Personal Data Processing Statement at the Ministry of Industry and Trade

 

The processing of personal data is carried out in accordance with the Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR"), and in accordance with relevant national legal regulations regarding personal data protection. As the personal data controller, based on the obligations imposed by special laws on personal data processing, the Administrator ensures the protection of the privacy and personal life of the data subject.

 

Scope of the Administrator's competence and resulting purposes for the processing of personal data.

The Administrator processes personal data based on special legal regulations necessary for identifying the data subject and for fulfilling legal obligations set by regulations in areas under the Administrator's scope, which include:

• Industrial policy, energy policy, trade policy within the context of the EU single market, export policy, creation of a unified raw material policy, and utilization of mineral resources;
• Support for entrepreneurship and investment in the processing industry and industrial research and development, techniques, and technologies, including the use of European funds in this area;
• Internal trade and consumer protection in the context of EU consumer policy;
• Support for small and medium-sized enterprises, excluding regional business support, and support for the development of small businesses and utilization of European funds in this area;
• Technical standardization, metrology, and state testing;
• Electronic communications and postal services.

Legal basis for processing personal data

The Administrator primarily uses legal bases for processing personal data to fulfill legal obligations, to perform tasks in the public interest or in the exercise of public authority, and for necessary fulfillment of a contract. It also uses other legal bases, such as the consent of the data subject for processing personal data provided by the data subject, for the protection of vital interests of the data subject, and for legitimate interests of the Administrator.

Categories of personal data:

• Identification data – e.g., first name, last name, title, date of birth, business ID, tax ID, birth number
• Contact data – e.g., permanent address, delivery address, email address, phone number, data mailbox
• Payment data – e.g., bank account number
• Other data necessary for fulfilling the contract,
• Data provided beyond the scope of relevant laws processed within the granted consent of the data subject.

 

The administrator processes personal data using computer technology or manually for paper-based personal data, while adhering to all security principles for managing and processing personal data.

The administrator obtains personal data primarily from data subjects, from basic registers, from agenda information systems, from public administration information systems, and from publicly accessible registers.

 

The duration of personal data processing is determined by the deadlines specified in relevant contracts, in the records and destruction order, or in relevant legal regulations. This is the necessary time to ensure the rights and obligations arising from both contractual relationships and applicable legal regulations.

 

Based on the above, personal data of the data subject may be transferred or made accessible only to persons, bodies, or institutions entitled to such data under the mentioned regulations, laws, or public interest. Personal data processing does not involve automated decision-making.

 

The Administrator processes data with the consent of the data subject, except in cases established by law where personal data processing does not require the data subject’s consent.

 

Exercise of the rights of data subjects

The rights of data subjects are primarily outlined in Chapter III of the GDPR Regulation –  "Rights of Data Subject" and § 81 and following of Act No. 89/2012 Coll. These include the following rights:

• The right of access to personal data
• The right to rectification, supplementation, or deletion
• The right to restriction
• The right to data portability
• The right to object
• The right not to be subject to automated individual decision-making with legal or similar effects, including profiling

 

The above rights can be exercised by the data subject through the  REQUEST FOR PERSONAL DATA SUBJECT [docx, 60 kB].

The completed form can be submitted in the following ways:

• In person (with an identity document) or by mail (with an officially verified signature) to the address Data Protection Officer, Ministry of Industry and Trade, Na Františku 32, 110 15 Prague 1
• Electronically with a qualified digital signature to the address poverenec@mpo.cz
• Via data mailbox (data mailbox ID: bxtaaw4)

 

Supervisory authority

The data subject has the right to contact the supervisory authority at any time with their concerns. The supervisory authority is:

 

Office for Personal Data Protection 

Address: Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice 

Phone: +420 234 665 111

 

Data Protection Officer (DPO)

In case of detecting a violation of personal data protection, it is possible to contact the Data Protection Officer directly.

Requests to exercise the rights of the data subject can be submitted in the above-mentioned manner or you can contact the

Data Protection Officer directly:

Data Protection Officer (DPO):

Name: Mgr. Jarmila Marta Šmardová 

Email: poverenec@mpo.cz

Phone: 224 851 111

 

This Privacy Statement is publicly available on the Administrator's website and will be updated as necessary.