What is personal data?

Personal data means any information which can be used to identify a natural person (or a data subject). Personal data include name, identification number, location data, online identifiers, and also factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

What does the processing of personal data mean?

Processing means any operation which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, erasure or destruction. The purpose of the processing will be based on legal bases:

• Legal obligation of the controller
• Performance or conclusion of a contract with a data subject (i.e. with a natural person)
• Data subject's consent
• Protection of the vital interests of a data subject
• Public interest or the exercise of public authority
• Legitimate interest of the controller

What are the data subject’s rights?

The General Regulation of the European Parliament and of the Council (EU) 2016/679, on the protection of personal data (known as GDPR), which came into force on 25 May 2018, expands the existing set of rights of data subjects. These rights include:

The data subject's right of access to personal data, and information about whether or not and which personal data are processed by UWB

You have the right to ask UWB whether or not and which personal data concerning your person are being processed. Where this is the case, you have the right of access to your personal data.

The right to rectification of inaccurate data

If you find out that some of your personal data processed by UWB are inaccurate, you have the right to ask UWB for their rectification, or for the completion of incomplete personal data by means of a supplementary statement.

The right to erasure of personal data

You have the right to ask UWB to erase your personal data if:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw the consent on which the processing is based;
• there are no overriding legitimate grounds for the processing;
• your personal data have been unlawfully processed;
• you object to the processing of your personal data and UWB does not demonstrate compelling legitimate grounds for their processing.

However, it is necessary to remember that UWB is not obliged to erase your personal data if their processing is necessary:

• for compliance with legal obligations which require processing;
• for archiving, scientific or historical research purposes or statistical purposes if the erasure of data is likely to render impossible or seriously impair the achievement of the objectives of that processing;
• for exercising the right of freedom of expression and information;
• for the exercise and defence of UWB legal claims.

Right to the restriction of processing

You have the right to the restriction of processing of your personal data (with the exception of storage) if:

• you contest the accuracy of your personal data;
• the processing of your personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• UWB no longer needs your personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
• you object the processing. In that case, UWB will no longer process your personal data unless UWB demonstrates compelling legitimate grounds for the processing which override your interests.

Right to data portability

You have the right to receive the personal data which you have provided to UWB. You also have the right to transmit these data to another controller if UWB processes these data based on your consent, or if the transfer is necessary for the performance of a contract.

The right to object

If you believe that UWB does not process your personal data lawfully, you have the right to address UWB and object to the processing.
 

The right to withdraw your consent to the processing of personal data

If your consent is the legal basis for the lawful processing of your personal data at UWB, you have the right to withdraw it at any time. You must be informed about this right at the moment you give your consent to the data processing.

The right to lodge a complaint with the Office for Personal Data Protection

If you file a complaint concerning the processing of your personal data and this complaint is not resolved successfully, you have the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Praha 7 ( https://www.uoou.cz/ ).

Does UWB use camera systems?

Yes, UWB monitors certain premises by using security cameras; however, the cameras are used only to protect life and property and their setting corresponds with this use. The premises are always marked, so that it is clear that they are watched by security cameras. In the event of a crime or if a crime is investigated by prosecuting authorities, UWB is obliged to hand the recordings over to these authorities.

Are there any UWB internal directives which regulate personal data protection?

Yes, there are various directives which regulate the issues related to information security and the position of the data protection officer, or lay down rules for personal data processing.

How can I exercise my rights? Who do I have to contact to exercise my rights?

You can exercise your rights as follows:

• by sending an application in paper form to UWB.
• by filling in a form published on the Data Protection Officer webpage.
• if you are a UWB employee, by sending an email to the data protection officer
• by visiting the data protection officer in person.

Can I ask UWB for an explanation which includes the reason for the processing of my personal data?

Yes, this is one of the rights that you have as a data subject. Applications or questions concerning this issue should be addressed to the data protection officer.

How can UWB verify that the filed application is authentic?

Once the application concerning the exercise of one of your rights is delivered to UWB, we start looking into it. For security reasons, the data protection officer may ask you to prove your identity and submit some additional information, so that it is perfectly clear that the application in not fraudulent.

How long does it take to process my application?

Your application will be processed as soon as possible, but not later that one month from the date of its receipt.

With regard to the complexity and the number of applications received, UWB is entitled to extend the above-mentioned deadline. The applicant will be notified about this in writing.

How much does it cost to process my application?

UWB processes all applications free of charge.

However, if your application is inadequate, manifestly irrelevant, or repeated, UWB may charge an administrative fee for the provision of information, or the performance of tasks related to this.

If I granted my consent to the processing of my personal data, am I entitled to withdraw it?

Yes, you are.

ou can withdraw your consent by contacting the UWB department to which you granted the consent. You may also contact the personal data officer.

Do I have the right to lodge a complaint with a supervisory authority?

If you file a complaint concerning the processing of your personal data with UWB and this complaint is not resolved successfully, you have the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Praha 7 - https://www.uoou.cz/