POLICY ON THE PROCESSING OF PERSONAL DATA

Nadační fond pro Ukrajinu

U Přehrady 3204/61
Mšeno nad Nisou

466 02 Jablonec nad Nisou

ID: CZ17964687

In connection with the organization of the fundraiser for Ukraine, we process the personal data of the contributors who have requested a receipt for payment or a note for their contribution to the extent specified below, always in accordance with Regulation (EU) No. 216/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and Act No. 110/2019 Coll., on the processing of personal data.

These principles on the processing of personal data provide contributors with a comprehensive overview of how personal data is processed, as well as the rights of contributors as data subjects. This policy fulfills the conditions of the information obligation under Article 13 of the GDPR.

It is not our aim or interest to collect or otherwise use personal data. However, as contributors requesting payment confirmation or attention for a contribution provide us with personal data, we are obliged to inform you of the following:

Basic processing rules

The personal data of the contributors are:

• always processed fairly and in a lawful and transparent manner,
• collected for specific, explicit and legitimate purposes,
• proportionate, relevant and limited to what is necessary in relation to the purpose for which it is processed,
• accurate and, where necessary, kept up to date,
• stored in a form which permits identification of data subjects for no longer than is necessary in relation to the relevant purpose of the processing,
• processed in a manner which ensures appropriate security of the personal data.

Legal basis for processing

The legal bases for the processing of contributors' personal data are:

• consent of the contributor as data subject;
• the contribution to the collection and at the same time the expressed interest in the issuance of a receipt or acknowledgement for the contribution;
• the fulfillment of legal obligations and the legitimate interest of the controller.

Scope of processing of personal data

We process the following personal data of contributors in connection with the legal basis for processing described above:

• name, surname/name
• date of birth/ID number
• residential address/address of registered office, delivery address
• email address
• telephone number
• bank account number

This personal data is necessary to issue a receipt for payment or to send a note for the contribution. The personal data is processed manually and automatically.

Purpose of the processing of personal data

We process personal data solely for the purpose of issuing a payment receipt and sending a donation note.

Recipients of personal data

We only disclose your personal data to:

• our collaborators who arrange the issue of the payment confirmation and the sending of the donation attention;
• public authorities in the cases provided for by law, 

Duration of processing of personal data

We process personal data only for the time necessary to process the request for the issue of a payment receipt or the sending of a donation note. After the issuance of the receipt and the sending of the attention, we delete the personal data of the contributors, unless otherwise provided by law (e.g. in connection with the archiving of accounting documents). In other words, we will not process any personal data for longer than necessary.

Rights of data subjects

As a data subject, the contributor has the following legal rights in connection with the processing of his or her personal data:

The right of access to personal data. The contributor is entitled to obtain information about whether we process his or her personal data and, if so, what data is involved and how it is processed. The contributor also has the right to have inaccurate personal data concerning him corrected by us as the controller without undue delay at his request. The contributor has the right to complete incomplete personal data at any time.

Right to erasure. Upon the request of the contributor and subject to the conditions under the GDPR, we are obliged to delete and destroy the personal data we process about the contributor.

The right to limit the processing of personal data. In the cases specified by law, the contributor has the right to have us restrict the processing of their personal data. In addition, the contributor has the right to object to processing that is based on the legitimate interests of the controller, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Right to data portability. The contributor is entitled to obtain from us the personal data he or she has provided in a common and machine-readable format. The contributor may subsequently transmit this personal data to another controller or, if technically feasible, request that we transmit it.

If the contributor is in any way dissatisfied with the processing of his or her personal data, he or she may lodge a complaint either directly with us or contact the Office for Personal Data Protection, ID No.: 70837627, located at Pplk. Sochor 27, 170 00 Prague.

More information about the rights of the contributor is available on the website of the Office for Personal Data Protection (http://www.uoou.cz/6-prava-subjektu-udaj/d-27276).