INFORMATION ON PERSONAL DATA PROCESSING

This document describes the method of processing personal data, as performed by Česká centrála cestovního ruchu – CzechTourism (hereinafter “CzechTourism”), an allowance organisation of the Ministry for Regional Development of the Czech Republic, while being aware of the importance of protecting your personal data.
CzechTourism, which can be contacted at the following address, is the controller of your personal data:
 
Česká centrála cestovního ruchu – CzechTourism
Štěpánská 567/15
120 00 Prague 2
Company ID: 49277600
data box: yr9mzxx
 
When processing personal data, CzechTourism proceeds according to the valid legal regulation, namely in compliance with:

 
For better orientation, there are several basic terms you may come across in the text below:
Personal data – all information about the identified or identifiable person (name, surname, date of birth, e-mail, telephone number, other elements of physical, physiological, mental, economic, cultural and social identity).
Data subject – an individual whose personal data is processed (legal entities such as business corporations or other organisations do not have personal data).
Processing – any operation with personal data performed with or without the use of automated procedures (collecting, recording, sorting, storing, searching, using, copying, etc.).
Controller – CzechTourism as the subject who has determined the purpose and means of personal data processing.
Processor – an individual or a legal entity, a public authority, agency, or another subject that processes personal data for the controller.
Recipient – an individual or a legal entity, a public authority, agency, or another subject who is provided personal data.
Profiling – any form of automated personal data processing consisting in its use for the assessment of some personal aspects related to the individual (work performance, economic situation, state of health, personal preferences, interests, behaviour, etc.).
 
When processing your personal data, CzechTourism adheres to the principles defined by legal regulations, and therefore:  
CzechTourism never processes your personal data just because it wants or can, but always for a precisely set and defined purpose, i.e.:
  1. to meet its legal obligations (such as those stipulated by the act on public procurement, act on accounting, act on archiving and records management, and on amendments of certain other acts, etc.);
  2. to fulfil tasks in the public interest or to exercise public authority (e.g., answering queries, complaints and other public filings);
  3. to conclude and fulfil contractual relations (e.g., supplier contracts);
  4. for the purpose of its authorised interests (such as property protection through technical components of security, protection of expended financial resources, etc.);
  5. based on the consent with personal data processing (e.g., publishing photographs of employees on the website, arranging participation in competitions, workshops and other events organised by the agency).
 
The individual categories of your personal data are processed in relation to the individual purposes of processing:  
The personal data is only provided to other recipients when it is necessary to fulfil the aforesaid purposes, to protect and exercise the rights and interests of CzechTourism and in compliance with related regulations. Such recipients mostly include suppliers of IT services, providers of wage and accounting services, external consultants, cooperating law firms, co-organisers of events for the public and training. Other recipients include authorities active in criminal proceedings, courts, the Czech Police, etc.
 
CzechTourism may only process your personal data for a period required or permitted by the law, and for the period you have granted us consent with its processing, or until the moment you withdraw your consent.
 
CzechTourism approaches the processing responsibly and therefore your personal data is secured accordingly. Appropriate technical, physical and organisational measures are taken to secure personal data. Access to personal data is restricted to authorised recipients. Extra attention is paid to IT security and it is regularly revised.
All persons who encounter personal data by virtue of their job position (or within contractually accepted obligations) are trained and bound by the confidentiality obligation.
 
You may also exercise your data subject rights in relation to personal data processing:

 
You may exercise your rights with CzechTourism as the controller of your personal data, either by post or electronic communication at privacy@czechtourism.cz.
 
This information on personal data processing takes effect on 8 December 2020.