Personal data protection

Data Protection – GDPR (EU Regulation 2016/679)

We wish to inform you about how the school, educational facility (hereinafter referred to as the school) processes your personal data.

DATA CONTROLLER'S INFORMATION OBLIGATION

In connection with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as amended (hereinafter referred to as the GDPR), we wish to inform you about how the Authority processes your personal data.

THE CONTROLLER OF YOUR PERSONAL DATA IS:

Title: The Orangery Kindergarten Ltd.
Registered office Národních hrdinů 39, Prague 9
Company Registration Number 24744093
Admissions (school's contact e-mail address): info@orangery.cz
Data Box ID: bqwuxgj

Data Protection Officer

As an educational institution, we must have a Data Protection Officer to help us protect your personal data. Our Data Protection Officer is:

Dr Pavel Skácelík, Ph.D.
Tel: 724 126 741
email gdpr@skacelik.cz

Agreement to the performance of the role of data protection officer is expressed through the contractual relationship between the controller of personal data and Skácelík EU, spol. s r. o.

Company Registration Number 07081804

Registered office: Bouřilova 1105/8, 198 00 Prague 9
Data Box ID: wcx8fwi

PURPOSES OF PROCESSING FOR WHICH THE PERSONAL DATA ARE INTENDED AND THE LEGAL BASIS FOR PROCESSING

The school acts as a controller of personal data. Personal data obtained from the data subject (hereinafter referred to as „child, pupil, student“) are processed for the purpose of fulfilling legal obligations, for the purpose of fulfilling a contract, or due to legitimate or public interest.

The period for which personal data will be stored

The school has set retention periods for personal data with the controller, in full compliance with Act No. 499/2004 Coll., on Archives and Records Management and on Amendments to Certain Acts.

Data Subject Rights

Right of access to personal data.

The data subject has the right to access their personal data processed by the controller.

Right to repair
The data subject may request the correction of inaccurate personal data.

Right to erasure
The data subject may request the erasure of personal data being processed, under the conditions set out in Article 17 of the GDPR.

The right to withdraw consent 
The data subject may withdraw their consent to processing at any time, thereby preventing further processing for the purpose stated in that consent. However, the withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal.

Right to object
If the controller processes the personal data of a data subject on the basis of their legitimate interests, the data subject has the right to object to the processing of personal data concerning them.

Right to restrict processing
In certain circumstances, the data subject may request that the Controller restrict the processing of their data (e.g., until objections raised by the data subject have been resolved).

Data portability rights
The data subject may request that the municipality transmit to the data subject or to a third party, in electronic form, personal data which it processes about the data subject on the basis of a contract or consent.

REQUEST FOR PERSONAL DATA INFORMATION CONCERNING THE DATA SUBJECT

The school accepts requests for information in paper or electronic form. Acceptance of a request includes verification of the applicant's identity. This applicant verification is necessary to protect the applicant's personal data against unauthorised disclosure of this personal information.

Methods of identity verification:

•  Acceptance of a request by a data box from a data subject's data box
• Acceptance of an application via e-post, where the submission is signed with a valid qualified electronic signature
• Verification of identity at the school office when submitting an application
• The listing application is signed with a certified signature (authority, notary, Czech Point).

No other method of verification is permissible.