The Military Research Institute, state enterprise, (VVÚ), located in Brno, Veslařská 230, post code 637 00, Company Registration No.: 293 722 59, registered in the Commercial Register kept by the Regional Court in Brno, mark A25718, is a personal data controller. The Institute has appointed the Data Protection Manager, who can be contacted by email at: vvu@vvubrno.cz
What personal data we collect and process.
The VVÚ collects personal data (“PD”), which are imposed by the wage and personnel laws, as well as personal data for the purposes of the VVÚ legitimate interests. In such cases, we process PD of the data subjects concerned without their consent. These are the situations where this legitimate interest could be due, for example, to the fact that the data subject is an Institute´s customer or, on the contrary, provides services to it. A legitimate interest also includes, for example, the operation of CCTV or the processing of personal data necessary for the purposes of protecting health or property.
The VVÚ shall always strike a balance between the legitimate interest pursued and the rights and fundamental freedoms of the data subjects who will be affected by data processing
How long we process the data.
The VVÚ processes PD depending on its purpose for the duration of any contractual relationship with the VVÚ and for a maximum of 10 years thereafter (in exceptional cases several years) after the termination of the last contractual relationship with the VVÚ.
Do I have to provide personal data?
The provision of PD is voluntary, as is the conclusion of a contract. However, some PD are necessary to meet the legal obligations and legitimate interests of the VVÚ in entering into a working and business relationship or providing a service.
From what sources we obtain personal data.
The VVÚ processes the PD you have provided us in connection with the negotiation of an employment relationship, a business relationship and the provision of services, data from the available public registers and the data we have obtained from state authorities or from databases collecting data. Based on your consent, we may also process other data, for example from internet browsers.
What we use personal data for.
The VVÚ processes personal data without the consent of the data subjects to meet its statutory obligations (e.g. HR ) for the purpose of negotiating a commercial contract, for the protection of its rights and the legally protected interests, for operational security and fraud prevention, for analysing and evaluating potential risks and for the direct marketing of its own products. With your consent, we only process data for marketing purposes.
How we ensure the protection of personal data.
Personal data are under constant physical, electronic and procedural control. The VVÚ has sufficient control, technical and security mechanisms in place to ensure the best possible protection of processed data from unauthorized access or transmission, against its loss or destruction, and against other possible misuse. All persons who come into contact with your PD in the course of performing their work or contractual obligations are bound by a contractual duty of confidentiality.
To whom we provide or transfer personal data.
The VVÚ only discloses PD to supervisory authorities and other government authorities, provided that this obligation is required by law. With your consent or at your request, PD may also be disclosed to other entities.
What are your rights in relation to the processing and transfer of personal data.
You can exercise your rights as a data subject in accordance with applicable legislation. You have the right of access to the data we process about you, the right to the portability of the selected data and the right to request data rectification. You may request the erasure of your PD, unless it is necessary to further process them to comply with legal obligations or to continue to provide you with business cooperation.
What are your options to restrict the processing and transfer of personal data.
In cases where the VVÚ processes PD upon your consent, you can withdraw this consent at any time. In cases where your PD are processed on the basis of a legitimate interest, you may object to such processing. We will evaluate each such objection and inform you of the outcome. We will always comply with each such objections to data processing for marketing purposes.
Who supervises data protection?
If we have not been able to resolve your questions or objections in the area of GDPR satisfactorily, you have the right to contact the Office for Personal Data Protection (www.uoou.cz).