases when the request is manifestly unfounded or excessive, in particular because of their repetitive character or because it is in conflict with other legal regulations which establish legal reason for processing personal data. In these cases the Municipal House may                                         If the Municipal House receives a request from the data subject about exercising his or her rights as specified in this document, the MH shall inform the data subject on action taken without undue delay and in any event within one month of the receipt of the request. This period may be extended by another two months if necessary and with respect to the complexity and number or requests.

1. charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
2. refuse to act on the request.

If the Municipal House does not take action on the request of the data subject, the Municipal House shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action.

If the Municipal House receives a request from the data subject exercising his or her rights, but has reasonable doubts concerning the identity of the natural person making the request, the MH may request the provision of additional information necessary to confirm the identity of the data subject.

Should you have comments or questions concerning personal data protection or should you like to contact the Municipal House concerning your legal rights, send an email to zpolakova@obecnidum.cz, or communicate them to the Municipal House data protection officer using the contact information published on the MH website at http://www.obecnidum.cz/en/oddeleni/data-protection-officer/ or submit them or send them to the Municipal House, nám. Republiky 5, 111 21 Prague – Old Town, or contact the Municipal House via data box ID cy6ff6p.

If the data subject is not satisfied with the manner the Municipal House facilitated exercising of his or her rights, he or she may lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, e-mail: posta@uoou.cz, https://www.uoou.cz