you withdraw your consent to the processing of your personal data and there is no further legal ground for processing on our part,the applicable legislation contained in Act No. 101/2000 Coll., on the protection of personal data and on the amendment of certain acts, as amended;Your personal data will be kept for a period of time that does not exceed that necessary to fulfil the purposes for which the data is collected and processed.The data processed will be accurate, complete and updated where necessary.Your personal data will only be collected for specific, explicit and lawful purposes and in a manner compatible with those purposes.Information on the processing and protection of personal data for customers, clients and partners of CzechInno (“Privacy Policy”)

INTRODUCTION

In CzechInno, we consider the protection of the privacy and personal data of our clients to be a top priority.

This Privacy Policy (“Policy”) explains how and to what extent CzechInno, a special interest association of legal entities (“CzechInno”) as the operator of the www.czechinno.cz and www.ceeinno.eu websites may collect and process your personal data. You can also find information about the rights you have in relation to the processing of your personal data.

Basic principles of processing – general data protection statement

• We will always process your personal data fairly and in a lawful and transparent manner. When collecting your personal data, we will inform you of any relevant data and notifications regarding this collection and procedures and, in particular, the purpose of the processing and the recipients of this data.
• Your personal data will only be collected for specific, explicit and lawful purposes and in a manner compatible with those purposes.
• The collected data will be adequate, relevant and not excessive in relation to the purpose for which it is collected.
• The data processed will be accurate, complete and updated where necessary.
• Your personal data will be kept for a period of time that does not exceed that necessary to fulfil the purposes for which the data is collected and processed.
• We will ensure the security, integrity and confidentiality of your personal data by implementing appropriate technical and organisational security measures.

Which legislation applies:

When processing personal data, we take care to comply with the relevant legislation that applies to the protection of personal data, namely:

• the applicable legislation contained in Act No. 101/2000 Coll., on the protection of personal data and on the amendment of certain acts, as amended;;
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), which comes into force on 25 May 2018;;
• Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services), as amended;

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Data subjects (or whose personal data we process)

In connection with the implementation of its projects and the organisation of its events, CzechInno (as a so-called data controller) processes the personal data of its customers, event participants, service subscribers, partners and other persons.

Personal data (which personal data we process and from which sources)

“Personal data” is any information that is associated with you as a natural person (this may include, for example, contact details, payment details, details of your participation in our events or involvement in our projects, etc.). We only ever process data that is adequate, relevant and necessary in relation to the purpose for which we process it. Conversely, we never collect sensitive personal data (so-called special category personal data) of our customers, visitors to our events and partners.

We obtain personal data directly from you as a data subject (either by providing it to us during registration or based on your use of our services), from third parties and, where applicable, from public records. The provision of personal data is voluntary; however, without obtaining certain data, the provision of our services is not possible (login details, payment details, etc.).

CzechInno collects and processes personal data:

(1) personal data of event participantskcí

• Purpose: registration for and participation in the event or project, including all related activities (especially evaluation of actual attendance at the event, evaluation of the application for the project and for participation in the platform activities)
• legal title of the processing: performance of a contract to which the participant of the event or project is a party (Article 6(1)(b) GDPR) or the legitimate interest of CzechInno as a controller or a third party – one of our partners (Article 6(1)(f) GDPR)
• scope of personal data: identification data (name, surname, email address, job information, telephone number), information about the events or projects you are applying for, evaluation of your success, structured correspondence and other communication with the subject
• processing period: 3 years from the end of the course;

 

(2) personal data of subscribers and other persons who pay participation fees for participation in our events or projects:

• purpose: settlement of the registration fee
• scope of personal data: identification data (name, surname, email address, function and company, telephone number), information on tickets purchased for events or project registration fees paid, name of persons who have registered for events or projects, payment information and billing data
• legal title of processing: performance of a contract to which the customer as data subject is a party (Article 6(1)(b) GDPR)
• processing period: 10 years from the end of the course;

(3) We may use your email address to inform you of other services we offer by way of commercial communications (unless you have initially declined such use of your email address). The processing of personal data for direct marketing purposes is our legitimate interest (Article 6(1)(f) GDPR). You have the option to opt-out of receiving commercial communications at any time – we will simply remind you how in the messages we send you;

(4) The accounting and tax documents by which we bill for the services provided may also contain some personal data (e.g. name and surname of the customer, subscriber, type of service provided). We keep these documents only for the purpose of complying with the obligations set out in the relevant accounting and tax legislation, for the period of time imposed by such legislation;

(5) other purposes compatible with the purposes for which the personal data was collected (necessary for the exercise and defence of legal claims).

 

Processors and recipients of personal data (or who has access to personal data?)

We do not sell or otherwise provide your personal data to other commercial entities. The only exception is the disclosure of your name, position, company and email address upon request to one of our partners who financially participate in our events and projects and therefore have a legitimate interest in having accurate information about which persons have participated in these events and projects.

The personal data is processed directly by the controller (CzechInno) or by its contractual processor (external website administrator), who also provide sufficient and credible guarantees about the technical and organisational security of the protection of your personal data. The processing of personal data takes place in technically and physically secure electronic information systems. Currently, the processor of personal data is Kamil Teplý.

Personal data may be transferred for processing within the European Union or the European Economic Area (e.g. to processors). In accordance with legal regulations, personal data may also be transferred to countries outside the European Union or the European Economic Area. Currently, your personal data is not transferred to any EU or non-EU countries.

Under certain conditions, personal data may be disclosed to state authorities (courts, police, notaries, tax authorities or other entities in the exercise of their legal powers to the extent provided for by a specific law).

Personal data may be transferred to partners of our events and projects for the purpose of informing them about participants in events and projects in which these partners participate financially. An up-to-date list of our partners is always listed on the website/tab of the respective project. In pursuit of their legitimate interest, our partners may send you their commercial communications. You have the possibility to object to the disclosure of your data to the partners of CzechInno and its events and projects at any time – we will simply remind you how in the messages we send you.

 

How does CzechInno ensure the protection of personal data?

We take the necessary measures to securely store information in electronic or physical form and to prevent unauthorised access, alteration or disclosure of information. Our information security policy is supported by a number of security standards, processes and procedures. We store information in restricted areas or in electronic databases requiring logins and passwords. We require our data storage providers and other processors to comply with applicable industry security standards. All partners, employees and service providers who have access to confidential information are subject to confidentiality obligations.

WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?

The proper processing and protection of your personal data is one of our highest priorities. CzechInno always processes your personal data in accordance with the law and for lawful reasons. If you would like to exercise any of your rights, please contact us at the address below.

Right to withdraw consent where processing is carried out on the basis of consent

If we process your personal data on the basis of your consent to the processing of your personal data in very exceptional cases, you may withdraw such consent at any time without any additional costs. However, the withdrawal of such consent shall not affect the lawfulness of the processing of personal data based on such consent prior to its withdrawal. You may withdraw your consent at any time in writing by sending an email or letter to the CzechInno contact address listed below, without any consequences for our joint existing and/or future contractual relationship.

Right of access

As a data subject, you have the right to obtain confirmation from us as to whether or not the personal data relating to you is being processed and, if so, to obtain access to that personal data and other information regarding the processing. You also have the right to request a copy of the personal data processed relating to you.

Right to rectification

IThe information we process about you should be up-to-date and accurate. You have the right to have inaccurate personal data concerning you corrected or incomplete personal data completed without undue delay. Please inform us of any changes to your personal data at the address below.

Right to erasure

You have the right to have us delete personal data concerning you without undue delay if at least one of the following conditions is met:

• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
• you withdraw your consent to the processing of your personal data and there is no further legal ground for processing on our part,
• you object to the processing of your personal data and there are no overriding legitimate grounds for processing on our side,
• the personal data has been processed unlawfully,
• the personal data must be erased to comply with our legal obligation,
• the personal data was collected in connection with the offer of information society services.

The above conditions do not apply if the processing of personal data is necessary:

• for the exercise of the right to freedom of expression and information
• for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes where the right to erasure would be likely to prevent or seriously jeopardise the achievement of the purposes of that processing, or
• for the establishment, exercise or defence of legal claims.

 Right to restriction of processing

As a data subject, you have the right to have us restrict the processing of your personal data if:

• you deny the accuracy of the personal data we process about you for the time necessary for us to verify the accuracy of your personal data;t;
• the processing of your personal data is unlawful, but you refuse to erase it and instead request that we restrict its use;
• the processing of your personal data is no longer necessary on our part, but you request it for the establishment, exercise or defence of your claims; or
• you have objected to the processing on the grounds of decision-making based solely on automated processing, pending verification that our legitimate grounds outweigh your legitimate grounds.

Where processing has been restricted on one of the grounds set out above, the personal data concerned may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of another natural or legal person or for reasons of important public interest of the Union or a Member State. We are obliged to inform you in advance of the cancellation of the restriction on the processing of your personal data.

       Right to portability

You have the right to obtain personal data relating to you which you have provided to us on the basis of your consent or for the purposes of performance of a contract, in a structured, commonly used and machine-readable format, and the right to transfer that data to another controller or, where technically feasible, to instruct us to transfer the personal data to another controller. The exercise of the right to data portability does not affect your right to erasure of personal data.

 Right to object to processing

If processing is carried out for the purposes of the legitimate interests of the CzechInno association or a third party, including related profiling, you have the right to object to the processing of your personal data at any time. If personal data is processed for direct marketing purposes (including profiling), you have the right to object to the processing of your personal data at any time and your personal data will no longer be processed for these purposes.

         The right not to be subject to decisions based solely on automated processing (including profiling)

You have the right not to be the subject of a decision based solely on automated processing (including profiling) which would have legal effects on you or otherwise significantly affect you. You do not have to worry, the processing of your personal data by CzechInno does not involve the use of your personal data for decisions based purely on automated processing or profiling.

 

CONTACTS AND FURTHER INFORMATION

Data Controller:

CzechInno, an interest association of legal entities

with registered office at Dukelských hrdinů 29, 170 00  Praha 7 – Holešovice

CIN: 725 39 275

Phone: +420 608 86 86 56

E-mail: office@czechinno.cz

The organisation does not have an appointed data protection officer.

In case of doubts about compliance with the obligations related to the processing of personal data, you can also contact the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, email: posta@uoou.cz, www: https://www.uoou.cz.

We regularly review this Privacy Policy and reserve the right to change it if necessary.

Last update: May 2018..