The right of access to personal data

You have the right to ask UWB whether and what personal data about your person is or is not processed and, if it is processed, you have the right to access this data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• the intended period for which the personal data will be stored or, if this cannot be determined, the criteria used to determine that period;
• the existence of the right to request from the controller the rectification or erasure of personal data relating to the data subject or the restriction of their processing or to object to such processing;
• the right to file a complaint with the supervisory authority;
• any available information about the source of the personal data, unless it is obtained from the data subject;
• whether automated decision-making, including profiling, takes place.

If you exercise your right to access your personal data, UWB will provide you with a copy of the processed personal data free of charge. You may already be charged a reasonable fee based on administrative costs for further copies at your request. If you submit your request electronically, the information will be provided to you in electronic form unless you request otherwise.

The right to rectification

You can ask us to correct inaccurate personal data concerning you. You may also request that incomplete personal data be completed, including by providing an additional declaration.

The right to erasure

You can ask us to delete the personal data we process about you. In such a case, we will delete your personal data without undue delay if one of the following reasons is given:

• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• you have withdrawn your consent to processing and there is no further legal basis for processing;
• you object to processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for processing or you object to processing for direct marketing purposes pursuant to Article 21(2) GDPR;
• the personal data have been unlawfully processed;
• the personal data must be erased to comply with a legal obligation to which UWB is subject;
• the personal data was collected in connection with the offer of information society services to the child.

Please note that the right to erasure cannot be exercised and we may continue to store your personal data if the processing is necessary:

• for the exercise of the right to freedom of expression and information;
• for compliance with our legal obligations that require processing or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where the right to erasure is likely to prevent or seriously jeopardise the achievement of the purposes of that processing;
• for the establishment, exercise or defence of legal claims of UWB.

The right to withdraw consent

You can withdraw your consent to processing at any time and thus prevent further processing for the purpose stated in the consent. However, the withdrawal of consent does not affect the lawfulness of the processing in the period prior to the withdrawal.

The right to restriction of processing

You have the right to have UWB restrict the processing of your personal data if:

• you dispute the accuracy of your personal data for the time necessary for us to verify the accuracy of your personal data;
• the processing of your personal data is unlawful and you request the restriction of the use of this data instead of its deletion;
• UWB no longer needs your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims;
• you object to the processing until it has been verified that the legitimate grounds for the processing of your personal data by UWB outweigh your legitimate grounds.

If the processing of your personal data is restricted, your personal data, except for storage, may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or an EU Member State.

The right to data portability

You may ask us to transfer to you or to a third party the personal data we process about you in electronic form (automated) on the basis of a contract or your consent, in a structured, commonly used and machine-readable format.

The right to object

If we process your personal data (a) for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or (b) on the basis of our legitimate interests, you have the right to object to such processing. Unless we can demonstrate compelling legitimate grounds for processing which override your interests or rights and freedoms or for the establishment, exercise or defence of legal claims, your personal data will no longer be processed for these purposes.

If your personal data is processed for direct marketing purposes, you have the right to object to the processing of this personal data at any time. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The right not to be subject to automated individual decision-making

You have the right not to be subject to any automated decision-making, i.e. decision-making based solely on automated processing of your personal data, including profiling, which has legal effects concerning you or significantly affects you in a similar way, unless such processing is:

• necessary for the conclusion or performance of the contract between you and UWB;
• permitted by EU or Czech law; or
• based on your express consent.

The right to complain

You may also file a complaint about the processing directly with the Office for Personal Data Protection (www.uoou.cz).

Authentication of the request

For security reasons, we may ask you to provide additional information necessary to confirm your identity in order to ensure that the request made is not fraudulent (in particular if we have reasonable doubt about the identity of the individual making the request).

Time limit for processing the request

As soon as we receive a request from you exercising one of your rights, we will start to deal with it. We will deal with your request without undue delay and within one month of receiving it.

In justified cases (particularly in view of the complexity or number of requests to be processed), we may extend this period by up to two months. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.

If your request is denied, we will inform you of this (including the reasons for the denial) and we will also inform you of the possibility to file a complaint with the Office for Personal Data Protection (www.uoou.cz) and seek judicial protection..

Request processing fees

We process your requests free of charge.

However, if your request is manifestly unfounded or unreasonable (in particular if it is repetitive), we may charge you a reasonable fee taking into account the administrative costs of providing the requested information or taking the requested action.

Where can you exercise your rights?

You can exercise your rights in the following ways:

• by contacting DPO at gdpr@service.zcu.cz
• by a personal visit to the DPO at Univerzitní 2732/8, 301 00 Plzeň, room UR-311
• by telephone at +420 377 631 014
• by sending a written request to UWB: Univerzitní 2732/8, 301 00 Plzeň
• by email at rektor@rek.zcu.cz