Under Regulation (EC) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), natural persons have in relation to their personal data and the controllers or processors of this data the following rights:

GDPR Article   Right Commentary
12-14 To be informed You have the right to be informed about what data your controller or processor is processing about you, for which purpose it does so, how long it retains the data, whether it transfers it onto other entities or intends to do so.
15 To access Access to your data, obtaining a copy, information about processing.
16 To rectification Right to rectify inaccurate or incomplete data.
17 To erasure If the purpose of the processing ceases, you have revoked consent or the processing is unlawful, you may request the deletion of your personal data.
18 To restrict processing You may request restriction on the processing of your personal data for the duration of resolving the objection; You must be informed of the cancellation of the restriction, including the reason thereof.
19 To the notification of changes or erasure or restriction of processing Notice of making changes to your personal data, erasure, restricting or terminating processing of your personal data, about recipients of your personal data.
20 To portability The right to obtain data in a structured standard or standardised format for some services. 
21 To objection If you have a legitimate interest because of your individual situation or against profiling or direct marketing, you can object to processing. The controller must demonstrate a legitimate reason for these activities.
22 Not to be subject to automated decision-making including profiling The right not to be subject to decisions made about exclusively by an automat. You can request a decision to be made by a person.
77 To object Submit a complaint with a supervisory authority in your country or the Office for Personal Data Protection. https://www.uoou.cz/
79 To effective judicial remedy You can address the courts in a dispute with a controller.
80 To be represented by non-for-profit body You may authorise a non-for-profit body to represent you in a dispute with the controller and they will be required to act with them.
82 To compensation for damage The controller is obliged to compensate the data subject for the damage they have suffered.

Table 1. Rights of data subject

IDENTITY AND CONTROLLER’S CONTACT DATA

The following person is your personal data controller:
Česká centrála cestovního ruchu – CzechTourism,
Vinohradská 46,
120 41 Prague
tel.: +420 221 580 111
fax: +420 224 247 516
Business ID No. (IČO): 49277600
Tax ID No. (DIČ): CZ49277600
Data box ID: yr9mzxx

The following person has been appointed a personal data protection officer, to whom you can direct inquiries or suggestions:
Officer: Ewald Smrčka
Contact data: email: privacy@czechtourism.cz, tel.:221 580 442