Information on the processing of personal data

Museum of the Memory of the 20th Century, z. ú.

The Museum of the Memory of the XXth Century, z. ú. (hereinafter also referred to as the "Museum") obtains and processes personal data only to the extent necessary to ensure the realization of the Museum's purpose and for the purpose of fulfilling the obligations arising from the commitments undertaken. When processing personal data, the Museum complies in particular with the standards of data protection pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR) and Act 110/2019 Coll. 

1. The administrator of your personal data is the Museum of Memory of the XXth Century, z. ú., with its registered office at Mariánské náměstí 2/2, 110 00 Prague 1, ID No.: 08694508, registered in the register of institutes at the Municipal Court in Prague under No. U 837. The Museum determines how and for what purpose your personal data will be processed.
2. Personal data means information relating to a natural person who can be identified on the basis of that information, possibly in conjunction with other information.
3. The Museum processes the following personal data according to the different groups of subjects:
   1. for members of the Museum's bodies - name and surname, date of birth, birth number (for the director, members of the Board of Directors and the Supervisory Board), address, e-mail address, telephone number, workplace, 
   2. for employees - name and surname, birth number, address, nationality, telephone number, e-mail address,
   3. for participants of conferences, seminars, workshops and other programmes organised by the Museum - name and surname, address, telephone number, e-mail address, age and gender,
   4. for Friend Club members - name and surname, address, phone number, email address, age and gender,
   5. for authors of periodical and non-periodical publications, audio and video recordings - name and surname, address, telephone number, e-mail address
   6. for contractual partners (donors, sponsors, volunteers, lecturers, persons from whom the Museum acquires collection objects) - name and surname, address, telephone number, e-mail address
   7. for media representatives (journalists) - name and surname, e-mail address, telephone number, location of the journalist
4. The Museum processes your personal data for the purpose of fulfilling the Museum's legal obligations and the Museum's obligations under contracts and for the purposes of the Museum's legitimate interests. Beyond this scope, your personal data may only be processed by the Museum with your consent.
5. The Museum processes personal data transparently, you have the opportunity to get to know the processing of your personal data carried out by the Museum.
6. If it is not possible for the Museum to process personal data directly, the processing may be carried out through a processor (e.g. contractual provision of Museum events). The Museum enters into written contracts with third parties used for these purposes, in which they undertake to protect the personal data processed and to comply with data security standards.
7. In relation to your personal data processed by the Museum, you have the right to: 
   1. access to personal data
      Upon your request, the Museum will provide you with information about what personal data it processes, for what purpose, from what source the personal data was obtained, to whom your data was provided and the intended period of time for which it will be stored.
   2. Erasure of personal data (erasure is not carried out if there are legal grounds for processing of personal data) 
   3. correcting or updating inaccurate or outdated personal data
   4. the right to limit the processing of personal data
      You can request a restriction of the processing of your personal data - that is, you can request that the Museum no longer process your personal data until it is clear whether the data processed is accurate or whether your objection to the processing of your personal data is justified (see right to object below).
   5. the right to portability of personal data
      In the case of automated processing of personal data, you have the right to so-called data portability. This consists of the Museum's obligation to transmit to you all your processed personal data in a structured, commonly used, machine-readable format. You thus have the possibility to transfer your personal data in this form to another controller.
   6. the right to object to the processing of personal data
      You have the right to object at any time to the processing of your personal data for direct marketing purposes (e.g. sending invitations to Museum events). If you do so, your personal data will no longer be used for this purpose. You also have the right to object to the processing of your personal data based on our legitimate interest - in which case the Museum will only continue to process your data if it can be shown that it has compelling legitimate grounds for doing so.
8. Upon your request, the Museum will provide you with access to the following information regarding the processing of personal data:
   1. purpose of processing personal data
   2. categories of personal data processed
   3. the recipients or categories of recipients to whom the personal data have been or will be disclosed,
   4. the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period.
9. The processing of personal data may only be carried out for the necessary period of time. After the necessary processing period, your personal data may only be stored for archiving, scientific research, historical data preservation and statistical purposes.
10. The Museum's website uses cookies. Cookies are small text files that are stored on your device when you visit the Museum's website and carry information about which pages you have visited and what information you have searched for on them. Cookies make it easier for you to access and use the website afterwards. Your consent to the processing of your personal data is deemed to be the user's authorisation of cookies in the browser settings. You can revoke your consent to the use of cookies at any time via your browser settings.  
11. The Museum's website uses Google Analytics provided by Google. Detailed information about the service: https://analytics.google.com/analytics/web.
12. Cookies are used to:
    1. measuring website traffic and anonymised monitoring of visitor behaviour on websites (preference detection) 
    2. ensuring the functioning of the website
    3. optimal setting of the information provided
    4. link settings
    5. personalisation of advertising.
13. Questions regarding the processing of personal data can be submitted to the Museum of Memory of the XXth Century, z. ú., with its registered office at Mariánské náměstí 2/2, 110 00 Prague 1, e-mail: info@muzeum20stoleti.cz. 
14. In the event that you become aware that the Museum is processing your personal data in breach of the law or in breach of its obligations, you may ask the Museum for an explanation and/or request that the situation be rectified. You may also file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, mailbox ID qkbaa2n, e-mail: posta@uoou.cz.
15. The deadline for processing your application is one month from the date of receipt. The deadline can be extended by an additional month in exceptional cases. You must be informed of the extension.