Personal Data Protection Policy
We process personal data exclusively in accordance with the applicable legal regulations, in particular in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR) and Act No. 119/2019 Coll., the Personal Data Processing Act, as amended.
The personal data controller is Chuť pomáhat lidem, z.s., with its registered office at Pavlovská 506/20, Kohoutovice, 623 00 Brno, Id. No.: 04254066 (hereinafter “Chuť pomáhat (Desire to Help)”)
- Personal datais any information concerning an identified or identifiable natural person.
- The data subjectis the person whose personal data are concerned.
- Processing of personal datameans any operation where personal data is handled, including, but not limited to, displaying personal data, storing personal data in both electronic and paper form, saving personal data into a database, rectification, etc.
The Policy summarises the basic principles which Chuť pomáhat (Desire to Help) follows when processing your personal data.
We collect, retain and process personal data only to the extent necessary for the given purpose.
In terms of lawfulness of the personal data processing, the Act distinguishes personal data that can be processed without consent, and personal data that may only be processed with consent of the data subject i.e. you.
We process personal data without your consent only where
- this is our legal duty, i.e. in a situation where a law directly requires us to process the data (e.g. the Accounting Act).
Where this is not the case, we process personal data on the basis of your consent.
What personal data do we usually process?
Cookies are a tool which ensures the functionality of the website for a specific user. Chuť pomáhat collects only anonymised data, i.e. we do not collect data on individual visitors to our website.
To enhance our website and to analyse the visits to it we use Google Analytics and Hotjar, which automatically collect anonymous information about visits to this website using cookies.
Information about Donors
If you are a Donor donating towards Chuť pomáhat, we process the personal data you provide to us in connection with the donation, or rather the data we need due to the applicable legal regulations. If you want to learn more about how we use and protect personal data for fundraising purposes, please refer to this document.
How do we collect your personal data?
You may be asked to provide your personal data upon the first voluntary active contact with Chuť pomáhat. That most often is in the following situations:
- making a donation towards the activities of Chuť pomáhat
- expressing interest in information concerning the activities of Chuť pomáhat (subscribing to electronic newsletters)
What personal data do we collect?
Most often we process the following personal data:
- identification details: name, surname;
- contact details: permanent address or temporary residence address, mailing or other contact address, email address, telephone number;
- bank details: account number, bank code – in the case of an online donation made via a payment card, this includes credit or debit card number;
Chuť pomáhat does not collect personal data of special categories (formerly known as sensitive data) indicating racial or ethnic origin, political opinion, religion or philosophical beliefs, health status or sexual orientation.
Is your personal data safe with us?
Absolutely. We process all your personal data in way that it is adequately secured against unauthorised access to the data, accidental loss, destruction or damage.
We process personal data primarily in our information systems that ensure proper protection of personal data. Persons working with personal data are bound by a confidentiality obligation undertaken in writing.
We do not sell or transfer your data to other parties with the exception of situations when this is our legal duty (e.g. to an auditor or another control body).
For how long we retain your personal data?
We retain your personal data for the period required by applicable laws (e.g. the Accounting Act).
What are your rights?
- Right of access
You have the right to obtain a copy of the personal information we retain about you and to certain information on how we use it.
- Right to rectification
If you believe that the information we have about you is inaccurate, you can ask us to update or change the information.
- Right to data portability
Under certain circumstances, you have the right to request that we provide you with your personal data in a machine-readable format. For example, you can ask us to provide you with a list of donations you made towards us; you may request that we transfer the data to a third party.
- Right to erasure
Under certain circumstances, you have the right to request that we erase your data, e.g. if the personal data are no longer necessary for the original purpose; however, our legal obligations must be taken into account.
- Right to restriction of processing
Under certain circumstances, you have the right to ask us to stop using your personal data, e.g. if you believe that your personal data are not accurate or if you believe that we no longer need to use your personal data.
- Right to object
You have the right to object to our processing of the data that takes place based on a legitimate interest. For example, you can ask us to stop sending you invitations to our events or information on our activities.
How can you exercise your rights?
You can exercise your rights relating to the processing of personal data either in person or in writing by sending a request to Chuť pomáhat lidem, z.s., with its registered office at Pavlovská 506/20, Kohoutovice, 623 00 Brno, or by sending an email to email@example.com. We will respond to your request within one month of receipt.
If you are not satisfied with our response or if you believe that we process your data in an incorrect or unlawful manner, you can file a complaint with the Office for Personal Data Protection (see the Office for Personal Data Protection website for more information.
Amendments to the Personal Data Protection Policy
This Policy was last updated on 25 October 2022.Controller’s Data Protection Officer contact information: firstname.lastname@example.org