Information for former employees
If we have worked with you in the past in the context of an employment or similar relationship ("employment relationship"), we are entitled (and in some cases obliged) to continue to process some of your personal data, albeit to a limited extent.
What personal data do we process and for what purpose? What is the legal basis and duration of this processing?
We continue to process the following data about you after your employment has ended:
- Identification data: name, surname, title, date of birth and gender;
- contact details: telephone number, e-mail address;
- health insurance information, marital status information,
- data related to the performance of the job - data on education, medical fitness, integrity, data on training received, job evaluation, etc.
We process some of your personal data on the basis of a legal obligation (in particular data contained in the employment contract and pay slips) as part of the registration of former employees. We process this data for up to 30 years after the end of the employment relationship, in particular on the basis of the legislation governing the organisation and implementation of social security.
On the basis of our legitimate interests, we then process some of the other data mentioned above as well as data related to the performance of work in order to protect our legal claims. You have the right to object to such processing at any time, which may be exercised in the manner detailed below. For these purposes, we process personal data for the duration of the limitation period (a maximum of 10 years from the termination of the employment relationship) for claims arising out of or in connection with the employment relationship. In the event of legal, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings.
In what form is my personal data processed?
We process your data in electronic and paper form.
To whom can we disclose your personal data?
We manage your personal data within our organisation and we only pass it on to third parties with your consent in principle. However, in some cases we may have to pass your personal data on to other recipients without your consent.
In some cases, we are entitled to further disclose your data on the basis of the law. In particular, we may disclose your data to public authorities, we also provide it to insurance companies with which the ÚHKT is insured for processing in the case of insurance claim investigations, on the basis of our legitimate interest.
In some cases, we also use external suppliers, in particular for technical support of our information system. These activities may involve the processing of some of your personal data. External suppliers are in the position of so-called processors and have a written contract with us which obliges them to adhere to strict principles when handling your data. In this case, your consent is not required for the purpose of carrying out the processing activity, as such processing is directly permitted by law. Please know that we choose our suppliers according to strict criteria, so you do not have to worry about your data. Currently, the following categories of processors process your personal data.
We do not transfer your personal data abroad as a matter of principle. This can only happen exceptionally if you give your consent or if this is required by law.
What rights do you have in relation to your personal data?
As a data subject, the law gives you a number of rights. As a former employee, you have the following rights in relation to your personal data.
Right of access to personal data
You obviously have the right to know what data is being processed about you, for what purpose, for how long, where we obtained the data, whether and to whom we are transferring it. You also have the right to be informed of other rights relating to this data. This document is mainly intended to inform you, however, we are ready to provide you with confirmation or clarification on any point of this information.
If you ask us to do so, we will also provide you with a copy of the personal data processed without undue delay. We are entitled to charge a reasonable fee for this copy, particularly if it is requested repeatedly, in relation to administrative costs. If you make this request in electronic form, we will automatically assume that you are also interested in receiving the information in electronic form. However, you have the option to request it in another way. Please note that the right to obtain a copy of the personal data processed cannot adversely affect the rights of other persons.
Right to rectification of personal data
If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to request that we complete or correct it without undue delay.
Right to restriction of processing of personal data
This right allows you to request, in certain cases, that certain of your personal data be marked and not be further processed for a certain period of time. This is not the same as the right to erasure, as the restriction of processing is not permanent. You have the right to have us restrict the processing of your personal data if:
- you contest the accuracy of the data we process about you for the time necessary to verify its accuracy,
- the processing is without legal basis (e.g. beyond the data we are entitled to process) but you prefer to restrict the processing instead of erasing it, for example because you expect to provide us with the data in the future anyway,
- we no longer need to process your personal data but you require it for the establishment, exercise or defence of legal claims,
- you object to the processing (see the next point in the notice for this right).
If processing is restricted, the data may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, whether natural or legal, or for reasons of important public interest.
Right to object to the processing of personal data
You may only exercise your right to object to the processing of your personal data where we would process some of your personal data in the public interest or on the basis of our legitimate interest. If this happens, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so (in particular, if we need it to establish, exercise or defend legal claims).
Right to complain to a supervisory authority
The exercise of the rights set out so far is without prejudice to your right to lodge a complaint with the Data Protection Authority using the contact details set out at the beginning of this document. You can file a complaint at any time when you have doubts about whether your personal data is being processed as it should be, i.e. unlawfully or in breach of the law.
Right to erasure
In some cases, as a data subject, you also have the right to have your personal data erased. We generally erase your personal data when we no longer need it and have no legal basis for processing it. We will also delete your data if it has been processed on the basis of consent and that consent has been withdrawn.
Please note that even if this is one of the grounds for erasure, it does not mean that we will immediately delete all your personal data. This right does not apply if the processing of the personal data is still necessary for compliance with our legal obligations, for archiving purposes, for scientific or historical research or statistical purposes, or for the establishment, exercise or defence of legal claims.
Right to withdraw consent
Where your personal data is processed on the basis of consent, you also have the right to withdraw consent at any time. However, the withdrawal of consent will not affect any previous processing that we have carried out prior to the withdrawal of consent.
How can I exercise individual rights?
For all matters relating to the processing of your personal data, whether it is an enquiry, exercising a right, making a complaint or otherwise, you can contact our Data Protection Officer in the following ways:
- by post or in person at U Nemocnice 1, 128 00 Prague 2,
- by e-mail at poverenec@uhkt.cz,
We will process your request without undue delay, but within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.