GDPR

Obecní dům, a.s. (hereinafter referred to as the Municipal House, or by the abbreviation MH) processes personal data in accordance with the legislation and regulations in effect in the Czech Republic, most notably, Act No. 101/2000 Coll. on the Protection of Personal Data and the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as Regulation).

In accordance with the Regulation, the Municipal House is a data controller for personal data processed in its departments as described in the Municipal House Charter. The Municipal House address resides at nám. Republiky 5, 111 21 Praha Staré Město and the company’s registration number is 27251918. The Municipal House is presided by head of the board of directors, who has charged the head of the office of the board of directors to be responsible for the compliance with the Regulation requirements. Pursuant to Regulation 2016/679, the Municipal House has appointed a data protection officer as of 25 May 2018. The contact information for the head of the board of directors and the head of the board of directors office and the data protection officer can be found on the MH website: http://www.obecnidum.cz/en/oddeleni/top-management/ and http://www.obecnidum.cz/en/oddeleni/data-protection-officer/  or can be obtained from any MH employee.

The Municipal House processes the following categories of personal data:

·         Bank account
·         ID number
·         Date
·         Date of birth
·         Delivery address
·         E-mail
·         Company
·         Company registration number (IČ) / tax identification number (DIČ)
·         Information system of data boxes (ISDS)
·         First and last names
·         Complete proceedings of administrative infractions
·         Department file and document audit, including personal data at the pertinent department
·         Economic and social conditions
·         Place of birth
·         Gender
·         Insurance company
·         Residence permit
·         No administrative infraction record in criminal records
·         Residence permit card owned by a foreigner
·         Family status
·         Birth registration number
·         Court decision and resolution
·         Citizenship
·         Telephone number
·         Criminal records
·         Permanent address
·         Education
·         Medical fitness

In some cases, the MH may process other, further unspecified personal data, of which the MH will always inform the person concerned in advance and any time at the person’s request. All personal data are processed only within the necessary scope of duties as described in the Municipal House Charter or as required in order to conclude or fulfil contractual relationships with the physical person.

The Municipal House processes personal data in order to comply with legal requirements concerning the different scope of duties in the Municipal House departments as described in the Municipal House Charter, or in order to conclude or fulfil a contractual relationship and thus achieve its economic goals.

The scope of duties is based on legal requirements which regulate duties of the Municipal House, specifically:

Act No. 1/1993 Coll. Constitution of the Czech Republic, as amended
Act No. 106/1999 Coll. on Free Access to Information
Act No. 108/2006 Coll. on Social Services
Act No. 121/2000 Coll. on Copyright and Rights Related to Copyright and on Amendments to Certain Acts (the Copyright Act)
Act No.133/1985 Coll. on Fire Protection
Act No.155/1995 Coll. on Pension Insurance
Act No.159/2006 Coll. on Conflict of Interests
Act No.17/1992 Coll. on Environment, as amended
Act No.18/2004 Coll. on the Recognition of Professional Qualifications and Other Competencies of Nationals of Member States of the European Union and on the amendment to some other acts (Act on the Recognition of Professional Qualifications)
Act No.183/2006 Coll. Building Act
Act No.185/2001 Coll. on Waste and on the Amendment of Some Other Acts
Act No.186/2013 Coll. on Czech Citizenship
Act No.187/2006 Coll. on Sickness Insurance
Act No.2/1993 Coll. Charter of Fundamental Rights and Freedoms
Act No.201/2012 Coll. on Air Protection
Act No.235/2004 Coll. on Value Added Tax
Act No.239/2000 Coll. on Integrated Rescue System and on the Amendment of Some Other Acts
Act No.250/2016 Coll. on Liability for Offences and the Procedure of Offenses
Act No.251/2005 Coll. on Labor Inspection
Act No.254/2001 Coll. Water Act
Act No.256/2013 Coll. Cadastral Act
Act No.262/2006 Coll. Labor Code
Act No.269/1994 Coll. on Criminal Records
Act No.274/2001 Coll. on Water Supply and Sewerage Systems
Act No.280/2009 Coll. Tax Code
Act No.326/1999 Coll. on the Residence of Foreign Nationals in the Czech Republic
Act No.340/2015 Coll. on the Register of Contracts
Act No.359/1999 Coll. on the Social and Legal Protection of Children
Act No.340/2015 Coll. on Special Conditions for the Effectiveness of Some Contracts, the Disclosure of These Contracts and Agreements Registry (Registry Law Contracts)
Act No.435/2004 Coll. on Employment
Act No.499/2004 Coll. on Archiving and Records Management and on the Amendment of Selected Acts
Act No.513/1991 Coll. Commercial Code – replaced by 89/2012 Coll.
Act No.561/2004 Coll. on Pre-School, Basic, Secondary, Tertiary Professional and Other Education (Education Act)
Act No.563/1991 Coll. on Accountancy
Act No.582/1992 Coll. on the Organization and Implementation of Social Security
Act No.586/1992 Coll. on Income Taxes
Act No.589/1992 Coll. on Social Security Insurance and State Employment Policy Contributions
Act No.592/1992 Coll. on General Health Insurance Premium
Act No.65/2017 Coll. on the Protection of Health from Harmful Effects of Addictive Substances
Act No.89/2012 Coll. Civil Code
Act No.90/2012 Coll. on Business Corporations
Regulation No. 10/2016 Coll. Information from the Energy Regulatory Office Concerning the Publication of a Price Decision
Regulation No. 14/2005 Coll. Regulation concerning Pre-School Education
Regulation No. 268/2009 Coll. Regulation concerning Technical Requirements for Building Works
Regulation No. 270/2010 Coll. Regulation concerning Stocktaking of Property and Obligations
Regulation No. 410/2009 Coll. For the implementation of some of the provisions stipulated in Act No. 563/1991 Coll., on Accountancy, as amended, for selected accounting units
Regulation No. 679/2016 Coll. EU Regulation, General Data Protection Regulation (GDPR)

The Municipal House does not transfer any personal data to recipients in other countries or international organizations that are not bound by the Regulation.

The Municipal House does not process any personal data using profiling (automated data processing).

The Municipal House only processes individual data for the period of time in which a legal reason is in effect (that is, as long as the act on the processing is in effect), or for the duration of a contractual relationship (including warranty periods and periods when a legal claim against any contractual party could arise), in which the subject of data processing is a participant. As concerns duties described in the Municipal House Charter, the processing periods are presented in the Municipal House Code Governing the Safe Destruction and Archival of Official Documents. After period for which data processing is required ends, personal data are either safely destroyed, or anonymized, or treated in accordance with special legislation (particularly Act No. 499/2004 Coll. on Archiving and Records Management and on the Amendment of Selected Acts, and Act No. 121/2000 Coll. on Copyright).

Notice of legal right of personal data subjects pursuant Act. No. 101/2000 Coll. on the Protection of Personal Data:

Pursuant to Articles 1, 11, 12 and 21 of the Act No. 101/2000 Coll. on the Protection of Personal Data, the Municipal House informs all physical persons whose personal data are processed (hereinafter also referred to as data subjects) by it, about the following legal rights which they possess:

A data subject has the right of access to personal data which have been collected concerning him or her, and to his or her personal data and the right of the correction of his or her personal data. Every data subject who discovers or believes that the controller or processor processes his or her personal data in a manner which is in conflict with the protection of the private and personal life of the data subject, or in conflict with the law, particularly if the personal data are not relevant with regard to the purposes for which they are processed, he or she is entitled to demand an explanation from the controller or processor and to demand that it is rectified without delay. In particular this may concern blocking, correcting, adding to or the removal of personal data. If the demand of the data subject is found to be justified, the controller or processor will rectify the situation without delay. If the controller or the collector does not comply with the data subject’s demand, the data subject has the right to file a complaint with the Office for Personal Data Protection (this process does not exclude the data subject’s right to lodge a complaint with the Office for Personal Data Protection immediately, without having contacted the controller or collector prior to filing a complaint).

Notice of the rights of the personal data subject for the period of 25 May 2018 pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “Regulation”):

A physical person, whose personal data are processed by the Municipal House (hereinafter also referred to as the data subject), is entitled to exercising the following rights towards the Municipal House:

  1. request an access to the subject’s personal data that are processed by the Municipal House, which means the right to obtain from the Municipal House as the controller a confirmation whether the personal data concerning him or her are or are not processed and if so, then the subject has the right to obtain access to those personal data and other information as specified in Article 15 of the Regulation.
  2. request the correction of the subject’s personal data that the Municipal House processes if they are inaccurate or incomplete;
  3. request a removal of personal data in the cases specified in Article 17 of the Regulation, especially if the purpose or legal reasons for the processing of the personal data have ended;
  4. request restriction of the personal data processing in cases specified in Article 18 of the Regulation;
  5. obtain personal data related to the subject and
    1. which the Municipal House processes based on his or her consent, or
    2. which the Municipal House processes in order to fulfil a contract in which the subject is a contractual party or for the implementation of measures adopted prior to the conclusion of the contract as requested by the data subject in a structured, commonly used and machine readable format. The data subject has the right to transmit those data to another controller, under the conditions and with restrictions specified in Article 20 of the Regulation, and
  6. the data subject has the right to object to the processing of the data pursuant to Article 21 of the Regulation on specific grounds relating to his or her particular situation.
  7. withdraw his consent to personal data processing. This withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. In some cases as stipulated by the Regulation, the Municipal House is not obliged to act on the request of the data subject partially or fully. This concerns particularly those cases when the request is manifestly unfounded or excessive, in particular because of their repetitive character or because it is in conflict with other legal regulations which establish legal reason for processing personal data. In these cases the Municipal House may                                         If the Municipal House receives a request from the data subject about exercising his or her rights as specified in this document, the MH shall inform the data subject on action taken without undue delay and in any event within one month of the receipt of the request. This period may be extended by another two months if necessary and with respect to the complexity and number or requests.
  1. charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
  2. refuse to act on the request.

If the Municipal House does not take action on the request of the data subject, the Municipal House shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action.

If the Municipal House receives a request from the data subject exercising his or her rights, but has reasonable doubts concerning the identity of the natural person making the request, the MH may request the provision of additional information necessary to confirm the identity of the data subject.

Should you have comments or questions concerning personal data protection or should you like to contact the Municipal House concerning your legal rights, send an email to zpolakova@obecnidum.cz, or communicate them to the Municipal House data protection officer using the contact information published on the MH website at http://www.obecnidum.cz/en/oddeleni/data-protection-officer/ or submit them or send them to the Municipal House, nám. Republiky 5, 111 21 Prague – Old Town, or contact the Municipal House via data box ID cy6ff6p.

If the data subject is not satisfied with the manner the Municipal House facilitated exercising of his or her rights, he or she may lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, e-mail: posta@uoou.cz, https://www.uoou.cz