Home Processing Of Personal Data

Processing of personal data

Information on the processing of personal data in accordance with GDPR

The Czech Environmental Inspectorate (administrator) processes personal data of subjects in accordance with Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and in compliance with other relevant legal regulations. Ensuring a high standard of personal data protection is a priority for the CEI in all areas of personal data processing, and these Information on the Processing of Personal Data represent a declaration of a high standard of protection when collecting and processing personal data in the activities of the CEI.

Contact details of the administrator:

Czech Environmental Inspectorate

Na Břehu 267/1a

190 00 Praha

phone: 222 860 111

e-mail: podatelnazavináčcizp.cz

Data Box ID: zr5efbb

Data Protection Officer

In all matters related to the processing of personal data and the exercise of rights under the Regulation, you can contact the Data Protection Officer, René Piták, MBA.

address: Na Břehu 267/1a, 190 00 Praha

phone: 222 860 237

mobile: 704 980 836

e-mail: povereneczavináčcizp.cz

Terms used

Administrator / CEI: Czech Environmental Inspectorate

Regulation: Regulation of the European Parliament and of the Council (EU) No. 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data: All information about an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier, or one or more specific elements of physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Data subject: In particular, controlled individuals, submitters of reports, applicants for information requests, complainants, entities involved in administrative/offense proceedings, state employees assigned/appointed to a position at the CEI, employees performing work according to the Labour Code at the CEI, job applicants, and other individuals providing personal data to the CEI.

Processing: Any operation or set of operations with personal data or sets of personal data, whether performed by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, searching, viewing, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

The purpose of personal data processing and the legal basis of their processing

The CEI processes the subjects' personal data for reasons of compliance with contractual obligations and fulfilment of legal requirements and does so on the basis of:

  • performance of a contract to which the data subject is a contracting party, or for the implementation of measures taken prior to the conclusion of the contract at the request of this data subject,
  • legal obligations that apply to the CEI,
  • performance of tasks carried out by the CEI in the public interest or in the exercise of public authority with which the CEI is entrusted,
  • granted consent to the processing of personal data for one or more specific purposes.

Personal data is processed for the following purposes:

  • carrying out inspection and supervisory activities according to Act No. 255/2012 Coll., on Inspection (Inspection Procedure), and so-called component laws, the list of which is provided at www.cizp.cz/en/scope.
  • administrative proceedings (administrative proceedings according to Act No. 500/2004 Coll., Administrative Procedure, as amended, offense proceedings according to Act No. 250/2016 Coll., on Liability for Offenses and Proceedings Thereof, as amended) and tax proceedings according to Act No. 280/2009 Coll., Tax Procedure, as amended, enforcement proceedings according to the Administrative Procedure and Act No. 120/2001 Coll., on Judicial Executors and Enforcement Activities (Enforcement Procedure), and amendment of other laws, as amended
  • receiving and processing submissions and complaints according to Act No. 500/2004 Coll., Administrative Procedure, as amended, and petitions according to Act No. 85/1990 Coll., on the Right to Petition, as amended
  • fulfilment of information obligations according to Act No. 106/1999 Coll., on Free Access to Information, as amended, and Act No. 123/1998 Coll., on the Right to Information on the Environment, as amended
  • personnel matters (including selection procedures for filling service/employment positions)
  • public procurement
  • fulfilment of supplier-customer relationships
  • property protection.

Categories of personal data

The principles of personal data processing apply both to personal data provided by data subjects and to personal data obtained from other sources.

Sources of personal data:

  • directly from the entities (on the basis of their legal obligation, voluntarily provided)
  • from state and other public authorities within the framework of the fulfilment of legal obligations established by relevant legal regulations
  • publicly accessible registers and records
  • basic registers according to Act No. 111/2009 Coll., on Basic Registers, as amended

Categories of personal data:

All personal data are processed by the CEI in accordance with and to the extent of the purpose for which they were provided or to the extent imposed by the relevant legal regulations.

The CEI uses the professional and specialized services of other entities to process personal data, which process personal data only within the framework of instructions from the administrator and may not use them otherwise. A contract on the processing of personal data is concluded with each such entity, in which the processor has strict obligations to protect and secure personal data.

No profiling or automated decision-making is carried out when processing personal data.

Basic personal data:

  • academic title,
  • name or names, surname,
  • distinguishing supplement of a natural person doing business,
  • date of birth (birth number),
  • ID number, VAT number,
  • permanent address,
  • identification data of the representative of the natural person, contact person,
  • numbers of identification documents,
  • photos (from the place of inspection),
  • signature.
     

Personal contact information

  • mailing address,
  • email address,
  • data box ID,
  • telephone number,
  • bank connection

Recipients of personal data

Within its activities, the CEI provides personal data to third parties always in accordance with legal regulations for the purpose of fulfilling its legal obligations. These third parties are public authorities, such as general and administrative courts, administrative bodies (e.g. State Environmental Fund of the Czech Republic, Nature Conservation Agency of the Czech Republic), central state administration bodies (e.g. Ministry of Environment, Ministry of Labour and Social Affairs, Czech Statistical Office), the Police of the Czech Republic, and other recipients.

Time of personal data processing

Personal data will be processed in accordance with legal regulations and in accordance with the deadlines specified in the file and shredding regulations of the CEI issued pursuant to Act No. 499/2001 Coll., on Archiving and File Service and on the Amendment of Certain Laws, as amended.

Information about rights

The CEI hereby instructs the subject of personal data in connection with the processing of personal data in accordance with Articles 15-22 and 34 of the Regulation on their rights. These authorizations arising from the relevant standards are applicable to the administrator from May 25, 2018.

The data subject has the right to:

  • request access to personal data provided;
  • to request correction or deletion of provided personal data, or alternatively, to restrict their processing, raise objections to processing, and also the right to data portability;
  • to file a complaint with the supervisory authority; (Personal Data Protection Office);
  • to withdraw the given consent for the processing of personal data;
  • not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects on them or similarly significantly affects them.

These principles of personal data processing are issued as of September 1, 2023

The principles may be updated as necessary.