Terms of use and data processing policy

Dear Sirs,
In this way, the AAP founding members and the operators of website anglickepravo.cz allow you to provide information on the rights related to the processing of personal data by the controller. This information is primarily for the members but also for the non-members.

I.

Below, please find information on the processing of your personal data by the founding members

Asociace pro anglické právo, z.s., is a registered society in the Czech Republic, with its seat at Nad spádem 641/20, 147 00, Prague, ID: 09319093

(hereinafter “controller”)

provided in accordance with “GDPR” and related applicable data protection legislation.

Contact details of the controller: anglickepravo@gmail.com

II.

As a membership organization we collect personal data from our members:

• Identification data may include name, data of birth, contact data such as email, phone number, employment information and professional details
• Transaction data may include details of payment for subscriptions and seminars, bank account
• Technical data may include log in details for the website and forums

Data held for non-members attending conferences and seminars or visiting our website may include:

• Identification data may include name, data of birth, contact data such as email, phone number, employment information and professional details
• Transaction data may include details of payment for subscriptions and seminars, bank account

(hereinafter “personal data”)

III.

Processing of personal data of members is lawful for the following reasons:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes
• processing is necessary for compliance with a legal obligation to which the controller is subject
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Processing of personal data of non-members is lawful for the following reasons:

• the data subject has given consent to the processing of his or her personal data
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
• processing is necessary for compliance with a legal obligation to which the controller is subject
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

IV.

The purpose of processing personal data is in case the date subject is a member:

• To create member profiles on the website anglickepravo.cz
• To achieve mission mentioned on the website anglickepravo.cz
• To fulfil legal obligations to which the controller is subject
• Publication of business and marketing communications related to anglickepravo.cz

The purpose of processing personal data in case the date subject is not a member:

• To fulfil contractual obligations
• To fulfil legal obligations to which the controller is subject

(hereinafter “purposes”)

V.

Personal data that we process for any other legal reason(s) other than your consent will be processed and stored by the controller for the period necessary for the above purposes, but no longer than five (5) years (or as prescribed by law). Personal data processed on the basis of consent as long as the consent has been granted or until its withdrawal of consent, but no longer than for the time necessary to fulfil the above purposes, but no longer than five (5) years (or the period prescribed by law).

VI.

Source of personal data:

• data subject (personal data may be collected by the following methods: application forms, through subscription to our printed material and e-bulletins, through membership renewals, through completed evaluation forms collected from conferences and seminars)
• public bodies
• sources containing publicly accessible information.

VII.

Personal data can be processed by:

• the controller
• contractual partner of the controller for the purposes listed above
• providers of services necessary for compliance with a legal obligation to which the controller is subject
• provider of IT services

VIII.

The personal data will be stored in a secured database. The database can be accessed only by the

• controller
• person designated by data subject
• provider of IT services

IX.

The Controller will not transfer personal data of data subject to any third countries or international organisations.

X.

The Controller will not use personal data of data subject for automated decision-making (including profiling).

XI.

With respect to the processing of personal data by the Controller, you as a data subject, can request the Controller:

• To give you access to your personal data, whereby you can obtain, in particular, information whether your personal data are being processed, for what purpose, what is the scope of processed data and who has been given access to your personal data, if relevant. You can also be provided with a copy of your personal data undergoing processing;
• To rectify inaccurate or incorrect data or to complete incomplete personal data;
• To erase the personal data, e.g. if the purpose of processing ceases to apply or if your personal data are processed unlawfully;
• To restrict the processing of your personal data;
• To data portability, which allows you to obtain personal data concerning you, which you have provided to the Controller, in a structured and machine-readable format either for yourself or for another controller; and
• To make sure that you are not subject to any automated decision-making.
• Withdraw your consent.
• You can also raise an objection against the processing of your personal data, should the processing of your personal data be based on the lawful basis of legitimate interest by contacting the Controller to lodge a complaint with the Office for Personal Data Protection (address: Pplk. Sochora 727/27, 170 00 Praha 7-Holešovic).

Exercise of your rights as stipulated above is free of charge unless your requests are frequent and not proportional (in such a case, the controller may ask you to pay a reasonable fee.