What is the responsibility of the administrator?
As the controller of the Municipality of Jankov (we are responsible for all processing of your personal data within the scope of certain agendas in the municipality. We also deal with your requests (e.g. for rectification, erasure, information about your personal data), objections, and provide you with information about how and why we handle your personal data.
A data protection officer is also responsible for the proper handling of your personal data.
What do I need a proxy for?
You can also contact the Data Protection Officer with any questions, suggestions and requests to exercise your rights that relate directly to your personal data used within the framework of a particular agenda in the municipality, especially if you do not want to contact the municipality's representative directly.
The officer will professionally evaluate your questions, requests and suggestions, forward them to the administrator together with recommendations on how to address them, or provide you with basic information and consultation. He or she is bound by confidentiality and maintains confidentiality even about complaints. However, the administrator is solely responsible for dealing with your queries, suggestions, objections and requests.
What are your rights?
If we use your personal data in the context of an agenda in the municipality (technically speaking - our municipality processes it as a controller), you have the right to:
1) To ask whether they are processed and to request a copy (export) (see Article 15 of the EU General Data Protection Regulation 2016/679 for details, hereafter we use the abbreviation ON). If your request for this information is manifestly unreasonable or disproportionate, in particular repeated within a short period of time, we may require payment of reasonable costs. We may also refuse a manifestly unreasonable or disproportionate request.
2) To request the rectification of your personal data if it is inaccurate, to request its erasure if it is processed unlawfully and to request that we restrict its processing (see Articles 16, 17 and 18 ON for details).
3) In addition, where the processing is carried out because we are carrying out a task in the public interest or in the exercise of official authority vested in us (Art. 6(1)(e) ON) or because of our legitimate interest (Art. 6(1)(f) ON), you have the right to object to this processing (see Art. 21 ON for details).
4) You also have the right to receive information about the processing of your personal data relating to individual agendas ("processing purposes"). We publish a general overview of these below.
5) If the processing of your personal data is based on the fact that you have given us your consent (Art. 6 para. 1 lit. or Art. 9 para. 2 lit. a ON), you have the right to withdraw this consent at any time. You can withdraw your consent by writing to email@example.com send a message stating what the consent is and that you are withdrawing it. You can also send the same by letter to our address at the beginning of this text or in person.
6) You must identify and contact yourself in your inquiries, suggestions and requests for personal information, as we will usually need to verify your identity first. You will speed up the processing if you contact us by means of proof of your identity, such as a data box, an email with a recognised electronic signature or a documentary submission with a certified signature, or if you come to the municipal office in person with your ID.
7) If you are not satisfied with the handling of your query, request or complaint by the controller, you have the right to lodge a complaint with the Data Protection Authority. However, it is always advisable to discuss the problem with the Data Protection Officer before doing so. His or her job is primarily to make sure that we are handling your data properly and not violating your rights.
What personal data do we process in each agenda ("processing purposes")?
We process a large part of the data on the citizens of the municipality, owners of real estate in our municipality or other people because we are directly required to do so by law or related implementing regulations (for example, the Population Registration Act, the Elections Act, the Building Act, the Municipalities Act, the Local Taxes Act, the Registry Act, the Act on Free Access to Information and many others). In this way, we mainly process name and surname, birth number, date of birth, nationality, place of birth and place of permanent residence, data on marriage, death and other data, especially from applications and other submissions. These data are handled by designated employees in our office, or we transmit them to state and other authorities and public institutions in the performance of a legal obligation.
We also process data about our employees and contractors or their representatives on the basis of contracts. In particular, we process their name and contact details, data on salary and remuneration and other payments, data for health and social insurance, bank details and other similar data. On the basis of contracts, we also process data on buyers and tenants of real estate. These data are handled by designated employees in our office, or we pass them on to the Social Security Agency, the Tax Administration, the Labour Office, health insurance companies and other authorities in the course of fulfilling our legal obligations.
In addition, we process some personal data in other registers on the basis of the performance of a task in the public interest, e.g. for informing citizens, for valuing their anniversaries, for providing certain services (e.g. water and sewerage billing), for settling public hearings on the land use plan and for other purposes. This data is handled by designated staff in our office and in some areas is also passed on to other recipients (for example, in the area of the master plan, to the planner).
On the basis of the legitimate interest of the municipality, we process some personal data in the framework of the protection of the municipality's property (e.g. CCTV systems, security of buildings), in the framework of the protection of the municipality's information and communication systems (e.g. IP addresses of website visitors, wifi logins). These data are handled only by designated employees in our office, in case of incidents we will provide them to the Police of the Czech Republic or to the persons concerned.
We keep personal data for the time necessary for the purpose for which we process them, or for the time specified in the file and shredding regulations.
We do not transfer personal data to non-member states of the European Union.
Personal data are not subject to automated individual decision-making, including profiling.