Zavři
Menu

Personal data processing

Declaration on the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and information to data subjects (hereinafter referred to as the “GDPR”)

I. Personal data administrator

Podpora kinematografie z.s.

IČO: 10915362

se sídlem Polní 2305, 250 01 Brandýs nad Labem

(hereinafter referred to as "administrator")

 

hereby informs data subjects about the processing of their personal data and their rights in accordance with Article 12 of the GDPR.

 

II. Scope of personal data processing

Personal data are processed to the extent that the relevant data subject has provided them to the administrator, in connection with the conclusion of a contractual or other legal relationship with the administrator, or which the administrator has otherwise collected and processes in accordance with applicable legal regulations or to fulfill the administrator's legal obligations.

III. Sources of personal data

  • directly from data subjects (e.g. e-mails, telephone, chat, websites, contact form on the website, social networks, contracts, consents, etc.)
  • from a public register pursuant to Act No. 304/2013 Coll., on public registers of legal entities and individuals, as amended, i.e. the federal register, the foundation register, the register of institutes, the register of unit owners' associations, the commercial register and the register of public benefit companies;
  • from other registers pursuant to Act No. 111/2009 Coll., on basic registers, as amended

IV. Categories of similar data that are the subject of processing by the controller

  • address and identification data used for the unambiguous and unmistakable identification of the data subject (e.g. name, surname, IP address, title, or birth number, date of birth, permanent address, ID number, VAT number, gender) and data enabling contact with the data subject (contact data - e.g. contact address, telephone number, fax number, e-mail address and other similar information)
  • descriptive data (e.g. bank details)
  • other data necessary for the performance of the contract
  • data provided beyond the scope of relevant laws processed within the framework of the consent granted by the data subject (e.g. use of personal data for the purpose of personnel management, etc.)

V. Categories of data subject

The data subject is a natural person to whom the personal data relate, specifically:

  • customer of the controller
  • employee of the controller
  • carrier
  • supplier of goods or services
  • another person who is in a contractual relationship with administrators
  • job applicant

VI. Categories of processors and recipients of personal data

  • administrator, cooperating persons and employees of the administrator
  • state administration bodies and local government bodies within the framework of fulfilling legal obligations set out in relevant legal regulations
  • processors
  • external entities providing services to the administrator in various areas (accounting, cloud services, customer satisfaction evaluation, etc.)
  • personal data are not transferred abroad

VII. Purpose and reasons for processing personal data

The processing of personal data takes place at the administrator:

  • based on the consent given by the data subject
  • when performing a contract with the data subject
  • when implementing measures taken before concluding a contract at the request of the data subject
  • for the purpose of fulfilling a legal obligation applicable to the administrator (including archiving based on the law)
  • for the purpose of protecting the vital interests of the data subject or another natural person
  • for the purpose of the legitimate interest of the administrator or a third party (including archiving based on the legitimate interest of the administrator)

VIII. Method of processing and protection of personal data

  • The processing of personal data is carried out by the controller. The processing is carried out in its premises, branches and the controller's registered office by individual co-entrepreneurs and employees of the controller, or by the processor.
  • The processing takes place using computer technology, or also manually in the case of personal data in paper form, in compliance with all security principles for the management and processing of personal data.
  • For this purpose, the controller has adopted technical and organizational measures to ensure the protection of personal data, in particular measures to prevent unauthorized or accidental access to personal data, their alteration, destruction or loss, unauthorized transfers, their unauthorized processing, as well as other misuse of personal data.
  • All entities to which personal data may be made available respect the right of data subjects to privacy and are obliged to proceed in accordance with applicable legal regulations relating to the protection of personal data.

IX. Personal data processing period

  • In accordance with the periods specified in the relevant contracts, in the internal regulations of the controller or in the relevant legal regulations, this is the period strictly necessary to ensure the rights and obligations arising from both contracts, legitimate interests and the relevant legal regulations.

X. Instructions

  • The controller processes data with the consent of the data subject, except in cases provided for by law where the processing of personal data does not require the consent of the data subject.
  • In accordance with Article 6(1) of the GDPR, the controller may process the following data without the consent of the data subject: the data subject has given consent for one or more specific purposes, the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps prior to entering into a contract at the request of the data subject, the processing is necessary for compliance with a legal obligation to which the controller is subject, the processing is necessary for the protection of the vital interests of the data subject or of another natural person, the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

XI. Rights of data subjects

1. In accordance with Article 12 GDPR, the controller shall inform the data subject of the right of access to personal data and the following information:

  • the purpose of the processing,
  • the category of personal data concerned,
  • the recipient or categories of recipients to whom the personal data have been or will be disclosed,
  • the planned period for which the personal data will be stored,
  • all available information about the source of the personal data,
  • if not obtained from the data subject, whether automated decision-making, including profiling, is taking place.

2. Any data subject who finds out or believes that the controller or processor is processing his or her personal data in a way that is contrary to the protection of the data subject's private and personal life or in a way that is contrary to the law, in particular if the personal data are inaccurate having regard to the purpose of their processing, may:

  • Request an explanation from the controller.
  • Request that the controller remedy the situation. This may include, in particular, blocking, rectification, completion or erasure of personal data.
  • If the data subject's request is found to be justified, the controller shall immediately remedy the defective condition.
  • If the controller does not comply with the data subject's request, the data subject has the right to contact the supervisory authority directly, which is the Office for Personal Data Protection.
  • The data subject has the right to contact the supervisory authority directly with his/her complaint without taking any prior steps.

XII. Final provisions

For questions regarding the processing of personal data of data subjects, the controller may be contacted in writing, electronically or by telephone using the following contact details:

Podpora kinematografie z.s.

adress: Polní 2305, 250 01 Brandýs nad Labem

email: info@pokin.cz

phone: +420 776 324 026

 

The Statement is publicly available on the controller's website

This Statement was last updated on 3.1.2025