Personal data processing policy

Principles of personal data processing of the Trutnov Social Center for Culture and Leisure

1. Introductory information

1.1. Trutnov Social Center for Culture and Leisure (hereinafter referred to as SCT) processes personal information in the role of administrator data of entities within all their activities. It also processes personal data of employees for legitimate purposes related to their employment with SCT.

1.2. From 25 May 2018, the organization processes personal data of subjects in accordance with the Regulation of the European of the Parliament and of the Council (EU) 2016/679 on the protection of natural persons in connection with the processing of personal data and on free movement of this data (hereinafter referred to as "GDPR").

1.3. The subject of personal data provides SCT with their personal data in a lawful manner, depending on their purpose processing: a. to fulfill the legal obligation of SCT, b. to fulfill SCT tasks carried out in the public interest, c. for the purposes of the legitimate interests of SCT or a third party, d. to fulfill the contract between the entity and SCT, e. for other purposes with the subject's consent to the processing of his personal data.

1.4. Consent to the processing of personal data is granted by the subject of personal data in the event that it is not possible for purpose of processing to use a different legal title. SCT accepts data subject consent as free, specific, informed and unequivocal expression of will, which the data subject gives by declaration or other obvious confirmation permission to process your personal data. The data subject has the right to withdraw his consent at any time. By appeal the consent does not affect the legality of the previous processing of the subject's personal data based on it previously granted consent. The data subject will be informed of this before consent is granted. He must withdraw his consent be as easy as providing it.
2. Purpose of personal data processing of personal data subjects

2.1. Personal data of personal data subjects must be collected only for certain, expressly stated and legitimate purposes and may not be further processed in a way that is incompatible with these purposes. Processing of personal data is carried out mainly to cover the main activities of SCT, i.e. cultural and social support life of the region.

2.2. SCT also processes the subjects' personal data to secure its contractual relationships, bookkeeping and personnel and salary agendas.
3. Categories of processed personal data

3.1. SCT collects, processes and stores the following categories of subjects' personal data:

3.1.1. address and identification personal data – especially name, surname, date of birth, social security number, residence, telephone number, email, delivery address

3.1.2. descriptive personal data – in particular data of the subject related to the resolved agenda, contractual relationship

3.1.3. personal data provided to SCT about another person (another entity) - especially if the agenda is addressed affects other natural persons (e.g. management of administrative proceedings),

3.1.4. a special category of personal data, especially sensitive data, usually related to health status or the subject's social situation, as well as data relating to judgments in criminal cases and criminal offences, namely always in cases where SCT is required by the relevant legal regulations

3.1.5. other data – e.g. photos, camera recordings
4. Method of processing and storage of personal data and the period of their storage at SCT

4.1. SCT processes the subject's personal data manually or automatically and stores them securely in in paper or electronic form for the period specified by the filing and shredding regulations. Following on from the purpose processing, some of the subject's personal data is kept in the SCT information system (e.g. file service, agenda information systems for registration of subscribers, subscribers, etc.).
5. Transfer of personal data

5.1. SCT may transfer the subject's personal data, including sensitive data, to a third party only on the basis of legal title, especially for the fulfillment of a task arising from a legal regulation. About individual cases transfer, the subject is informed as part of the notification on the processing of personal data for the relevant purpose of processing.

5.2. With the subject's consent, or in the event that he does not effectively object after receiving the notice, they may be his personal data transferred to other entities.
6. Rights of the subject of personal data

6.1. Upon request, the data subject will receive from SCT all information about the processing of his data, namely in a concise, understandable and easily accessible way using clear and simple language resources.

6.2. If the personal data concerning the data subject is obtained directly from him, SCT will provide him in a moment obtaining personal data the following information:
  • identity and contact details of the administrator and his possible representative,
  • the processing purposes for which the personal data are intended and the legal basis for their processing,
  • legitimate interests of the administrator or a third party in the event that the processing is based on this lawful title,
  • any recipients or categories of recipients of personal data, including any processor,
  • any intention of the administrator to transfer personal data to a third country or international organization, including a link on
    • suitable guarantees,
  • the period for which personal data will be stored at SCT, or if it cannot be determined, the criteria used for determination of this time,
  • the existence of the right to request from SCT access to personal data concerning the data subject, theirs repair or erasure, or restriction of processing, and object to processing, as well as the right to portability data;
  • if the processing is based on the consent of the data subject, the existence of the right to withdraw consent at any time, without it thereby affecting the legality of the processing based on the consent given before its revocation,
  • possibility of filing a complaint with the supervisory authority,
  • the fact whether the provision of personal data is a legal or contractual requirement or requirement, which is necessary to be included in the future contract and whether the data subject has an obligation to provide personal data, and regarding possible the consequences of not providing this data,
  • the fact whether there is automated decision-making, including profiling, and at least in these cases meaningful information regarding the procedure used, as well as the meaning and assumed consequences such processing for the data subject.


6.3. If SCT intends to further process personal data for a purpose other than the purpose for which it was collected, will provide the data subject with information about this other purpose before said further processing.

6.4. SCT does not have to provide the personal data subject with information about the processing if the data subject has already has the said information, and to the extent that it has it.

6.5. If SCT carries out the processing necessary to fulfill its legal obligation or its task performed in public interest or in the exercise of its authority, may provide information to the data subject also by publication information in a way that allows remote access.

6.6. If the personal data has not been obtained from the data subject, SCT will provide the same information and in addition:
  • category of personal data concerned,
  • the source from which the personal data originates and, where applicable, information on whether the data originates from a public available resources.


6.7. SCT will not apply in case of obtaining personal data from someone other than the data subject information obligation, if the acquisition or disclosure is expressly stipulated by a legal regulation, which on The SCT applies and in which appropriate measures are laid down to protect the legitimate interests of the data subject.

6.8. A subject of personal data who discovers or believes that SCT as a controller or other person who for SCT processes personal data, carries out the processing of his personal data in violation of the GDPR, may request o explanation or to demand that SCT or the processor remove the state thus created. If SCT does not comply or the relevant processor of the request, the subject of personal data may contact the Office for Personal Data Protection, while the subject's right to contact the Office for Personal Data Protection is not affected by this.

6.9. The subject of personal data has the following additional rights:

6.9.1. obtain from SCT, if the conditions for this are met, information about the processing of his personal data (information about the identity and contact details of the administrator and his possible representative; processing purposes for which they are personal data determined, and the legal basis for processing, potential recipients or categories of recipients of personal data and other information necessary to ensure transparent and correct processing of his personal data);

6.9.2. obtain access to personal data from SCT, i.e. obtain confirmation from SCT as to whether it processes personal data data concerning him and, if so, the subject of personal data has the right to obtain access to such personal data data and other information within the legal scope;

6.9.3. to correct your incorrect personal data, or to supplement incomplete personal data;

6.9.4. to delete your personal data if the legal conditions have been met, e.g. if the personal data already they are not needed for the purposes for which they were obtained or otherwise processed, or e.g. if the subject withdraws your consent, on the basis of which the personal data were processed;

6.9.5. to limit the processing of SCT's personal data, if the legal conditions are met;

6.9.6. to data portability, i.e. to obtain personal data relating to him and provided by SCt, namely in a structured, commonly used and machine-readable format;

6.9.7. to raise an objection at any time for the reasons of his specific situation against the processing of personal data that he concern;

6.9.8. not be the subject of automated individual decision-making, incl. profiling, if you do not consent to this subject consent, except when automated processing is imposed by law;

6.9.9. file a complaint with the supervisory authority.

6.10. SCT is entitled to require the subject of personal data when submitting an application to fulfill any of the above his personal identification by verifying his identity.

6.11. SCT is entitled, in cases defined by law, to provide information about the processed personal data of the subject to demand a reasonable payment, not exceeding the costs necessary to provide the information.
7. Final Provisions

7. The subject of personal data can obtain all information regarding the processing of his personal data in person at the headquarters SCT, Trutnov, Náměstí Republiky 999 or electronically at boruvka@uffo.cz.