Your
Personal Data

Who is the Controller of Your Personal Data and What Are Their Contact Details?

CyberSecurity Hub, z. ú., Šumavská 416/15, Ponava, 602 00 Brno  IČO: 09705163

Contact Details: 
info@cshub.cz
+420 549 496 314

What is the Purpose and Legal Basis for Processing Your Personal Data?

To Whom May Your Personal Data Be Transferred?

The above-specified personal data may be transferred to EDIH consortium partners to the necessary extent for the optimization of EDIH services and promotional activities.

Any further transfer of your personal data to another controller is based on specific legal regulations that allow or require such an action or based on the consent of the data subject.

In justified cases, your personal data stored in information systems may be processed by processors – external suppliers of information systems – for maintenance and development purposes.

Any transfer of personal data abroad (non-EU countries and international organizations) is also exclusively possible based on legal regulations or the consent of the data subject.

How Long Are Your Personal Data Stored?

The length of time personal data is stored corresponds to the period necessary for the specified purpose or derives from generally binding legal regulations regarding archival, shredding, and filing obligations of the controller. After the required retention period, records containing personal data are deleted or shredded.

What Are Your Rights Regarding Personal Data Processing?

Regarding the processing of your personal data, the law grants you the following rights, detailed in Chapter III of the GDPR (Articles 12-23):

Right to Access Personal Data

You have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it apart from us, and what other rights you have concerning the processing of your personal data. This information is provided here. However, if you are still unsure about which personal data we process about you, you can request confirmation of whether personal data concerning you is being processed by us and, if so, you have the right to access this personal data. Within the right of access, you can request a copy of the processed personal data, with the first copy provided free of charge and subsequent copies for a reasonable fee.

Right to Rectification

Pokud zjistíte, že osobní údaje, které o Vás zpracováváme, jsou nepřesné nebo neúplné, máte právo na to, abychom je bez zbytečného odkladu opravili, popřípadě doplnili.

Right to Erasure

In certain cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if one of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it;

• You withdraw your consent on the basis of which the data was processed, and there is no other legal basis for its processing;

• You exercise your right to object to processing based on legitimate interest and we find that such an objection is justified; or

• It becomes apparent that the processing of personal data by us has ceased to comply with generally binding regulations.

However, this right does not apply if the processing of your personal data remains necessary for:

• Exercising the right to freedom of expression and information;

• Archiving purposes in the public interest, scientific or historical research, or for statistical purposes; or
  
• Establishing, exercising, or defending our legal claims.

Right to Restrict Processing

In certain cases, you can exercise the right to restrict the processing of personal data. This right allows you to request that your personal data be marked and not subject to any further processing operations – in this case, not permanently (as in the case of the right to erasure) but for a limited period. We must restrict the processing of personal data upon your request when:

• You contest the accuracy of the personal data until its accuracy is verified;
• We process your personal data without sufficient legal basis (e.g., beyond what we need to process) but you do not want it deleted;
• We no longer need your personal data for the stated processing purposes, but you need it for establishing, exercising, or defending your legal claims; or
  
• You object to processing until it is verified whether our declared legitimate interest prevails.

Right to Withdraw Consent

You can withdraw your consent to the processing of personal data at any time without providing a reason. Contact us through any of the methods listed above for this purpose. In such a case, we will delete your personal data unless there is another legal basis for processing (e.g., a legal obligation).

Please note that withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Data Portability

If we process your data automatically and based on your consent or for the performance of a contract with you, you have the right to obtain your personal data from us in a structured, commonly used, and machine-readable format.

Right to Object to Processing

You have the right to object to the processing of personal data based on our declared legitimate interest. We will no longer process your personal data unless we demonstrate compelling legitimate grounds for processing that override your interests or rights or for establishing, exercising, or defending legal claims.

You also have the right to object at any time to the processing of your data for direct marketing purposes, including profiling for direct marketing purposes. Based on this objection, your personal data will not be processed for these purposes.

Right to Lodge a Complaint with a Supervisory Authority

Exercising the rights mentioned above does not affect your right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Praha 7, Czech Republic. Data box ID: qkbaa2n, email: posta@uoou.cz, phone: +420 234 665 111, fax: +420 234 665 444.

How to Exercise Your Rights?

For all matters related to the processing of your personal data, whether it is a question, the exercise of a right, lodging a complaint, or anything else, you can contact us at the contact details provided above.