Privacy policy

 

Data protection policy

Within the scope of this document, you, as a data subject (hereinafter referred to as "you" or "your"), may find information about the processing of your personal data by JIC, zájmové sdružení právnických osob, based at Purkyňova 649/127, Medlánky, 612 00 Brno, ID number: 71180478 (hereinafter referred to as „we", „us" or „our association"), especially in relation to a conclusion of contracts between our association and you, or in relation to other activities coherent with the administration of our buildings. You are a data subject if you enter into an agreement with us or you otherwise communicate with us as a natural person or if you cooperate with us as a representative of a legal person (companies).

This Data protection policy (hereinafter referred to as "Policy") contains information about the purposes for which our association processes your personal data, to what extent (which of your personal data is being processed), on what legal basis (performance of a contract, legitimate interest, compliance with legal obligations, consent or other) and to the best of our ability the period for which we are entitled to process your personal data.

This Policy also contains information about the rights that you possess in relation to the processing of your personal data and how you can exercise these rights.

1. The Processing of Your Personal Data

We process your personal data so that we can fulfil the purposes specified in the following chapters.

Personal data is information related to you or your activity, which is processed by our association, for example your name, surname, place of residence, etc.

The processing of personal data is any operation which is performed with personal data for a certain purpose, whether by automated means, electronically or in written form, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data. Operating with personal data in an irregular or incidental way as a result of other activity, such as maintenance of technical instruments for data processing, is not considered as the processing of personal data.

We process different categories of personal data for different purposes. Specifically, we may process these categories of personal data:

-          Identification data (f.e. name, surname, ID number, tax ID number);

-          contact data (f.e. e-mail address, phone number);

-          address data (f.e. address of residence, correspondence address);

-          data necessary for processing payments and their accounting (e.g. account number, bank code, IBAN, SWIFT);

-          professional position data (f.e. if the data subject is an employee or a member of statutory body);

-          information about the contract and performance of the contract by both contracting parties (e.g. date of conclusion of the contract, length of the contractual relationship, date and reason for termination of the contract, details of the transaction, rent or another price) and

-          information about borrows (f.e. date of borrow and return of a publication, delay with return).

2. Lease agreements

If you desire to rent any of our offices, or any of our boardrooms, other premises or our movable property, we need to enter into a lease agreement, such as a business premises lease agreement, an agreement on a short-term lease of premises or an agreement for access to a server room and a lease of a server rack. In such cases, we process Your personal data to the extent, for the purposes, the period, and on the legal bases stated below:

Purpose

Extent of processed information

Legal basis

Processing period

Conclusion and performance of contract, including mutual communication

 

-  Identification data

-  Address data

-  Contact data

-  Data necessary for processing payments and their accounting

-  Professional position data

-  Information about the contract and performance of the contract by both contracting parties

Necessity to perform a contract

Until the termination of the agreement and until 3 years after, fundamental data about the legal relationship and its existence (contracting parties, the object of the contract) until 10 years from the termination of the contract; personal data requested by legal statutes for a period stated in the statutes.

Until the cancellation of the Registration by a user, 3 years from the last login at the latest

Compliance with legal obligations regulating accounting and taxes

-  Identification data

-  Address data

-  Information about the contract and performance of the contract by both contracting parties

Necessity to comply with legal obligations

For a period stated in the relevant legal statutes:

Act No. 235/2004 Coll., on the VAT

Act No. 563/1991 Coll., on accounting

Contacting a person in case of potential security breaches of the leased premises

 

-  Identification data

-  Contact data

Legitimate interest in the providing security of Our buildings and lessees

 

Until the termination of the lease agreement

If you decide to enter into a lease agreement with us, we process the aforementioned categories of your personal data in order to conclude the agreement, to perform the agreement, check that you perform it, and to communicate with you. We also have to comply with statutory obligations and such processing is a statutory requirement that we cannot influence.

For the purpose of providing security to our buildings and lessees, we also require some of your personal data to contact you in the event of potential security breaches. You are entitled to file an objection against the way we process your personal data for such a purpose using the method described in Chapter 8.5. On the basis of your objection, we will stop sending you commercial offers and processing your related personal data.

3. Access to our buildings

In some cases, you need to have access to some of our buildings. In such situations, we provide you with an entrance card with access around the building and we process your personal data to the extent, for the purposes, the period, and on the legal bases stated below:

Purpose

Extent of processed information

Legal basis

Processing period

Conclusion of contract and securing and overview of access to the building

 

-  Identification data

-  Contact data

Necessity to perform a contract

Until the return of the entrance card

If we lend you an entrance card to some of our buildings, we process the aforementioned personal data in order to secure the overview of access to the buildings.

4. Borrowing books from our library

If you wish to be a member of our library and borrow books or other publications, you must agree to the rules on borrowing publications from the library. In this case, we process your personal data to the extent, for the purposes, the period, and on the legal bases stated below:

Purpose

Extent of processed information

Legal basis

Processing period

Enrolment to the library and securing access to the books

 

-  Identification data

-  Contact data

Necessity to perform a contract

Until the termination of the membership in the library

If you enrol in our library to borrow some of the publications available at the library, we process your personal data in order to lend you the publications and monitor whether you comply with the rules on borrowing publications.

5. Security camera

Detailed information about the processing of your personal data by a security camera system is available in a specific document available at the reception desks of our buildings.

6. Who is your personal data made available to?

We do not know in advance to whom exactly we will make your personal data available. That is why we introduce only categories of possible recipients, along with an explanation of why your personal data could be transferred to such recipients.

Recipient

Reason of making the data available

Persons ensuring the functioning of our software (computer systems)

We need the provider of software equipment, who assumes the position of a data processor, to service our websites and ensure the functioning of our information systems.

Legal and tax advisors

 

Sometimes, we need legal or tax advisors to look into information about legal relations between us and you. These persons are legally bound by a duty of confidentiality.

Law enforcement agencies (state police, prosecutor, court) and units of integrated rescue system (state police, firemen)

In order to ensure the security of our premises, it can be necessary to cooperate with law enforcement agencies or units of integrated rescue systems.

We would like to inform you that we will always comply with your right to obtain information about to whom, when, and for what purpose your personal data was transferred.

7. What are your rights?

With regard to the fact that our association processes your personal data, you possess rights which we want to inform you about. You can exercise any of your rights specified hereinafter by any method that is suitable for you and that allows us to verify that it is really you who made the request (that will allow us to verify your identity), and we will try to meet your requirements to the best of our ability. In order for us to be able to meet your requirements, we would like to ask you to exercise your rights by contacting uat the address of our association, JIC, zájmové sdružení právnických osob, based at Purkyňova 649/127, Medlánky, 612 00 Brno, or at the e-mail address jic@jic.cz, or in another way stipulated in the paragraphs below.

7.1.   Right of access

You have the right to access your personal data processed by our association and concurrently the right to be informed about which of your personal data we process, for what period of time the purposes of their processing, who we make it available to, and whether we use it for automated individual decisionmaking (and possibly how automated individual decisionmaking works).

We will provide you with a free copy of your personal data. If you request more than one copy, we will ask you for the necessary monetary compensation for providing the other copies.

7.2.    Right to rectification

If you find out that your personal data that we process is incomplete or incorrect, you have the right to request that we rectify it or, taking into account the purposes of the processing, complete it.

7.3.   Right to erasure

You also have the right to the erasure of your personal data which is stored and processed by our association. In order for you to request the erasure of your personal data, one of the following reasons must be given:

  • your personal data is not necessary for the purpose for which it have been collected and processed;
  • you withdrew your consent based on which we processed your personal data, and we do not have any other legal basis for the processing of your personal data;
  • you will file an objection against the processing of your personal data, in case your personal data is processed for the purposes of marketing (e.g. sending commercial offers);
  • you will file an objection against the processing of your personal data on the basis of our legitimate interest and we will not be able to prove that our legitimate interest prevails over your right to erasure;
  • there is a statutory reason which requires the erasure of your personal data or
  • our association processes personal data of a child without parental consent to process it.

We would like to inform you that it is possible that your personal data cannot be erased on the basis of withdrawal of your consent or request to erase your personal data. This can happen, for example, when the processing of your personal data is required by law. If such situation occurs, our association will inform you about the reason for which your personal data could not be erased.

7.4.            Right to restriction of processing

If you think that your personal data processed by our association is incorrect, you have the right to request us to restrict the processing of your personal data for a period of time necessary to verify the accuracy of your personal data or to possibly rectify it.

You also have this right in the following cases:

  • the processing of your personal data by our association is illegal but you do not wish to erase it;
  • our association does not need your personal data for the purpose for which we have processed it, but you insist on its processing (esp. storing) by our association for determination, exercise, or defence of Your legal claims.
  • you have filed an objection against the processing of your personal data based on the legitimate interest of our association and the restriction of the processing will be valid for a period of time necessary to determine whether our legitimate interest prevails over your right not to process your personal data.

7.5.            Right tto object to the processing of your personal data on the bases of legitimate interest

Regarding the fact that we process some of your personal data on the bases of legitimate interest, you have a right to file an objection against this processing. Based on that objection, we will consider whether it is really in our legitimate interest to process your personal data for the given purpose, or whether your right not to process your personal data prevails over our legitimate interest.

7.6.            Right to lodge a complaint

Should you assume that all of the aforementioned rights are insufficient, or you are of the opinion that our association has violated your rights in any way, you have the right to lodge a complaint with a supervisory authority. You can lodge the complaint with The Office for Personal Data Protection via contact information available at: https://www.uoou.cz/podatelna-uradu/os-1006 .

8. Effectiveness

This Policy is effective as of the 25th May 2018.