We treat personal data in compliance with the legislation in force. In particular, we assure the protection of personal data in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR). GDPR is uniformly applicable in the whole EU since 25 May 2018.
The principles stated below provide a summary of the basic rules that we follow when gathering personal data and ensuring that it is kept confidential and secure.
Since we work on a number of projects that have separate webpages (within which specific cases of personal data processing may occur), this text provides a basic framework. You will always find specific information on processing on the site where we are requesting some personal data from you.
Basic principles
In general, we always process your personal data only to the extent necessary for the given purpose. Personal data may be divided into two groups – personal data we are allowed to process without your consent, and personal data that we may not process without your consent.
We process personal data without your consent in cases when:
- the data is necessary for us to fulfil a legal obligation (e.g. the Accounting Act – zákon o účetnictví),
- the data is needed in order to fulfil a contract we are entering into with you,
- we have a legitimate interest in the data processing (typically record-keeping of donations, informing about our activities, approaching people to ask for a contribution/donation etc.)
In the remaining cases, we process data based on your consent.
We process personal data in such a way that it is appropriately secured against unauthorised access, accidental loss, destruction, or damage.
We store personal data only for the necessary period of time and we archive the data according to the legal time limits provided for in the legislation. Once the reason for processing no longer exists or once the period of the necessary processing expires, we delete the respective personal data.
What kind of personal data we process most frequently through our webpage
1) Cookies – Cookies are a tool enabling web functionality for a specific user. You can find information on cookies, which ones we collect and for what purposes, including instructions how to prevent them to be stored, here.
2) Data on donors – If you decide to commit to provide a donation (one-off or recurrent) or a similar contribution through one of the webpages we operate, we process your data you provide to us on that occasion.
3) Data on persons who sign up for a programme, activity etc. – If you decide to sign up for a programme, activity etc. through one of the webpages we operate, we process your data you provide to us as part of the sign-up.
4) Newsletters – If you decide to subscribe to a newsletter or another information material through one of the webpages we operate, we require your consent to the processing of the contact details provided (usually e-mail).
List of processors
We do not sell your data, nor do we hand it over to other parties in another way, except for our contractual partners who enable us to communicate with you, and except for situations when we have a legal obligation to hand your data over to another person.
We publish an up-to-date list of processors or other recipients. The notice on processing of your data for a specific purpose always refers to a specific list.
Information on your fundamental rights
As a data subject, you have the following fundamental rights:
- right to request information on which personal data of yours we are processing,
- right to request explanation from us regarding the processing of personal data,
- right to request access to such data from us, right to have the data updated, corrected or restricted, as the case may be, and right to object to processing,
- in the case of automated processing of personal data, you have a right to data portability,
- right to withdraw the consent anytime (where the processing is based on consent), for example by sending an e-mail or letter to the contact details below,
- right to request the deletion of personal data from us (we are obliged to comply, unless we are required to process the data in order to fulfil a legal obligation),
- right to address us or the Office for Personal Data Protection in case of doubt regarding the compliance with the obligations related to the processing of personal data.
Details about the Personal Data Controller
Člověk v tísni, o.p.s. (People in Need), whose seat is at Šafaříkova 24, 120 00 Prague 2, ID No. 25755277, registered in the Foundations Register managed by the Municipal Court in Prague, Section O, File 119
Contact details: personal.data@clovekvtisni.cz, contact details of the Data Protection Officer: dpo@clovekvtisni.cz