Personal Data Protection Principles in the Association Sdružení Neratov, z.s.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), the association Sdružení Neratov, z.s. (hereinafter referred to as the association) publishes information on the processing of personal data. The association, like all other controllers and processors of personal data, is obliged to comply with the above-mentioned regulation.

The association (data controller) processes personal data of the following data subjects:

• employees of the association and their guardians

• visitors of chata Neratov

1. Personal data of employees and their guardians are processed only to the extent required by law or to the extent strictly necessary. Based on a legal obligation, the association processes and stores the following personal data of employees: first name and surname, date and place of birth, birth number, permanent residence address, decision on granting disability pension, pension assessment (in the case of a person with ID), bank account number for salary payments, health insurance company, or enforcement order. Based on the employee’s consent to the processing of personal data, the association processes and stores the employee’s contact phone number and email. The above personal data are stored by the association for the period stipulated by law.

Based on the guardian’s consent to the processing of personal data, the association processes and stores the following personal data of guardians: first name and surname, contact phone number and email. The above personal data are stored by the association for the period stipulated by law.

If it concerns the processing of personal data that does not arise directly from the law, employees as well as their guardians provide written, informed, specific, and time-limited consent to the processing of such data. This includes, for example, the publication of photographs on the association’s website, in the newsletter Nově v Neratově, or on the association’s notice boards, or lists of employees who participate in a group event, trip, etc.

1. The association processes personal data of visitors of chata Neratov for the purpose of fulfilling orders and reservations and also in cases imposed on it by law, in particular the Act on Local Fees for the purpose of collecting a fee for spa or recreational stay or a fee for accommodation capacity, and the Act on the Residence of Foreign Nationals, where the provision of personal data is mandatory. Personal data are processed only to the extent required by law or to the extent strictly necessary and include basic contact details and identification data of a natural person. The association processes these personal data based on the visitors’ written, informed, and specific consent and processes them for the period stipulated by law.

The association does not transfer personal data to any third parties, to any third country, or to international organizations.

All employees of the association who come into contact with personal data are obliged to maintain confidentiality regarding the provided personal data as well as the security measures for their protection. Their obligation continues even after the termination of their contractual relationship with the association.

Data subjects have the right to:

• Access to personal data

• Rectification of personal data

• Erasure of personal data (this right cannot be exercised in the case of lawful processing of personal data)

• Object to the processing of personal data (this right cannot be exercised in the case of lawful processing of personal data)

The Data Protection Officer in the association is Pavlína Vilímová, contact email: pavlina@neratov.cz.