The Centre for Foreigners of the South Moravian region, z. ú. (hereinafter referred to as “Centre” or “controller”), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ES (General Data Protection Regulation; hereinafter referred to as “GDPR”).
Identity and Contact Information of the Controller
Centre for Foreigners of the South Moravian region, z. ú., Company Registration No. (IČO) 17456517, seat at Žerotínovo náměstí 449/3, Veveří, 602 00 Brno, Data box ID: nqdvqt7.
Purposes of Processing Personal Data and Legal Basis for Processing
The Centre processes your personal data primarily for:
- a) the fulfillment of legal obligations that apply to the administrator;
- b) the fulfillment of a contract, or for the implementation of measures taken before the conclusion of a contract;
- d) the legitimate interests of the controller; and
- e) in exceptional cases, personal data may be processed on the basis of consent granted by you which always expresses the free, specific, informed, and unambiguous expression of your will, and which always includes information on the possibility of withdrawing such consent at any time.
The Centre only processes your personal data to the necessary extent for the given purpose, on the proper legal basis and for the time necessary to fulfill the purpose. However, after fulfilling the purpose for such personal data processing, the Centre may process your data for other purposes, if there is a legal basis for doing so.
Activities Related to the Processing of Your Personal Data
The processing of your personal data under the control of the controller shall mainly take place in: providing consultations, registration for projects and courses, handling inquiries, sending information and newsletters, administration of personnel and payroll agendas including tenders, awarding public contracts, and concluding contracts.
Processing and Security of Personal Data
When processing personal data, the controller always proceeds in a manner that ensures your personal data is as secure as possible and cannot be misused.
Recipients of Your Personal Data
Your personal data are only passed on to other persons in cases in which this obligation is imposed by a legal regulation, or when it is necessary for the administrator’s protection and for the exercising the of its rights. Your personal data may be passed on to the following recipients: state administration authorities and providers of subsidies.
Period of Time in Which Your Data Are Processed
Personal data are processed for the necessary time period, the length of which depends on the individual purposes of processing. After the expiration of this time period, the personal data are liquidated, unless these are documents selected for archiving in compliance with the Act on Archiving.
Your Rights Connected with Personal Data Processing
In connection with your personal data protection, you have the following rights:
- to request that the administrator provide you with access to personal data that concern you;
- request that the administrator correct incorrect personal data or provide missing personal data that concern you;
- request that the administrator delete provided personal data that concern you, if you consider that the administrator no longer has any reason to process your personal data, or if your personal data are not necessary for the purposes for which they were collected or processed in a different manner, or if your personal data are processed by the administrator illegally;
- request that the administrator limit the processing of your personal data;
- object against the processing of your personal data if the data are processed for the purposes of the completion of a task carried out in the public interest or while exercising a public authority, or for the purposes of the legitimate interests of the administrator or a third party; and
- file a complaint with the Data Protection Authority if you think that your right to personal data protection has been violated.
The aforementioned rights may be exercised in written form with the administrator, namely via the data inbox or electronic communication services.
If the processing of your personal data is subject to your consent, you have the right to withdraw your consent. However, this does not affect the legality of the processing based on the consent which was granted by you prior to this withdrawal.