INFORMATION ON THE RIGHTS OF THE CLIENTS OF THE COUNSELLING CENTRE FOR INTEGRATION IN RELATION TO THE PROCESSING OF THEIR PERSONAL DATA
The Counselling Centre for Integration, based at Opletalova 921/6, 110 00 Praha 1 (PPI), processes the personal data of its clients when providing services. Such personal data shall be processed in accordance with EU Regulation 2016/679 (GDPR) to the extent necessary for that purpose.
Why do we process personal data?
- to provide services of high quality;
- to fulfil our legal obligations and our legitimate interests;
- to perform tasks in the public interest, namely the integration of foreigners in the Czech Republic. Communication of personal data is voluntary. However, if the client decides not to supply the PPI with the personal data necessary for the quality of its services, the PPI is entitled to refuse to provide the service. The PPI may process the following categories of personal data of clients:
BASIC IDENTIFICATION DATA
- academic degree, first name, surname, gender, date of birth, national identification number, address of the reported residence, citizenship, ID card number, type of residence;
CONTACT DATA
- contact address, phone number, email address
OTHER DATA
- (communicated by the client): e.g. data from communication between the client and the PPI, data from documents submitted by the client, sensitive data (data on racial or ethnic origin, political opinions, religion and sexual orientation).
How long and how do we keep personal data?
We store clients’ personal data in written and electronic form and safeguard them against unauthorized access or transmission, loss, destruction or misuse.
We process clients’ personal data for the time necessary for the purpose of processing (providing the PPI services, fulfilling legal obligations and legitimate interests of the PPI, performing a task in the public interest). The PPI has mechanisms in place to ensure the erasure of personal data when they are no longer needed to fulfil the purpose for which they were processed.
Who can we transfer personal data to?
Under certain conditions, the PPI is entitled to transfer clients’ personal data to certain entities–such as supervisory authorities, courts and other similar bodies. With the consent of the client, the PPI is entitled to transfer personal data to other entities, too.
CLIENTS’ RIGHTS UNDER GDPR
1. The Right of Access to Personal Data
Everyone may request the PPI to give them information on the rights they have in relation to the processing of their personal data, and may also request information on:
- whether or not the PPI processes their personal data;
- for what purpose it processes them;
- which categories of personal data it processes;
- who has had or will have access to these personal data;
- how long the PPI will process the personal
2. The Right to Rectification of Inaccurate Personal Data
Everyone is entitled to have their inaccurate personal data processed by the PPI rectified or completed.
3. The Right to Erasure of Personal Data
Everyone is entitled to request the PPI to erase their personal data unless the PPI demonstrates legitimate grounds for further processing of those personal data, and everyone may also contact the PPI if they believe that personal data no longer necessary have not been erased.
4. The Right to Restriction of Processing
Everyone is entitled to restrict the processing of personal data if they:
- claim that their personal data processed by the PPI are incorrect;
- claim that the PPI has no reason to process their personal data;
- object to the processing of their personal data;
- as long as the client’s request has not been responded to and after it has been positively
- Restriction of processing, for example, means that in the future, personal data shall only be processed with the explicit consent of the
5. The Right to Notification Regarding Rectification, Erasure or Restriction of Processing
Everyone is entitled to be informed by the PPI of the rectification, erasure or restriction of the processing of their personal data.
6. The Right to Personal Data Portability
Everyone is entitled to receive personal data processed by the PPI in structured writing, and also request the PPI to provide another data controller (another person processing personal data) with their personal data.
7. The Right to Lodge a Complaint with the Supervisory Authority
Everyone is entitled to address a complaint concerning the processing of personal data to the Office for Personal Data Protection based at Pplk. Sochora 27, 170 00 Praha 7.
8. The Right to Object to Processing of Personal Data
Everyone is entitled to object to the processing of their personal data if the PPI processes their personal data for reasons of public interest or legitimate interest of the PPI. In the event of an objection, the PPI is obliged to demonstrate compelling reasons for the processing of personal data that outweigh the interests of the client.
If the reasons for the processing of personal data do not prove to be compelling, the PPI shall terminate the processing of these personal data.
9. The Right to Information on Personal Data Breach
Everyone is entitled to be informed if the security of personal data processed by the PPI has been breached, provided such breach results in a high risk to the rights and freedoms of the client.
Further information on the rights relating to the processing of personal data can be found:
-
on the Office for Personal Data Protection website;
-
on the EUR-Lex website, where EU Regulation 2016/679 (GDPR) is available in several
