Privacy Policy
Data controller
The data controller is ÚJV Řež, a. s., with its registered office at Hlavní 130, Řež, 250 68 Husinec, email: jadernemuzeum@ujv.cz (the “Controller”).
The data controller hereby informs data subjects about the manner and scope of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.
Personal data is processed on the basis of contract performance, the Controller's legitimate interest, compliance with legal obligations and, in some cases, on the basis of consent given.
Scope of personal data processed
The Controller processes in particular the following personal data:
- name and surname,
- email address,
- telephone number (if you provide it voluntarily),
- the content of a message sent through the form,
- and any other data that the data subject voluntarily provides as part of an enquiry or other communication.
Legal basis and purposes of processing
Personal data is processed on the basis of:
- performance of a contract or steps taken prior to entering into a contract at the request of the data subject,
- the Controller's legitimate interest,
- compliance with legal obligations,
- the consent of the data subject, where required.
The purpose of the processing is in particular:
- handling enquiries and requests submitted through the website forms,
- communication with clients, partners and applicants,
- maintaining an internal record of contacts,
- ensuring the operation, security and improvement of the website,
- marketing communication, only where consent has been given to receive newsletters.
Involvement of third parties
Personal data may be processed through contractual processors, in particular providers of:
- the website's technical and application infrastructure,
- hosting and server services,
- security and operation of information systems,
- transactional emails (confirmations of submitted forms and similar).
These processors process personal data only to the extent necessary to provide the services in question and in accordance with applicable legal regulations.
Data retention period
Personal data is retained:
- for the time necessary to handle the enquiry and any subsequent communication,
- for the time necessary to protect the Controller's rights,
- for personal data processed on the basis of consent, until that consent is withdrawn, for a maximum of 3 years.
Rights of the data subject
The data subject has the right:
- to access their personal data,
- to have it corrected or completed,
- to erasure,
- to restriction of processing,
- to data portability,
- to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (ÚOOÚ) (www.uoou.cz).
Last updated: [TO BE COMPLETED at launch].