1. Purposes of processing personal data and legal basis
During the Czech Presidency of the Council of the EU from 1 July to 31 December 2022, as well as for the purposes of preparing inter-parliamentary events in the first half of 2023, personal data of persons attending parliamentary meetings will be collected along with information related to their visit. Information about attendees is needed for the purpose of making meeting arrangements, such as preparing photo ID cards, preparing meeting materials, recording the meetings and preparing publications. Direct webcasts of the meetings, as well as the names and countries of the attendees, will be published online at www.parleu2022.cz.
Legal basis for processing:
• the consent of the data subject (given when the attendee signs up electronically), Article 6 (1) (a) of the General Data Protection Regulation – GDPR (EU 2016/679);
• a task carried out in the public interest, Article 6 (1) (e) of the Data Protection Regulation and paragraph 5 of the Czech Data Protection Act (110/2019 Coll.).
2. Personal data to be processed and the source of data
The personal data collected during online registration includes some or all of the following: attendee’s name, gender, country, e-mail, telephone numbers, professional title, organisation, political party, postal address, passport number and food allergies.
3. Recipients or categories of recipients of personal data
Personal data will only be disclosed to those involved in the arrangements of the meetings to the extent necessary for the arrangements and execution of the meetings in accordance with the stated purpose. Personal data will be processed by the staff of the National Assembly office involved in the organisation of visits, as well as online publication (www.parleu2022.cz).
4. Transfer of data to third countries
Data will not be transferred outside the European Union (EU) or the European Economic Area (EEA).
5. Retention of personal data
Personal data will be retained as long as it is needed for the purpose of meeting arrangements.
6. Automated decision-making and profiling
Personal data in the filing system will not be used for automated decision-making or profiling.
7. Data subject’s rights
Data subjects have the right to check their personal data in the filing system. According to the General Data Protection Regulation – GDPR, the data controller must respond to a request concerning the enforcement of the rights of a data subject within one month of receiving the request.
Data subjects can exercise their rights as follows:
A. Right of access to personal data
The data subject has the right to check what information about him/her is being processed.
B. Right to rectify and right to restrict processing
The data subject has the right to have the data controller restrict the processing if any one of the following conditions is met:
• the data subject contests the accuracy of the personal data (right of rectification), whereby processing is restricted for a period during which the data controller can verify the accuracy of the data;
• processing is unlawful and the data subject is opposed to the erasure of the personal data and instead requires a restriction on its use;
• the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs it to establish, present or defend a legal claim.
C. Right to erasure
The data subject has the right to have his/her personal data erased without undue delay when any one of the following conditions is met:
• personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
• personal data has been unlawfully processed; or
• personal data must be removed in order to comply with a legal obligation under EU law or national law.
D. Right to data portability
The data subject has the right to receive his/her personal data which he/she has provided to the data controller and to transfer the data to another data controller if the automatic processing of the personal data is based on the consent of the data subject or if the processing is based on an agreement.
E. Right to oppose the processing of personal data
The data subject has the right to object to the processing of personal data concerning him/her on the basis of his/her personal specific situation when the processing is based on a task carried out in the public interest or in the exercise of public authority vested in the data controller, including profiling based on these provisions. The data controller is then no longer allowed to process the personal data unless it can demonstrate that there is a substantial and justified reason for the processing such that it overrides the interests, rights and freedoms of the data subject or the processing is necessary for the establishment, presentation or defence of a legal claim.
F. Right to withdraw consent
The data subject has the right to withdraw his/her consent at any time, such withdrawal not affecting the lawfulness of the processing carried out prior to the withdrawal of consent.
G. Right to file a complaint with a supervisory authority
The data subject has the right to file a complaint with a supervisory authority if the data subject considers that the processing of his/her personal data violates the applicable data protection regulation.
The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Phone: (+420) 234 665 800
E- mail: [email protected]
8. Contact details of the data controller
The data controller are the Chamber of Deputies and the Senate. Their contact details are as follows:
The Chamber of Deputies
e-mail: [email protected]
The Senate
e-mail: [email protected]
The Chamber of Deputies or the Senate Data Protection Officer can be reached at the above email address.