Information on the processing and protection of personal data
The Confederation of Industry of the Czech Republic, Freyova 948/11, 190 00 Prague 9, ID No.: 005 36 211 (hereinafter referred to as SPCR) strictly complies with the legal provisions relating to the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the "GDPR"), which entered into force on 25 May 2018.
In connection with its mission and activities, SP CR processes personal data:
1. job applicants: name and surname, permanent address, gender, date of birth, education, current and previous employment, telephone number, e-mail address, period of maternity and parental leave, experience and skills, training and courses attended, photographs. The purpose of the processing is the fulfilment of mutual rights and obligations between the job seeker and the potential employer and the provision of HR and personnel management. The legal title of the processing is the fulfilment of the obligations of the SP CR as an employer according to Article 6(1)(c) GDPR.
2. members of the elected bodies of the SP CR: name, surname, maiden name, title, date of birth, birth number, place of birth, district of birth, citizenship, place of residence, telephone, email, company, position in the company, address of the company, where the purpose of processing is the fulfilment of the legal obligation to register in the public registers, the register of beneficial owners and the list of qualified suppliers. The legal title of the processing is the fulfilment of the obligation under Article 6(1)(c) GDPR
3. members, observers and partners of the SP CR: contact details of contact persons and other representatives of its members, observers and partners - name, surname, title, position in the company, business email, business telephone , where the purpose of the processing is the implementation of membership, observer and partnership status. The legal title of the processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR or a legitimate interest pursuant to Article 6(1)(f) of the GDPR (sending information in the form of commercial communications about other services offered by the SP CR).
4. participants in training and other events/courses: name, surname, job title, business mobile, email address, (in the case of specific events, ID card number), where the purpose of the processing is the performance of the contract and/or invoicing. The legal title of the processing is the performance of the contract according to Article 6(1)(b) GDPR.
5. supported persons/participants in the framework of actions/projects financed by ESF, OP TAK and TAČR grants, etc. and activities pursuant to § 320a (a) and (b) of the Labour Code: name, surname, email address, employer's name, position in the company, photographs, printscreens of participants in events, where the purpose of the processing is the implementation of the project, in particular reports on the implementation of the project. The legal title of the processing is the fulfilment of a legal obligation under Article 6(1)(c) GDPR, where the SP CR as a beneficiary of the subsidy is authorised to process personal data, including a special category of personal data of persons supported in the project, in order to demonstrate the proper and effective use of the funds provided for the implementation of the project by the legal act on the provision of support.
6. participants in business foreign missions: name, surname, maiden name, job title, permanent home address, delivery address, gender, age, date of birth, place of birth, dietary restrictions, birth number, photograph, email address, telephone numbers, ID card number, passport number, car registration number and vehicle type.
7. participants in incoming business forums: name, surname, employer name, job title, email address, telephone number, where the purpose of the processing is to ensure the participation of representatives of organisations in incoming business forums. The legal basis for processing is the performance of a contract pursuant to Article 6(1)(b) GDPR.
8. of persons enrolled in the Qualified Employee Programme - identification data: first name, surname, date of birth, nationality, delivery address of the applicant, private telephone number (or contact person), passport number, CZ ISCO , vacancy number in the register of the Office of the Public Prosecutor, date of publication of the vacancy in the Office of the Public Prosecutor. The purpose of the processing is the fulfilment of legal obligations set out in Act No. 326/1999 Coll. as amended, Government Regulation No. 220/2019 Coll. and Government Resolution No. 581 of 26 August 2019 The legal basis for the processing is the fulfilment of a legal obligation under Article 6(1)(c) or a legitimate interest under Article 6(1)(f) of the GDPR.
9. persons sent to the Czech Republic for the purpose of the Training - identification data name, surname, maiden name, delivery address, date of birth, place of birth, private telephone number, passport. The purpose of the processing is to assess compliance with the conditions under which a foreigner may be sent to a Czech legal or natural person for the purpose of improving skills and qualifications (so-called training). The legal basis for processing is the fulfilment of the legal obligation of Article 6(1)(c) GDPR, (Section 178b(4) of Act No. 326/1999 Coll., on the residence of foreigners and Section 98 of the Employment Act in accordance with Government Resolution No. 962 of 24 November 2014).
10. website visitors - network identifiers called cookies. This information is anonymous (e.g. type of browser, domain name of the internet provider). The purpose of processing is to improve (analytical cookies) and ensure the correct functioning of the website (essential cookies). The legal basis for processing is legitimate interest according to Article 6 (f) GDPR.
11. visitors to the headquarters and dislocated workplaces of the SP CR - identification data: name, surname, ID card and data on non-fulfillment of Covid 19 disease indicators. The purpose of processing is to ensure OSH. The legal basis for processing is the fulfilment of a legal obligation pursuant to Article 6(1)(c) or legitimate interest pursuant to Article 6(1)(f) of the GDPR.
12. whistleblowers and data subjects - identification data: name, surname, date of birth and contact details of the whistleblower and data necessary to identify the data subject. The purpose of the processing is to fulfil the employer's obligation under the Whistleblower Protection Act. The legal basis for the processing is to comply with the legal obligations under Article 6(1)(c) of the GDPR. Special categories of personal data may be processed in relation to notification on the basis of Article 9(2)(e), (f) or (g) of the GDPR.
The purpose of the processing of personal data may also be for direct marketing/sending commercial communications, where commercial communications are sent to an email address only on the basis of prior consent (Article 6(1)(a) GDPR. It is possible to withdraw consent and refuse the sending of commercial communications at any time.
Personal data is processed only for the stated lawful purposes and will be kept for a period of time that does not exceed the time necessary to fulfil the purpose for which it is collected and processed. The security, integrity and confidentiality of personal data is ensured by the implementation of appropriate technical and organisational security measures. Personal data is not sold or otherwise provided to commercial entities.
Any further processing of personal data beyond that specified herein takes place on the basis of the data subject's consent (e.g. taking photographs and publishing them in the media, on social networks).
Personal data is processed directly by SP ČR.
The processing of personal data takes place in technically and physically secure electronic information systems.
Personal data may be transferred for processing within the European Union or the European Economic Area (e.g. in the context of participation in the activities of BusinessEurope, OECD, etc.).
Under certain conditions, personal data may be disclosed to public authorities (courts, police, notaries, tax authorities or other bodies in the exercise of their legal powers to the extent provided by a specific law).
The subject of personal data has the right to request access to personal data from the SP CR, the right to rectification, erasure or restriction of their processing, as well as the right to object to their processing and the right to their portability, unless this is contrary to the purpose of processing.
In addition, the right to withdraw consent in cases where processing is carried out on the basis of consent.
The processing of personal data of the SP CR does not involve the use of personal data for decision-making purely on the basis of automated processing or profiling.
Contact :
Confederation of Industry of the Czech Republic
JUDr. Jitka Hlaváčková
Lawyer
Freyova 948/11, 190 00 Prague 9
ICO: 005 36 211
The data subject has the right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7, email: posta@uoou.cz .
This Privacy Policy is regularly reviewed and the SP CR reserves the right to change it if necessary.
updated 11 December 2024