Under Regulation (EC) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), natural persons have in relation to their personal data and the controllers or processors of this data the following rights:
| GDPR Article |
Right |
Commentary |
| 12-14 |
To be informed |
You have the right to be informed about what data your controller or processor is processing about you, for which purpose it does so, how long it retains the data, whether it transfers it onto other entities or intends to do so. |
| 15 |
To access |
Access to your data, obtaining a copy, information about processing. |
| 16 |
To rectification |
Right to rectify inaccurate or incomplete data. |
| 17 |
To erasure |
If the purpose of the processing ceases, you have revoked consent or the processing is unlawful, you may request the deletion of your personal data. |
| 18 |
To restrict processing |
You may request restriction on the processing of your personal data for the duration of resolving the objection; You must be informed of the cancellation of the restriction, including the reason thereof. |
| 19 |
To the notification of changes or erasure or restriction of processing |
Notice of making changes to your personal data, erasure, restricting or terminating processing of your personal data, about recipients of your personal data. |
| 20 |
To portability |
The right to obtain data in a structured standard or standardised format for some services. |
| 21 |
To objection |
If you have a legitimate interest because of your individual situation or against profiling or direct marketing, you can object to processing. The controller must demonstrate a legitimate reason for these activities. |
| 22 |
Not to be subject to automated decision-making including profiling |
The right not to be subject to decisions made about exclusively by an automat. You can request a decision to be made by a person. |
| 77 |
To object |
Submit a complaint with a supervisory authority in your country or the Office for Personal Data Protection. https://www.uoou.cz/ |
| 79 |
To effective judicial remedy |
You can address the courts in a dispute with a controller. |
| 80 |
To be represented by non-for-profit body |
You may authorise a non-for-profit body to represent you in a dispute with the controller and they will be required to act with them. |
| 82 |
To compensation for damage |
The controller is obliged to compensate the data subject for the damage they have suffered. |
Table 1. Rights of data subject
✓
IDENTITY AND CONTROLLER’S CONTACT DATA
The following person is your personal data controller:
Česká centrála cestovního ruchu – CzechTourism,
Štěpánská 567/15
120 00 Prague 2
Business ID No. (IČO): 49277600
Tax ID No. (DIČ): CZ49277600
Data box ID: yr9mzxx