GDPR - Personal data processing principles
We are the Library, Museum and Information Centre Aš, po, IČO 70940479, with our registered office at Hlavní 239/23, Aš 352 01 (hereinafter referred to as the “Library, Museum and Information Centre Aš”) and we process your personal data when providing our services and when you visit our website.7
When handling personal data, we proceed in accordance with the legal order of the Czech Republic and directly applicable regulations of the European Union, in particular with Act No. 110/2019 Coll., on the processing of personal data, as amended, Act No. 480/2004 Coll. (hereinafter referred to as the "Privacy Act") and in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Regulation on the protection of personal data and certain information society services and on amending certain acts, as amended (hereinafter referred to as the "GDPR").
Who is the controller of your data?
The controller of your personal data is the Aš Library, Museum and Information Centre, which processes it in accordance with the Personal Data Protection Act and the GDPR, in accordance with the conditions set out below.
Why and for what purpose do we process personal data?
- Contract – performance of a contract whose subject is the provision of our service or product.
- Legal obligations – fulfillment of legal obligations that arise for us from generally binding legal regulations.
- Marketing – sending newsletters and other commercial communications.
- Legitimate interest – processing within our legitimate interest.
- Communication – handling requests sent via electronic or telephone communication.
- Websites – you visit our websites.
What data do we process as administrators?
- Name and surname – contract, communication, marketing, legitimate interest, legal obligations
- Telephone number – contract, communication, marketing, legitimate interest, legal obligations
- Email address – communication, marketing, legitimate interest, legal obligations
- Date of birth – contract, legitimate interest, legal obligations
- Identity card number – contract, legitimate interest, legal obligations
- Address – contract, legitimate interest, legal obligations
- Web browsing information (cookies, IP address) – websites.
How long do we keep personal data?
We process personal data only for the period specified in legal regulations or for the period necessary for the purposes of their processing.
The processing time depends on the reason why we process your personal data:
Contract – we process personal data for the duration of the contractual relationship and subsequently for 10 years after the termination of the contractual relationship.
Legal obligations – we process personal data for the period specified by legal regulations.
Marketing – we process personal data for as long as we have your consent.
Legitimate interest – we process personal data for a period of 3 years from the start of their processing or for the period specified by legal regulations.
Communication – for the duration of the communication or processing of your request.
When do we need your consent to process personal data?
If you receive a newsletter or other commercial communications from us and you have never been our client before, then we process your personal data based on your consent. You can withdraw this consent at any time - by clicking unsubscribe in the email you received or by sending an email to our email address.
How is my data protected?
We strive to protect all personal data we process against loss or theft to the greatest extent possible. For this reason, we limit its manipulation, copying, transfer or access to only those purposes for which you have given us your consent or where this purpose is defined by law.
Furthermore, our website has HTTPS protocol (valid SSL certificate) for encrypted connection between the website and the user, which minimizes the possibility of personal data theft during data transfer (registration, login, form submission, etc.). The website is located on the company's secure servers:
Who has access to personal data?
The processing of personal data is carried out by the Administrator within the meaning of the GDPR, however, personal data may also be processed for the Administrator by other entities (such as processors or administrators):
- Media Solution, sro ., Company ID: 28542738, with its registered office at Morseova 243/21, Petrovice, 109 00 Prague, registered at the Register Court in Prague, Section C, File 149129
- Ecomail.cz, sro , Company ID: 02762943, with its registered office at Na Zderaze 1275/15, Nové Město (Prague 2), 120 00 Prague, registered at the Register Court in Prague, Section C, File 223183
We may also authorize other personal data processors or persons (for example, carriers or other persons involved in the fulfillment of the contract and our obligations), but only to the extent necessary for the fulfillment of the contract or for reasons of legitimate interest. We do not transfer personal data to any other person. Personal and other obtained data are fully secured against misuse. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner. Your personal data will not be transferred to countries outside the European Union.
Cookies
We use cookies on our website. Cookies are small text files that are stored in your browser when you visit our website. Cookies make it easier to use our website and adapt its content to your preferences and needs.
We do not need your consent to use cookies that are essential for the proper and secure functioning of our website. All other optional cookies require your consent, which you give by clicking on the specific type of cookie. You can change or withdraw your consent to the use of cookies at any time on our website.
We use the following cookies on our website:
Functional cookies
These cookies are essential for the proper and secure functioning of our website. We do not need your consent to use them.
Analytical cookies
These cookies allow us to track and understand how you use our website.
Marketing and remarketing cookies
These cookies allow us to track your behavior on the website and target advertising more effectively and personalize it according to your preferences. These text files facilitate the functioning of our websites and help evaluate the behavior of their visitors.
What are my rights regarding the protection of personal data?
- Right of access – you can ask us for information about whether we are processing your personal data and to provide access to it.
- The right to correct inaccurate and complete incomplete personal data – if you believe that we are processing your inaccurate or incomplete personal data, you can ask us to complete or correct it.
- Right to restriction of processing – you can ask us to restrict the processing of your personal data by making it inaccessible, temporarily deleting it, storing it or performing other processing operations.
- Right to erasure – you can ask us to erase personal data that is no longer necessary, is unlawful, we have no reason to process it, or we no longer have a legal obligation to process it.
- Right to portability – you can ask us to transfer your personal data to third parties. We will not comply with such requests if the rights and freedoms of others would be adversely affected.
- Right to object – you may object to the processing of your personal data. We will stop the processing without delay unless we demonstrate compelling legitimate grounds for the processing which override your rights and freedoms.
- Right to complain – if you are not satisfied with the processing of personal data, you can contact the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz/ .
You can file a complaint at any time regarding the processing of your personal data or the controller's failure to comply with its obligations under the GDPR with the supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz/ .
Contact details
If you have any questions or want to exercise any of your rights, please contact us at reditel@kmic.cz.
In Aš on November 25, 2024
