Availability of information
A basic overview of information on personal data protection is kept in electronic form on this website. The full wording of the directive describing particular purposes and the full extent of personal data processing in detail is kept in paper format at the reception of SFA headquarters, Vaníčkova 315/7, Prague 6.
Extent of personal data processing
1) Personnel field
Purposes: Recruiting new employees, setting up an employment relationship, Adaptation process, Administrative activities linked to an employment relationship, Ending an employment relationship
Maximum extent of personal data *1: name, surname, date of birth, rodné číslo (birth number), permanent or temporary residence address, sex, health insurance company, highest level of educational attainment, relevant years of work, email address, telephone number, clean criminal record, internal username and personal number
Recipients and processors: government authorities on the basis of legal obligation, operators of CTU information systems
2) Employment law field
Purposes: Medical check-up, Occupational health and safety and fire protection, Accidents at work and occupational diseases, UCEEB promotion, Teaching activities and seminars, Public contracts-orders-invoicing, Depreciation, Archiving and shredding, Vehicle use, Use of own vehicle
Maximum extent of personal data *1: name, surname, date of birth, rodné číslo (birth number), medical fitness, permanent or temporary residence address, sex, photograph, health insurance company, highest level of educational attainment, relevant years of work, personal data of family members, email address, telephone number, clean criminal record, bank account number, personal data on shared property owners, personal data of beneficiaries, internal username
Recipients and processors: government authorities on the basis of legal obligation, contractual insurance company, bank, occupational healthcare provider, external trainers, grant agencies, contractual project partners, operators of CTU information systems
3) Teaching and education field
Purposes: SFA promotion, Seminars and meetings
Maximum extent of personal data*1: name, surname, photograph, telephone number, mail address
Recipients and processors: public administration bodies on the basis of their authorised request
4) Business and economic field
>Purposes: Public contracts, orders, business contracts and invoicing, Assets depreciation and disposal of data carriers
Maximum extent of personal data*1: name, surname, telephone number, mail address
Recipients and processors: public administration bodies on the basis of their authorised request
5) Projects and grants field
Purposes: Submitting a grant application, Undertaking projects
Maximum extent of personal data*1: name, surname, date of birth, rodné číslo (birth number), permanent residence address, highest level of educational attainment, telephone number, mail address
Recipients and processors: public administration bodies on the basis of their authorised request
6) Vehicles field
Purposes: SFA vehicles, Use of own vehicle
Maximum extent of personal data*1: name, surname, telephone number, date of birth, permanent residence address, Driving licence number, ID card number, Vehicle registration number, personal data of previous vehicle owners, insurance policy number
Recipients and processors: public administration bodies on the basis of their authorised request
7) Archiving and shredding field
Purposes: Archiving and disposal of paper documents containing personal data
Maximum extent of personal data*1: all personal data contained in paper documents at SFA
Recipients and processors: public administration bodies on the basis of their authorised request
8) Accommodation field
Purposes: long-term accommodation (application, matters related to accommodation, termination), visitor records, accommodation at hotel/hostel
Maximum extent of personal data*1:name, surname, sex, date of birth, age, photograph, bank account number, ID card number, passport number, visa number, permanent residence number, email address, telephone number, nationality, permanent residence address, credit/debit card number
Recipients and processors: public administration bodies on the basis of their authorised request
9) Catering services field
Purposes: application for catering services, matters related to catering services (for students and commerce), practical teaching and education
Maximum extent of personal data*1: name, surname, date of birth, school and faculty studied at, numerical card identifier, email address, bank account number,
Recipients and processors: public administration bodies on the basis of their authorised request
10) ICT field
Purposes: CCTV system operation, Security alarm system operation, monitoring core services, Logging access to shared services, LDAP services
Maximum extent of personal data*1: name, surname, MAC, IP or IPv6, images from security cameras, number of recorded ACS card/chip, username, email address, research group membership
Recipients and processors: public administration bodies on the basis of their authorised request, CCTV system and ACS system maintenance company
*1 … the standard/actual extent of processed personal data is limited to just the processing of that personal data which is necessary for fulfilling the particular task
Personal data subject rights
Personal data subjects have the right to receive information on the extent and purpose of processing of their personal data, they have the right to object to the processing, the right to request the restriction of processing, and the right to the erasure of the personal data (if its further processing is not required by another overruling regulation). This right can be exercised by submitting a request in person (SFA registry, Vaníčkova 315/7, 160 00 Prague 6, on working days between 8:00-14:00).
