Skip to content
Management Audit in Practice – Education, Simulation, PracticeFlags of Bavaria and the Czech Republic

Privacy policy

This document describes the processing of personal data in connection with the operation of the Management Audit in Practice website (the “website”). We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (the “GDPR”), and with Czech Act No. 110/2019 Coll., on the Processing of Personal Data.

The website does not offer registration or a contact form. We only process data that is necessary for its operation and data that you send us yourself by email.

1. Data controller

The controller of personal data is [Název vysoké školy], Company ID (IČO): [IČO], registered office: [Ulice a číslo, PSČ Město], a public higher education institution under Czech Act No. 111/1998 Coll., on Higher Education Institutions (the “controller”).

The website provides information about the project BYCZ08-244 Management Audit in Practice, co-funded by the European Union under the Interreg Bavaria – Czech Republic 2021–2027 programme.

Controller’s contact email: [kontaktní e-mail]

Data protection officer: [e-mail pověřence pro ochranu osobních údajů]

2. What data we process

The scope of the data we process depends on how you use the website:

  • Visiting the website: IP address, date and time of the request, the address viewed, browser and operating system type, and the address of the page you came from. Your browser sends this data automatically and the server stores it in its operational records (logs).
  • Email communication: if you write to one of the addresses listed on the website, we process your email address, name, the content of your message and any other information you provide in it.

3. Purposes of processing

We process personal data solely for the following purposes:

  • ensuring the operation, security and availability of the website,
  • handling enquiries and other communication you initiate with us by email.

We do not use personal data for commercial purposes, we do not sell it, and we do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.

4. Legal basis for processing

We process data for the individual purposes on the following legal bases:

  • Operation and security of the website: the controller’s legitimate interest in a secure and functional website (Article 6(1)(f) GDPR).
  • Email communication: the controller’s legitimate interest in responding to your message (Article 6(1)(f) GDPR).

You may object to processing based on legitimate interest (see section 7).

5. Retention period

We retain personal data only for as long as necessary to fulfil the purpose for which it is processed, or for the period laid down by law:

  • server logs for as long as necessary to ensure the operation and security of the website,
  • email communication until the matter has been dealt with and thereafter for the period set by the controller’s filing and retention rules under Czech Act No. 499/2004 Coll., on Archives and Records Management.

Once this period has expired, we delete or anonymise the data.

6. Recipients and transfers of data

We disclose personal data only to the extent necessary to the following recipients:

  • hosting and other IT service providers who operate the website on behalf of the controller and process data as processors under a contract pursuant to Article 28 GDPR,
  • public authorities, where the controller is required to disclose data by law.

We transfer data to countries outside the European Union and the European Economic Area only where an adequate level of protection is ensured under Chapter V GDPR, for example on the basis of a European Commission adequacy decision or standard contractual clauses.

7. Your rights

In connection with the processing of your personal data, you have the following rights:

  • the right of access to your personal data (Article 15 GDPR),
  • the right to rectification of inaccurate data (Article 16 GDPR),
  • the right to erasure (Article 17 GDPR),
  • the right to restriction of processing (Article 18 GDPR),
  • the right to object to processing based on legitimate interest (Article 21 GDPR),
  • the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

You can exercise your rights by email at [kontaktní e-mail] or by contacting the data protection officer at [e-mail pověřence pro ochranu osobních údajů]. We will respond to your request without undue delay and in any event within one month of receipt.

The competent supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, https://uoou.gov.cz. You may also lodge a complaint with the supervisory authority of the Member State of your habitual residence, place of work or place of the alleged infringement.

8. Data security

We have adopted appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or destruction. The website communicates exclusively over an encrypted connection (HTTPS).

9. Cookies

The website does not store any cookies or similar technologies on your device.