Information on the processing of personal data
Information disclosed in terms of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”).
Data controller
The personal data controller is the Archbishopric of Prague, registration number (IČO) 004 45 100, with registered office at Hradčanské náměstí 56/16, 118 00 Prague 1.
Data protection officer
In accordance with its obligations under the GDPR, the Archbishopric of Prague has appointed a data protection officer. Our data protection officer is a company Lexius advokáti s.r.o., IČO 04666933, with registered office at Na Podkovce 281/10, Prague 4, branch office at Thákurova 676/3, Prague 6. In case of any requests or questions, you can contact the officer by mail at the address of the registered office or the branch office, by phone at 703 142 855, or by e-mail at gdpr@lexius.cz. Our officer is ready to answer your messages, requests, and complaints in order to achieve the highest possible satisfaction on your part.
Processing of personal data
The Archbishopric of Prague processes personal data for the purpose of ensuring the administration of St. Nicholas Church in Malá Strana, primarily in the following areas:
- Camera system footage
We use CCTV to safeguard and protect our property, as well as to protect other church visitors and staff. This purpose is our legitimate interest within the meaning of Article 6 (1) (f) GDPR.
If a crime or offence is suspected, we will use the relevant camera footage in accordance with the instructions of public authorities.
We do not pass on camera footage to anyone, we only use it for our internal control. The exception is when we are obliged to hand them over to public authorities. We will not transfer personal data to countries outside the European Union or the European Economic Area or to any international organisation.
- Contact form
You can contact us through the contact form on the church´s website where you fill in your name, phone number and email address. This data will then be processed for the purpose of performance of a contract in accordance with Article 6 (1) (b) GDPR, so that we can respond to your enquiry with an adequate response.
We keep the data from the contact form for a maximum of 15 days after the end of the communication and do not transfer it to anyone.
- Personnel agenda, property management and related contractual relations
The data controller is entitled to process personal data on the basis of fulfilment of a legal obligation, performance of a contract, legitimate interest of the controller or a third party, or consent to the processing of personal data given by the data subject. When processing personal data, the controller follows the statutory time limitations and time limits set out after careful consideration in the internal regulation so as to avoid violating the rights of data subjects.
In some cases, the processing of personal data requires the transfer of personal data to another person. The Archbishopric of Prague tries to minimize the transfer, but in some cases, it is necessary to fulfil the Archbishopric of Prague’s legal obligations, contract or within the framework of the Church’s activities. In all cases when the controller transfers personal data to another person, the Archbishopric of Prague seeks to ensure that the rights of data subjects are protected to the fullest extent possible.
Rights of the data subject
In order to ensure that data subjects have the widest possible control over the processing of their personal data, the GDPR sets out a number of rights that can be claimed against any data controller. If you decide to exercise any of your rights, please contact us.
Your fundamental right is to request a disclosure at any time as to whether the controller is processing your personal data. If we are processing it, you have the right to request one copy of all your personal data. If you find that the data processed is inaccurate, you have the right to request the correction of the personal data. If you conclude that we are not processing your personal data lawfully, you may exercise your right to have your personal data erased. Finally, if you are dissatisfied with anything or feel that we have not handled your request as we should have, you have the right to submit a complaint to the Czech data protection authority.
We would like to stress that regardless of the nature of your relationship with the controller, you are not at any risk by exercising these rights and the controller will not treat you any worse in the future than before exercising your rights. It is our concern to process personal data lawfully and properly and not to impair your rights. If you have any doubts that we are succeeding in this, please let us know.
Archbishopric of Prague