Notice of rights in connection with personal data protection
Introductory information
Please carefully review the following document, through which we provide you with information regarding the processing of your personal data and the rights associated with such processing in the context of negotiations concerning the conclusion of an employment relationship between you and the Institute of Experimental Botany of the Czech Academy of Sciences, v. v. i., ID No. 61389030, with its registered office at Rozvojová 263, 165 00 Prague 6 – Lysolaje, as a potential employer.
All handling of personal data is governed by applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “General Data Protection Regulation” or “GDPR”). In accordance with Articles 13 et seq. of the GDPR, we hereby provide you, as a data subject, with the following information. This document is public and serves to duly inform you of the scope, purpose, and duration of personal data processing, as well as to instruct you on your rights related to their protection.
Who is the controller of personal data?
The controller of personal data is the Institute of Experimental Botany of the Czech Academy of Sciences, v. v. i., ID No. 61389030, with its registered office at Rozvojová 263, 165 00 Prague 6 – Lysolaje (hereinafter the “Controller”).
General information – what constitutes personal data?
Personal data includes any information relating to an identified or identifiable natural person, based on which a specific individual can be directly or indirectly identified. Personal data therefore includes a wide range of information, such as name, gender, age and date of birth, marital status, photographs (i.e., any depiction of likeness), personal identification number, permanent residence, telephone number, email address, health insurance information, citizenship, data on physical and mental health, as well as fingerprints, signatures, or IP addresses.
On what basis do we process your personal data?
Your personal data are processed because such processing is necessary for the purpose of conducting negotiations regarding the conclusion of an employment contract.
Scope of personal data processed by the Controller
We inform you that your personal data are processed to the following extent:
- name, surname, and academic title
- date of birth
- permanent residence (street and number, municipality, postal code)
- telephone number and email address
- photograph
- work experience
- personal interests
- achieved education
Purpose of personal data processing
The Controller processes and stores your personal data within its activities under the conditions and within the limits set by applicable legislation, particularly in accordance with Article 6(1)(b) GDPR, for the purpose of conducting negotiations on the establishment of an employment relationship with the data subject.
Retention period
Your personal data will be stored for a period of 6 months.
Additional information on personal data processing
Personal data of the data subject are processed automatically in electronic form.
Your personal data are not transferred and we do not intend to transfer them to any third country or international organization.
Information on data subject rights
As a data subject, you have the following rights:
- Right of access – to request information from the Controller regarding the processing of your personal data.
- Right to rectification – to have the Controller rectify inaccurate personal data concerning you without undue delay. Considering the purposes of processing, you also have the right to have incomplete personal data completed, including by providing an additional statement.
- Right to erasure – to have the Controller erase personal data concerning you without undue delay; the Controller is obliged to do so if one of the grounds set out in the GDPR applies.
- Right to restriction of processing – in cases specified by the GDPR.
- Right to data portability – to obtain the personal data you have provided to the Controller in a structured, commonly used, and machine-readable format, and to transmit those data to another controller without hindrance, in cases specified by the GDPR.
- Right to lodge a complaint – if you believe that your rights under personal data protection legislation have been violated, you may lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection.