Protection of personal data

The Institute of Sociology of the Czech Academy of Sciences, with its main establishment at Jilská 361/1, Praha 1 – Staré Město, PSČ 110 00, in accordance with Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ES (General Data Protection Regulation) hereby informs data subjects regarding their protection in connection with the processing of the personal data of natural persons and regarding the data protection officer.

Data controller

Sociologický ústav AV ČR, v. v. i. (Institute of Sociology of the Czech Academy of Sciences)

a public research institute in accordance with law 341/2005 Sb., on public research institutes, listed in the register of public research institutes held by the Ministry of Education, Youth and Sports

with its main establishment at Jilská 361/1, Praha 1 – Staré Město, PSČ 110 00
organisation registration number: 68378025

e-mail: socmail@soc.cas.cz
telephone: +420 210 310 220 (office)
data mailbox identifier: i4gng7e

A data protection officer is designated to provide data subjects with information regarding the processing of personal data and answer questions regarding this issue.

Identification and contact details of data protection officer

JUSTITIA LEGAL PARTNERS, s.r.o.

a law firm registered with the Czech Bar Association and the Prague City Court under file no. C 276372

with its main establishment at Půtova 1219/3, Praha 1 – Nové Město, PSČ 110 00
organisation registration number: 06115071

e-mail: legal@justitia.cz
telephone: +420 778 088 818 nebo +420 778 088 848
data mailbox identifier: yhzi6a3

The data protection officer performs the following activities:

• providing information and advice to the controller, processors and employees, especially with regard to their duties relating to the processing of personal data
• participating, in an independent manner, in the proper processing of personal data by the data controller, especially by maintaining a register of data processing activities, by participating, as specialists, in the evaluation of the influence of activities on data protection and updating the information website regarding the processing of personal data
• monitoring and evaluating the processing of personal data and recommending measures regarding proper data processing
• providing information to data subjects on data processing, and answering questions relating to it
• receiving requests and complaints from data subjects
• receiving withdrawals of consent to data processing
• cooperating with the supervisory authority
• acting as a contact point for the supervisory authority in matters concerning the processing of personal data and, where necessary, consulting it on issues relating to the protection of personal data

The purposes of the processing for which the personal data are designated, and the legal basis for their processing

The controller and processor of the personal data shall process personal data only for the purposes of:

• fulfilling legal obligations, when processing is essential in order to fulfil legal obligations that relate to the controller,
• the scientific and research activities of the personal data controller, when processing is essential for the purposes of the legitimate interests of the controller in question,
• fulfilling a contract between contractual parties, when processing is essential for the fulfilment of a contract to which one of the parties is the data subject, or for carrying out measures adopted before the contract was entered into,
• the legitimate interests of the personal data controller in the scientific and research field and in internal management, including assessment, and
• fulfilling a purpose concretised in an individual consent by a data subject to the processing of personal data, when the data subject gives consent to processing for one or more concrete purposes.

Categories of recipients or recipients of personal data

The recipients of personal data are as follows:

• in the case of the fulfilment of legal obligations they are the executors of public administration
• in the case of scientific and research activity they are the personal data controller and the public
• in the case of the fulfilment of a contract they are the personal data controller and the contractual party
• in the case of legitimate interests it is the personal data controller
• in the case of provision on the basis of prior consent they are the personal data controller and the public

Intent of the controller to transfer personal data to a third country or an international organisation

The controller and processor of personal data does not intend to transfer personal data to a third country or international organisation.

An exception consists of joint scientific and research activity in which subjects from third countries or international organisations are involved as processors of personal data.

Period for which personal data will be stored

The period for which personal data will be stored:

• in the case of fulfilment of legal obligations is set by the relevant legislation
• in the case of scientific and research activity is set as the period necessary for the performing of this activity
• in the case of fulfilment of a contract is set by the Document Management and Destruction Rules
• in the case of the legitimate interests of the controller is set as the necessary period
• in the case of provision on the basis of prior consent is stated in the relevant consent

Legitimate interests of the controller of personal data

The legitimate interests of the controller of personal data are the proper performance of the scientific and research activity for the performance of which the controller was established (the carrying out of scientific activity in the field of social sciences and public opinion research, contributing to the use of their results and the provision of research infrastructure) and the proper internal management of the organisation.

Rights of the data subject to access, amend, erase or limit processing, to lodge a complaint or request a transfer

The data subject may request access to his or her personal data, its amendment or erasure and further to limit its processing.

The data subject shall also have the right to lodge a complaint regarding the processing of personal data and to request the provision of personal data for the purpose of their transfer to another controller.

The personal data protection officer is designated to receive such requests and complaints.

Right to withdraw consent to personal data processing

The data subject has the right to withdraw at any time consent to the processing of personal data, provided that the processing is based on previously granted consent.

This does not affect the lawfulness of personal data processing on the basis of consent granted before its withdrawal.

The personal data protection officer is designated to receive such requests.

Right to file a complaint with the supervisory authority

The data subject has the right to lodge a complaint regarding unlawful personal data processing with the supervisory authority, which is the:

Office for Personal Data Protection

the central administrative office for matters concerning personal data protection in accordance with law no. 110/2019 Sb., on the processing of personal data

with its main establishment at Pplk. Sochora 727/27, Praha 7 – Holešovice, PSČ 170 00
organisation registration number: 70837627

e-mail: posta@uoou.cz
telephone: +420 234 665 111
data mailbox identifier: qkbaa2n

Automised decision-making

Automised decision-making, including profiling, does not take place.