Personal data protection

INFORMATION ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

Confederation of Industry of the Czech Republic, Freyova 948/11, 190 00 Prague 9, IČO: 005 36 211 (hereinafter referred to as the SP CR) strictly complies with the legislation on the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), which entered into force on 25 May 2018.

In connection with its mission and activities, the SP CR processes personal data of:

1. members - contact details of the contact persons and other representatives of its members - name, surname, position in the company, work mail, work telephone for the purposes of membership, where the legal title of processing is the performance of a contract pursuant to Article 6(1)(b) of GDPR, or a legitimate interest according to Article 6(1)(f) of GDPR (sending information in the form of commercial announcements concerning other services offered by the SP CR).

2. participants in educational and other events - name, surname, work mobile phone number, e-mail address (ID card number, in the case of specific events) for billing purposes, where the legal title of processing is the performance of a contract pursuant to Article 6(1)(b) of GDPR.

3. supported persons in actions funded by ESF grants - name, surname, e-mail address, employer name, position in the company of the participants, photos. The purpose of the processing is to implement the project, especially the project implementation report. The legal title of processing is compliance with the legal obligation pursuant to Article 6(1)(c) of GDPR, where the SP CR as a recipient of a grant from the ESF is responsible for the processing of personal data including a special category of personal data of the persons supported in the project in order to prove the sound and efficient management of the ESF funds provided by the OP Employment by the legal act of granting support.

4. foreign business mission participants - name, surname, surname at birth, address of permanent residence, address of delivery, gender, age, date of birth, place of birth, birth number, photograph, e-mail address, telephone numbers, ID card number, passport number, car licence plate number. The purpose of processing is to ensure the participation of representatives of organizations in foreign business missions. The legal title of processing is the performance of a contract under Article 6 (1)(b) of GDPR.

5. persons included in the "Project Ukraine" - identification details i.e. name, surname, date of birth, nationality, delivery address, private telephone number, passport number, job position including CZ ISCO classification (name and code) of the persons involved. The purpose of the processing is the compliance with legal obligations set out in the annex to the Government Resolution No. 703 of 27 July 2016 - Implementation of the Capacity Building Scheme of the MFA and the Ministry of Interior of the Czech Republic to Process a higher number of applications for employee cards - Special Treatment Scheme for Qualified Employees from Ukraine - "Project Ukraine". The legal title for the processing is compliance with the legal obligation pursuant to Article 6(1)(c) or any legitimate interest pursuant to Article 6(1)(f) of GDPR.

6. persons sent to the Czech Republic for the purpose of Training - identification details i.e. name, surname, surname at birth, delivery address, date of birth, place of birth, private telephone number, passport number. The purpose of processing is to assess the compliance with conditions under which a foreigner can be sent to a Czech legal or natural person for the purpose of increasing skills and qualifications (so-called Training). The legal title for the processing is compliance with the legal obligation pursuant to Article 6(1)(c) of GDPR, (Section 178b (4) of Act 326/1999 Coll., On the Residence of Foreign Nationals, and Section 98 of the Employment Act in accordance with Government Resolution No. 962 of 24 Nov 2014).

7. website visitors - network identifiers, the so-called cookies. This information is anonymous (e.g. browser type, domain name of the ISP). The purpose of processing is the improvement (analytical cookies) and ensuring of the proper functioning of the website (essential cookies). The legal title of processing is a legitimate interest pursuant to Article 6(1)(f) of GDPR.

8. visitors - identification details, i.e. name, surname, ID card number, information about absence of infection of Covid-19. The purpose of processing is compliance with the legal obligation pursuant to Article 6(1)(c) of GDPR, or a legitimate interest according to Article 6(1)(f) of GDPR.

The purpose of the processing of personal data may also be direct marketing / sending of commercial communications where the commercial communication is sent to the email address only upon prior consent (Article 6(1)(a) of GDPR). Withdrawal of consent and refusal to receive the business communications is possible at any time.

Personal data is processed only for the legal purposes stated and will be retained for a period not exceeding the time required to meet the purpose for which it is collected and processed. The security, integrity and confidentiality of personal data is ensured by the implementation of adequate security technical and organizational measures. Personal data is not sold or otherwise provided to commercial entities.

Any other processing of personal data not stated herein is subject to the data subject's consent (for example, taking photos and publishing them in media, on social networks).

Personal data is processed directly by the SP CR.

The processing of personal data takes place in technically and physically secured electronic information systems.

Personal data may be transferred for processing within the European Union, European Economic Area (e.g. as part of the BusinessEurope teams work, OECD, etc.).

Personal data may be made available to state authorities (courts, police, notaries, tax authorities or other entities in the exercise of their statutory powers to the extent specified by a special law) under certain conditions.

The data subject has the right to request access to his/her personal data with the SP CR, as well as the right to repair, erase or restrict the data processing, the right to object to its processing and the right to the data portability, unless this is contrary to the purpose of the processing.

The data subject also has the right to withdraw consent in cases where the processing is performed on the basis of a consent.

The processing of personal data by SP CR does not involve the use of personal data to make decisions purely on the basis of automated processing or profiling.

Data Controller Contact Details:

Confederation of Industry of the Czech Republic
JUDr. Jitka Hlaváčková
Deputy Director of the Employers' Section
Freyova 948/11, 190 00 Prague 9
IČO: 005 36 211
This email address is being protected from spambots. You need JavaScript enabled to view it.

The data subject has the right to file a complaint with the Personal Data Protection Office, registered seat at Pplk. Sochora 27, 170 00 Prague 7, email: This email address is being protected from spambots. You need JavaScript enabled to view it..

This personal data protection policy is regularly reviewed and the SP CR reserves the right to change it.

Latest update: June 1, 2021