Personal Data Processing Principles at Česko-rakouská obchodní a průmyslová komora, z.s.

Personal Data Processing Principles at Česko-rakouská obchodní a průmyslová komora, z.s. pursuant to Article 13 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter the “GDPR” – and in accordance with Act No. 110/2019 Coll., on the Processing of Personal Data, as amended.

1. INTRODUCTORY INFORMATION

At Česko‑rakouská obchodní a průmyslová komora, z.s., (Czech-Austrian Chamber of Commerce and Industry , z.s.) we devote great attention to the protection of personal data, since the confidentiality and security of the data provided, as well as the protection of the privacy of our members and other data subjects, is our priority. We rely on trust; therefore, in this notice you will find basic information on what personal data we process, for what purposes and on what legal bases, as well as information on where the personal data of data subjects are, as the case may be, transferred or disclosed. You will also learn what rights you have in connection with the protection of personal data and where they can be exercised.
The processing of personal data is governed primarily by the GDPR and also by Act No. 110/2019 Coll., on the Processing of Personal Data, as amended.
This document applies both to situations in which we obtain personal data directly from you (Article 13 of the GDPR) and to situations in which we obtain such data from another source (Article 14 of the GDPR). We will inform you of the source from which your personal data originate within a reasonable period after obtaining the personal data, but no later than one month thereafter, taking into account the specific circumstances under which the personal data are processed. Alternatively, if the personal data are used by us for the purpose of communicating with you, we will inform you at the latest at the time of our first communication with you.

2. INFORMATION ABOUT THE CONTROLLER

The controller of personal data is:

Česko-rakouská obchodní a průmyslová komora, z.s.
registered office: Slezská 2127/13, Vinohrady, 120 00 Prague 2 Company ID No. (IČO): 10722203
L 74687 maintained by the Municipal Court in Prague (hereinafter also the “Controller” or the “Chamber”)

If you wish to discuss any matter relating to the protection of your personal data, do not hesitate to contact us: in person or by post at Slezská 2127/13, Vinohrady, 120 00 Prague 2, by phone at +420 221 001 290, or electronically at info@austriaczech.eu.

We will handle your request without undue delay, but no later than within one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will of course inform you of any such extension and the reasons for it.

As a rule, we handle your requests relating to the protection of personal data free of charge. Only if requests submitted are manifestly unfounded or excessive, in particular because they are repetitive, may the Chamber charge a reasonable fee, or we may refuse to act on the request.

3. PROCESSING OF PERSONAL DATA

Personal data of persons who have submitted an application and of members

  • Personal data we process:
    • first name and surname
    • company ID (IČO), VAT ID (DIČ)
    • address
    • first name and surname of the statutory body
    • first name and surname of the contact person
    • e‑mail address of the contact person
    • telephone number of the contact person
    • mutual correspondence/communications
  • Purpose
    • enabling the exercise of a member’s rights in the Chamber and the possibility to verify compliance with obligations arising from membership
    • assessment by the Chamber’s Board of Directors of admission as a member
    • fulfilment of the Chamber’s obligations arising in particular from tax and accounting regulations – issuing a document for the membership fee, for participation in events organised by the Chamber, etc.
    • publication of information relating to the member on the internet and in the Chamber’s information materials on the basis of the consent granted in the application
    • sending information and newsletters relating to the Chamber’s activities on the basis of the consent granted in the application
    • establishment, exercise or defence of the Chamber’s legal claims in judicial, out‑of‑court, arbitral, administrative, enforcement and insolvency proceedings
  • Legal basis for processing
    • The legal basis for this processing is processing necessary for the performance of a contract to which the data subject is a party, or for taking steps at the request of the data subject prior to entering into a contract (see Article 6(1)(b) GDPR).
    • Personal data are also processed for the purpose of complying with legal obligations to which the Chamber, as the controller of personal data, is subject (see Article 6(1)(c) GDPR).
    • The legal basis for this processing is also the Chamber’s legitimate interest (see Article 6(1)(f) GDPR).
  • Retention period
    • for the duration of membership in the Chamber, and subsequently for 10 years after termination of membership
  • Access to the data
    • company ECOMAIL.CZ, s.r.o., with its registered office at Na Zderaze 1275/15, Nové Město, 120 00 Prague 2
    • company Viktory digital s.r.o., with its registered office at Vršovická 817/5, Vršovice, 101 00 Prague 10
    • company FakturaOnline s.r.o., with its registered office at Křížová 2598/4, Smíchov, 150 00 Prague 5
    • in addition, recipients from among public authorities may have access to personal data to the extent necessary, within their supervisory or control activities carried out on the basis of legal regulations
    • where applicable, other providers of processing software, services and applications; however, the controller is not currently using any such providers

Personal data when communicating via the web form

  • Personal data we process
    • first name, surname
    • e‑mail
    • name of employer/company
    • mutual correspondence/communications
  • Purpose
    • communication with a prospective member
    • providing information about the Chamber’s activities, responses to questions submitted via the web form
    • establishment, exercise or defence of the Chamber’s legal claims in judicial, out‑of‑court, arbitral, administrative, enforcement and insolvency proceedings
  • Legal basis for processing
    • The legal basis for this processing is the Chamber’s legitimate interest (see Article 6(1)(f) GDPR), or the data subjects’ consent to the processing of personal data (see Article 6(1)(a) GDPR).
  • Retention period
    • for the period strictly necessary, no longer than 3 months from the end of the communication
  • Access to the data
    • company Viktory digital s.r.o., with its registered office at Vršovická 817/5, Vršovice, 101 00 Prague 10
    • in addition, recipients from among public authorities may have access to personal data to the extent necessary, within their supervisory or control activities carried out on the basis of legal regulations
    • where applicable, other providers of processing software, services and applications; however, the controller is not currently using any such providers

Personal data of newsletter subscribers

  • Personal data we process
    • e-mail
  • Purpose
    • sending the Chamber’s newsletter based on the subscription of an e‑mail address on the Chamber’s website
    • establishment, exercise or defence of the Chamber’s legal claims in judicial, out‑of‑court, arbitral, administrative, enforcement and insolvency proceedings
  • Legal basis for processing
    • The legal basis for this processing is the Chamber’s legitimate interest (see Article 6(1)(f) GDPR), or the data subjects’ consent to the processing of personal data (see Article 6(1)(a) GDPR).
  • Retention period
    • for 3 years; consent may be extended
    • consent can be withdrawn at any time by clicking the link in the newsletter e‑mail, or at info@austriaczech.eu
  • Access to the data
    • company ECOMAIL.CZ, s.r.o., with its registered office at Na Zderaze 1275/15, Nové Město, 120 00 Prague 2
    • company Viktory digital s.r.o., with its registered office at Vršovická 817/5, Vršovice, 101 00 Prague 10
    • in addition, recipients from among public authorities may have access to personal data to the extent necessary, within their supervisory or control activities carried out on the basis of legal regulations
    • where applicable, other providers of processing software, services and applications; however, the controller is not currently using any such providers

Personal data of non-members – participants in events organised by the Chamber

  • Personal data we process
    • first name, surname
    • e‑mail
    • address
    • company/name of employer
    • company ID No. (IČO), VAT ID (DIČ)
    • billing details
    • membership in interest‑based chambers
    • mutual correspondence/communications
  • Purpose
    • ensuring the participation of a non‑member in events organised by the Chamber based on the completion of an application
    • fulfilment of obligations arising from accounting and tax regulations – issuing a document for participation in events organised by the Chamber
    • establishment, exercise or defence of the Chamber’s legal claims in judicial, out‑of‑court, arbitral, administrative, enforcement and insolvency proceedings
    • promotion of the Chamber and its activities
  • Legal basis for processing
    • The legal basis for this processing is the Chamber’s legitimate interest (see Article 6(1)(f) GDPR).
    • Personal data are also processed for the purpose of complying with legal obligations to which the Chamber, as the controller of personal data, is subject (see Article 6(1)(c) GDPR).
    • As the case may be, personal data are processed on the basis of the data subjects’ consent to the processing of personal data (see Article 6(1)(a) GDPR).
  • Retention period
    • for 3 years from the non‑member’s application for a specific event; accounting data are processed for 5 years, tax documents for 10 years
  • Access to the data
    • company Jotform , with its registered office at 4 Embarcadero Center Suite 780, San Francisco, CA 94111
    • company FakturaOnline r.o., with its registered office at Křížová 2598/4, Smíchov, 150 00 Prague 5
    • in addition, recipients from among public authorities may have access to personal data to the extent necessary, within their supervisory or control activities carried out on the basis of legal regulations
    • where applicable, other providers of processing software, services and applications; however, the controller is not currently using any such providers

4. SENDING OF COMMERCIAL COMMUNICATIONS

Processing of personal data for the purposes of direct marketing means processing for the purpose of sending commercial communications within the meaning of Act No. 480/2004 Coll., on Certain Information Society Services, as amended (hereinafter “Act No. 480/2004 Coll.”).

A commercial communication means any form of communication, including advertising and invitations to visit an online shop, intended to directly or indirectly promote the goods or services or the image of the Chamber (hereinafter the “Communication”).

The processing of personal data for the purpose of sending commercial communications is carried out on the basis of the existence of a legitimate interest (see Recital 47 GDPR). The Chamber may also send commercial communications without consent (in accordance with Section 7(3) of Act No. 480/2004 Coll.), unless the data subject originally refused.

A personal data subject has the option to refuse the sending of Communications – newsletters, satisfaction surveys – by ticking the “Unsubscribe” box located in the header of the newsletter or the satisfaction survey sent.

Refusal to receive Communications can also be made by clicking the “Unsubscribe” field in the e mail through which Communications are sent.

The Chamber will terminate the processing of personal data for the purposes of direct marketing without delay after the data subject expresses his or her objection to such processing.

An objection may be made, for example, by one of the following means:

  • by unsubscribing from commercial communications (which can be done with each commercial communication in response to the newsletter sent or the satisfaction survey),
  • by lodging an objection to such processing (subject to Article 21 GDPR).

5. COOKIES

Cookies are small text files that may be used by websites to create a user‑friendly interface.

The law provides that we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

Technical or functional cookies

Some cookies ensure that certain parts of the website function properly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. We may place these cookies without your consent.

Analytics cookies

We use statistical cookies to optimise the website for our users. Thanks to these statistical cookies, we gain insights into the use of our website. We ask for your permission to store statistical cookies.

Marketing cookies

Marketing cookies are cookies or any other form of local storage used to create user profiles for displaying advertising or to track a user on this website or across several websites for similar marketing purposes. This website uses cookies for the above purposes.

Upon your first visit to the website, a pop‑up window will be displayed with an explanation about cookies. Once you click “Allow all”, you express your consent to the use of the categories of cookies and add‑ons described in the pop‑up window and in this cookie statement. You can disable the use of cookies through your browser; however, please note that our website may no longer function properly.

Using your internet browser, you can delete cookies automatically or manually. You can also specify that certain cookies may not be placed. Another option is to change your internet browser settings so that you receive a message each time a cookie is stored. For more information about these options, please refer to your browser’s Help.

Please note that our website may not function properly if all cookies are disabled. If you delete cookies in your browser, they will be placed again upon your consent when you visit our website again.

6. RIGHTS OF DATA SUBJECTS

Just as we have our rights and obligations in connection with the protection of personal data, you, as a data subject, also have rights relating to the protection of your personal data, including:

a) Right to transparent information and proper notices

In the first place, the data subject has the right to be informed about the processing of his or her personal data when personal data are collected (i.e., most often at the first contact with the Controller). This means the right to certain information about the processing of his or her personal data so that, above all, the principle of transparency of processing is fulfilled. This includes, in particular, information about the purpose of processing, the identity of the Controller, its legitimate interests, and the recipients of personal data. In this case, it is a passive right, since the Controller must take the initiative vis-à-vis the data subject to provide or make available the information required by the GDPR.

b) Right of access to personal data

Access to personal data means your right, as a data subject, upon an active request, to obtain from the Chamber information (confirmation) as to whether or not your personal data are being processed and, where that is the case, the right of access to those personal data, and at the same time the right to obtain further information about such processing. The purpose of the right of access to personal data is not to ensure access to the media (i.e., documents, records); the controller fulfils its obligation if it provides a listing/extract of the personal data processed, not a copy of the media itself. To obtain copies of documents, other rights must be used, typically arising from other legal regulations that govern a natural person’s access to a file or documentation and the possibility to make copies.

c) Right to rectification (and completion)

If you believe that the Chamber processes inaccurate data relating to you, you have the right to notify us of such fact and to request the rectification or completion of your personal data. Your right to rectification or completion of personal data does not mean that we are obliged to actively search for inaccurate data, nor does it mean an obligation of the controller, for example, to request the data subject annually to update his or her data.

d) Right to erasure

This right in the GDPR is, in other words, the controller’s obligation to destroy personal data if at least one of the following conditions is met:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent and there is no other legal ground for the processing;
  • the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation;
  • the personal data have been collected in relation to the offer of information society services under Article 8(1) GDPR.

The right to erasure thus applies only in the enumerated cases, i.e., when the relevant circumstance occurs. It should be borne in mind that the right to erasure is not an absolute right that would entitle you to request the erasure of personal data at any time and in any situation.

e) Right to restriction of processing

In certain cases, in addition to the right to erasure, you also have the right to restriction of the processing of your personal data, by which you may, in specific cases, request that your personal data be marked and that they not be subject to any further processing operations for a certain period.

f) Right to data portability

The essence of the right to data portability is the possibility, under certain conditions, to obtain your personal data which you have provided to the Chamber in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from us. At the same time, if you so request, you also have the right to have us transmit your personal data in a structured, commonly used and machine-readable format to another controller, where technically feasible. A common prerequisite for the application of this right is that the processing of personal data must be based on consent or a contract and the processing is carried out by automated means. The exercise of the right to portability must not adversely affect the rights and freedoms of others.

g) Right to object

As a data subject, on grounds relating to your particular situation you have the right at any time to object to the processing of personal data where your personal data are processed on the legal grounds that:

  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
  • the processing is necessary for the purposes of the legitimate interests pursued by the relevant controller or by a third party.

The Controller will no longer process personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

h) Right not to be subject to automated individual decision-making with legal or similar effects, including profiling

This right ensures that you will not be subject to a decision based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you. In other words, it ensures that legal effects are not decided by automated means without human intervention, except for possible exceptions. Automated decision-making is permissible where it is necessary for entering into, or performance of, a contract between the data subject and the controller, where it is authorised by EU or Member State law, or where it is based on the data subject’s explicit consent. In the Chamber’s activities, profiling of data subjects or other automated decision-making producing legal effects for data subjects is not carried out.

i) Right to withdraw consent to the processing of personal data at any time

If the processing of your data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

j) Right to lodge a complaint with a supervisory authority

Lastly, you have the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection. If you believe that the processing of your personal data is unlawful, in addition to exercising the above rights, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority in the Czech Republic is the Office for Personal Data Protection. Its seat is at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, with the following contact details: e-mail: posta@uoou.cz, web: https://www.uoou.cz/. Even in the case of submitting a complaint/application electronically, the submission must meet the requirements under Section 37 of Act No. 500/2004 Coll., the Administrative Procedure Code.

7. CHANGES TO THIS PRIVACY NOTICE

The protection of personal data is not a one-off matter for us. The information which we are obliged to provide to you in view of the personal data processing by the Chamber may change or cease to be up to date. For this reason, we reserve the right to adjust and amend this notice at any time and to any extent. If we change this notice in a material way, we will inform you of this change, for example by means of a general notice on this website or by a personal notice via e-mail.

Česko-rakouská průmyslová a obchodní komora, z.s.

07.11.2025