Personal Data Processing Policy
1. General Provisions
This personal data processing policy has been prepared in accordance with the requirements of Federal Law dated 27.07.2006 No. 152-FZ “On Personal Data” (hereinafter — the “Personal Data Law”) and defines the procedure for processing personal data and measures to ensure the security of personal data taken by NB prof Stav (hereinafter — the “Operator”).
1.1.
The Operator considers compliance with human and civil rights and freedoms during personal data processing as its primary goal and condition of its activity, including protection of the right to privacy, personal and family secrecy.
1.2.
This Operator’s policy applies to all information that the Operator may receive about visitors to the website https://nbprofstav.cz/.
2. Key Terms Used in the Policy
2.1.
Automated personal data processing — processing of personal data using computer technology.
2.2.
Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify personal data).
2.3.
Website — a set of graphical and informational materials, as well as software and databases ensuring their availability on the Internet at https://nbprofstav.cz/.
2.4.
Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5.
Depersonalization of personal data — actions that make it impossible to identify a specific user without additional information.
2.6.
Personal data processing — any action or set of actions performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, use, transfer, depersonalization, blocking, deletion, and destruction.
2.7.
Operator — a state authority, municipal authority, legal entity, or individual who independently or jointly organizes and/or processes personal data.
2.8.
Personal data — any information relating directly or indirectly to an identified or identifiable website user.
2.9.
Personal data permitted for dissemination — personal data made publicly available by the subject through consent in accordance with the law.
2.10.
User — any visitor of the website https://nbprofstav.cz/.
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or group of persons.
2.12.
Dissemination of personal data — actions aimed at making personal data available to an indefinite circle of persons.
2.13.
Cross-border transfer of personal data — transfer of personal data to a foreign state, foreign authority, or foreign legal or natural person.
2.14.
Destruction of personal data — actions resulting in irreversible deletion of personal data.
3. Rights and Obligations of the Operator
3.1. The Operator has the right to:
— obtain accurate information and/or documents containing personal data from the data subject;
— continue processing personal data even after withdrawal of consent if permitted by law;
— independently determine necessary measures to ensure compliance with legal obligations.
3.2. The Operator is obliged to:
— provide information about personal data processing upon request;
— organize processing in accordance with applicable law;
— respond to requests from data subjects;
— notify the supervisory authority when required;
— publish this policy;
— implement measures to protect personal data;
— stop processing and delete personal data in legally required cases.
4. Rights and Obligations of Data Subjects
4.1. Data subjects have the right to:
— obtain information about their personal data processing;
— request correction, blocking, or deletion of inaccurate or unlawfully processed data;
— withdraw consent;
— file complaints with supervisory authorities or courts;
— other rights under applicable law.
4.2. Data subjects are obliged to:
— provide accurate personal data;
— update their personal data when changes occur.
5. Principles of Personal Data Processing
Processing is carried out lawfully, fairly, for specific purposes, limited to those purposes, and ensures accuracy and relevance. Data is stored only as long as necessary.
6. Purpose of Data Processing
Purpose: informing the User via email communications.
Personal data: philosophical beliefs.
Legal basis: Federal Law “On Information, Information Technologies and Information Protection” No. 149-FZ dated 27.07.2006.
Processing type: transfer of personal data.
7. Conditions for Processing Personal Data
Processing is carried out with the consent of the data subject, or as required by law, contracts, or legal obligations.
8. Procedure for Collection, Storage, and Protection of Personal Data
The Operator ensures security through legal, organizational, and technical measures. Unauthorized access is prevented, and data confidentiality is maintained.
9. Operations Performed on Personal Data
The Operator performs collection, recording, systematization, storage, updating, use, transfer, blocking, deletion, and destruction of personal data.
Processing may be automated or non-automated.
10. Cross-Border Transfer of Personal Data
The Operator must notify the supervisory authority before carrying out cross-border data transfers and obtain necessary information from foreign recipients.
11. Confidentiality of Personal Data
The Operator and other persons with access to personal data must not disclose or distribute such data without the consent of the data subject, unless required by law.
12. Final Provisions
The User may request clarifications regarding personal data processing by contacting info@nbprofstav.cz.
This policy may be updated. The current version is available at https://nbprofstav.cz/privacy/.