Basic information – purpose, scope and method of processing
Personal data processing is carried out in accordance with Regulation (EU)
2016/679 of the European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of personal data
and the free movement of such data and repealing Directive 95/46/EC
(hereinafter referred to as the General Data Protection Regulation”) and in
accordance with the relevant internal legal regulations in the area of
personal data protection. On the basis of the obligation imposed by special
acts, the Business and Investment Development Agency CzechInvest, with its
registered office at Štěpánská 15, 120 00 Prague 2 – Nové Město
(Identification no.: 71377999), as the administrator of personal data
(hereinafter referred to as the “Administrator”), shall take into account the
rights pertaining to the data subject’s private and personal life.
The Administrator carries out processing of personal data for the purpose of
registration of persons and companies in the database of suppliers and, as the
case may be, promotion of such persons and companies and for offering the use
of their services and cooperation to potential interest parties. The personal
data of data subjects is processed in the following scope: name (or names),
surname, e-mail address, telephone number. Processing is carried out by means
of computer technology while adhering to all security principles for
administration and processing of personal data.
The period for processing personal data is derived from the time of its
provision until its withdrawal on the part of the data subject or
implementation of the database of suppliers (suppliers.czechinvest.org), or is stipulated in the relevant legal regulations. This refers to the
period that is absolutely necessary for ensuring the rights and obligations
arising from the relationship and from the relevant legal regulations.
Transfer of personal data
Based on the above, the data subject’s personal data may be transferred or
made accessible only to persons, bodies and institutions for which such right
arises from the above-mentioned legal regulation or in the public interest. No
automated decision-making shall occur in connection with the processing of
personal data.
Rights of the data subject
The data subject has the right to request from the Administrator provision of
information on the processing of such subject’s personal data.
The data subject has the right to demand that the administrator correct,
without undue delay, inaccurate personal data pertaining to the data subject.
With respect to the purposes of processing, the data subject has the right to
supplementation of incomplete personal data, including by means of providing
an additional statement.
The data subject has the right to demand that the Administrator delete,
without undue delay, personal data pertaining to the data subject, and the
Administrator has the obligation to delete such personal data without undue
delay if any of the reasons specified in the General Data Protection
Regulation are given.
The data subject has the right to demand that the Administrator restrict the
processing of personal data in the cases specified by the General Data
Protection Regulation.
In the cases specified by the General Data Protection Regulation, the data
subject has the right to obtain personal data pertaining to such subject which
the subject provided to the Administrator in a structured, commonly used and
machine-readable format, and the right to transfer such data to a different
administrator without the Administrator preventing such transfer.
Due to the fact that personal data processing is based on consent to personal
data processing provided by the data subject, such data subject has the right
to withdraw his/her consent at any time.
If the data subject believes that a breach of the legal regulations has
occurred in relation to his/her personal data, such subject has the right to
file a complaint with a supervisory authority. The supervisory authority in
the Czech Republic is the Office for Personal Data Protection.
The data subject consents to the processing of his/her personal data by the
Administrator in accordance with the information set forth above.
The data subject can exercise the above-mentioned rights via the form
available at
www.czechinvest.org.
It is possible to deliver the form using the following methods:
-
in person or by post delivered to the address Personal Data Protection
Officer, Business and Investment Development Agency CzechInvest, Štěpánská
15, 120 00 Prague 2
-
electronically, signed with a valid qualified signature, sent to the address
poverenec@czechinvest.org
- via data box – to ID: cyrj9gf
Obligations of the data subject
In the case of transfer of personal data about a third party via a form to the
database of suppliers (available at
suppliers.czechinvest.org), the data subject is obligated to ensure such third party’s written consent
to the use of such data in the context of the purpose and scope specified
above (including transfer to third parties).
A data subject who has the obligation to ensure the consent of third parties
shall further undertake to pay to the Business and Investment Development
Agency CzechInvest all costs including potential damage in the event that the
above-mentioned statement and consent prove to be incomplete or false or in
conflict with the rights of the persons set forth in the supplier database
form.