Personal data protection
Processing and protection of personal data
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter referred to as GDPR - informs the PALESTRA College of Physical Education and Sport about the conditions under which personal data are processed.
Personal data controller is the College of Physical Education and Sport PALESTRA, Slovačíkova 400, Prague 9 - Kbely, 197 00 (hereinafter referred to as VŠTVS PALESTRA).
Data Protection Officer VŠTVS PALESTRA is Mgr. Kamila Bulířová, E-mail: bulirova@palestra.cz, phone 212 277 742.
You can contact the Data Protection Officer if you have any questions or requests regarding the processing and protection of your personal data.
We only process your personal data to the extent that it is necessary for the activities of the college or is related to the service you use at the college. We protect personal data to the maximum extent possible and in accordance with applicable law. The principles and rules governing the processing of personal data at PALESTRA College of Education are governed by Directive GDPR/01.
VŠTVS PALESTRA processes personal data of the following categories of persons (data subjects):
- an employee of the school (or a person in an employment relationship);
- jobseeker;
- a candidate for study;
- a student of the school;
- former student of the school (including alumni);
- a participant in the CŽV programme;
- a student at another university (e.g. under the Erasmus programme)
- business partner (supplier, customer, client);
- research participant;
- external collaborator (e.g. supervisor, co-researcher, co-author of a publication).
VŠTVS PALESTRA processes both personal data provided directly by individual natural persons (whether on the basis of consent or other legal grounds) and other personal data generated as part of processing activities and necessary for their provision. This may include the following categories of personal data:
- Address and identification data (name, surname, date and place of birth, marital status, birth number, title, nationality, address (including electronic), telephone number, ID number, digital identifier, signature, etc.).
- Descriptive data (education, knowledge of foreign languages, professional qualifications, knowledge and skills, number of children, portrait photograph, video/audio record of the person, military service, previous employment, health insurance, membership of interest organisations, criminal record, etc.).
- Study data (records of studies and study activities, study results, study awards).
- Economic data (bank connections, salary, remuneration, fees, payables and receivables, orders, purchases, taxes, etc.).
- Work data (records of work and work activities, employer, workplace, job classification and position, job evaluation, job awards, etc.).
- Operational and location data (typically data from electronic systems relating to a specific data subject - e.g. data on the use of information systems, data traffic and electronic communications, telephone usage, access to various premises, CCTV footage, etc.
- Data on the subject's activities (publications, data on professional activities, participation in conferences, involvement in projects, data on work or study trips, etc.).
- Information about another person (address and identification data of a family member, spouse, child, partner, etc.).
- Special categories of personal data (sensitive personal data capturing health information, trade union membership, etc.).
The processing of personal data is based on the relevant legal grounds, which are:
Fulfilling a legal obligation applicable to the trustee:
We need to process your personal data here in order to fulfil our legal obligation as a controller. These include Act No. 111/1998 Coll., on Universities; Act No. 130/2002 Coll., on Support of Research and Development from Public Funds; Act No. 262/2006 Coll., on the Labour Code; Act No. 563/1991 Coll., on Accounting; Act No. 127/2005 Coll., on Electronic Communications; Act No. 480/2004 Coll., on Certain Information Society Services; Act No. 181/2014 Coll., on Cyber Security; and others.
Performance of the contract:
We need your personal data here for the purpose of entering into a contractual relationship and the subsequent performance thereof, or also before entering into a contract.
Consent of the data subject:
consent you have given us to process your personal data for one or more specific purposes.
Legitimate interest of the administratorwhich is mainly about protecting assets and preventing fraud.
The data are stored only for the time necessary in relation to the personal data processing activity and are then destroyed or archived in accordance with the applicable Records Code. Personal data that we process with your consent are only kept for the duration of the purpose for which the consent was given.
In order to fulfil its legal obligations, VŠTVS PALESTRA may transfer selected data to designated entities (in particular the Ministry of Education, Youth and Sports). This applies similarly to cases where the authorisation for the transfer of personal data outside of VŠTVS PALESTRA is given by the individual consent of the data subjects.
The data subject is entitled to exercise his/her rights under the GDPR, starting from 25 May 2018. The rights must be exercised by the data subject vis-à-vis the data controller by sending a request to the data box of the VŠTVS PALESTRA pwubigc, by email to the data controller E-mail: bulirova@palestra.cz
We inform students and staff that the data processors of personal data for the school are:
- For the operation of the filing service fi Good Sailors, s. r. o., Provaznická 737/12, 405 02 Děčín 1
- For the operation of Moggis fi Computer Aided Technologies, spol. s r.o., Slovákova 2, 602 00 Brno
- For processing ISIC and ALIVE cards fi GTS ALIVE, s. r. o., Letenská 118/1, 118 00 Prague 1
With each processor, the administrator - PALESTRA College of Physical Education and Sport has concluded a contract for the processing and protection of personal data in accordance with the GDPR.
The data subject has the right to lodge a complaint about the processing of personal data with the supervisory authority, which is the Office for Personal Data Protection.
Contact:
Office for Personal Data Protection
address: Pplk. Sochora 27, 170 00 Prague 7
tel.: 234 665 111
web: www.uoou.cz
Update 6. 11. 2018
