GDPR

Basic provisions

The controller of personal data pursuant to Art. 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”), the Ústí Community Foundation, with registered office at Koněvova 1697/18, 400 01 Ústí nad Labem, ID No.: 44 55 22 54, registered with the Regional Court in Ústí nad Labem, Register of Foundations and Endowments, Section N, Insert 7, and as a controller we will process your personal data according to the terms and conditions set out below. If you wish to contact us during the processing period, please contact us at tel. at +420 475 201 023 or by e-mail: gdpr@komunitninadace.cz.

Scope and sources of personal data processed

Personal data of newsletter subscribers

The newsletter (e-bulletin) is sent only to registered subscribers from the Mailchimp system (www.mailchimp.com). We store the email address, first and last name of the subscriber. Only authorized employees of our foundation have access to the list of subscribers. We do not provide personal data to any third parties, we only use it for the purpose of sending out the newsletter. Those interested in subscribing to the Foundation’s email newsletter can register themselves at www.komunitninadace.cz, via the Mailchimp form, or via the appropriate field in another form – e.g. registration for one of our foundation’s events. In this way, future subscribers of the newsletter give us their consent to receive the newsletter and to the processing of their personal data. Unsubscribing from the newsletter is possible at any time, the unsubscribe link is in the footer of each email or you can just reply with the subject “do not send”.

Personal data of donors

As an administrator, we process personal data of individuals who have decided to become donors of the Ústí Community Foundation either through the Darujme.cz system or by concluding a donation contract. The personal data of donors processed by us include mainly common personal data, i.e. name, surname, home address, date of birth, telephone number, email address and information on payments received. These data serve to uniquely and unmistakably identify the donor. We process your personal data and information about payments received on behalf of our foundation primarily for the purpose of accounting for your donation and issuing a donation receipt that you can use on your tax return to reduce your income tax base. We maintain this information in the Salesforce donor database. We may use your data to thank you, to inform you about the use of donated funds or to inform you about other activities of our foundation. We carry out this processing on the basis of legitimate intent in the context of targeted individual donations. We may also use the data to create statistics and archives in case of disputes or claims. We are also the controller of personal data collected through Darujme.cz. The processing is carried out for the purpose of fulfilling the donation agreement you enter into with us when making a donation. The Via Foundation, the operator of Darujme.cz, acts as an intermediary in the donation process. The privacy policy of the Darujme.cz portal can be found here. https://www.darujme.cz/#informace-o-zpracovani

Personal data of applicants and recipients of foundation contributions

As a controller, we process personal data of individuals who have applied for support from the Ústí Community Foundation, as well as those who have subsequently received support on the basis of a contract for the provision of a foundation contribution. The personal data of applicants and recipients of foundation contributions may include in particular: name, surname, residential address, date of birth, telephone number, e-mail address, bank account number. In addition, information on health, income, social benefits, disability pension, income and household expenses are necessary to evaluate the application for a foundation grant. We process the personal data of the recipients of foundation contributions from the Ústí Community Foundation and information about payments sent to the recipients’ account primarily for the purpose of correct accounting of foundation contributions. We also process them for the purpose of reporting the support provided in the annual report of the Ústí Community Foundation, in accordance with the obligations imposed on us by the Civil Code 89/2012 Coll. and its provisions on funds. We also maintain information about beneficiaries in the Salesforce database of foundation grants. We use personal data to inform you about grant opportunities and to inform you about the activities of the Ústí Community Foundation. We carry out this processing on the basis of a legitimate interest within the framework of our foundation activities. We may also use the data to create statistics and archives in case of disputes or claims.

Cookies

To better tailor our services to your requirements, our website uses cookies – small files stored on your disk that record data related to your browsing experience. You can change the cookie settings in your browser at any time, including disabling them completely. When you browse our website, we record your IP address, how long you stay on the site and which page you come from. We see the use of cookies to measure website traffic and to customize the display of the website as a legitimate interest of the administrator, as we believe that this allows us to offer you even better information and services.

Method of processing and protection of personal data

The processing of personal data is carried out at the headquarters of the Foundation by our authorized employees, or by. processor. The processing is carried out by computer technology, or. and manually for personal data in paper form, in compliance with all security principles for the management and processing of personal data. To this end, we have taken technical and organisational measures to ensure the protection of personal data. In particular, measures to prevent unauthorised or accidental access, alteration, destruction or loss of personal data, unauthorised transfers, unauthorised processing or other misuse of personal data. All entities to which personal data may be disclosed, e.g. the members of the evaluation panels respect the right to privacy of data subjects and are obliged to comply with the applicable legislation on the protection of personal data.

The period for which the processed data will be stored

The duration of the period for which the data subject gives consent to the processing of personal data and for which the processed data will be stored is specified in the relevant written consent of the data subject, which is the period necessary to ensure the rights and obligations arising from contractual or other relationships or from the relevant legislation. In the case of Newsletter subscribers, consent to processing is granted for the entire period during which the subscriber of the e-mail newsletters will be interested in receiving information about the activities of the Ústí Community Foundation. The period for which consent is granted shall end on withdrawal of consent. We will then store the personal data of the newsletter subscriber for 5 years.

Transfer of personal data to third parties

To ensure specific processing operations that we cannot provide on our own, we use the services and applications of processors who can protect the data and specialize in this processing. These providers include. Mailchimp, WordPress and Google Analytics. We do not sell or otherwise disclose your personal information to unauthorized third parties. We do not provide your data (including your email address) to third parties for marketing purposes. Personal data may be disclosed to entities authorised under specific legal regulations (e.g. law enforcement authorities, etc.).

Data transfer outside the European Union

All processing of personal data will be carried out within the EU.

Your rights in relation to the protection of personal data

You can exercise a number of rights in relation to your personal data. If you wish to exercise any of these rights, please contact us by email: gdpr@komunitninadace.cz. You have the right to information, which is already fulfilled by this information page with the personal data processing policy. We will then do our utmost to accommodate your request to the best of our ability.

Articles 15 to 22 of the GDPR provide a basic list of your rights and include in particular:

1. The right to obtain information about your personal data that we process (right of access).
2. If something changes or if you find your personal data outdated or incomplete, you have the right to have your personal data completed and amended (right to rectification) and to be informed about the rectification.
3. You can use the right to restriction of processing to limit the scope of personal data or the purposes of processing (e.g. by unsubscribing from the newsletter you limit the purpose of processing for sending commercial communications).
4. You can exercise the right of portability if you would like to take your personal data and transfer it to someone else, in which case we will follow the same procedure as for exercising the right of access.
5. You can exercise the right to have your personal data deleted from our databases if the data is no longer needed for the purpose for which it was processed or if you withdraw your consent to its processing. In some cases we are bound by legal obligation and e.g. we have to keep records of the tax documents issued for the period prescribed by law. In this case, we will therefore delete all such personal data that are not bound by another law.
6. The right to withdraw consent to the processing of personal data, if the processing is based on such consent.
7. The right to unsubscribe from receiving newsletters with news about what’s happening around us, emails with information about current grant calls, invitations to events related to our activities or surveys about the needs of the local community and current issues.
8. The right to object to the processing of personal data on the basis of our legitimate interests as described above.
9. We will make every effort to help you exercise your rights and resolve any questions, requests or complaints. To do this, please send us an email to gdpr@komunitninadace.cz and specify how we can help you or what we can do for you. If you are not satisfied with the way your request has been handled, you have the right to complain to the Office for Personal Data Protection.

Silence

We would like to assure you that our employees who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would compromise the security of your personal data. This confidentiality continues even after the end of the contractual relationship with us. Your personal data will not be released to any other third party without your consent. This personal data processing policy applies from 25. 5. 2018.

Didn’t find what you were looking for?

We have tried to explain everything in an understandable way. If you have any questions, please do not hesitate to contact us at gdpr@komunitninadace.cz.

Changes to the Privacy Policy

We reserve the right to change this policy if it is appropriate in the future to improve our services, enhance your security, or as necessary to comply with legal or other obligations.

This policy was last updated on 23. 11. 2018.