Information for contractual partners
What personal data do we process and for what purpose? And what is the legal basis for this processing?
If you are our contractual partner, i.e. a supplier or customer, please be aware that we only process the necessary identification data about you: your name, surname, date of birth, residential address and, in the case of natural persons who are entrepreneurs, the registration number and registered office address.
These data serve to identify the contracting party sufficiently. The legal basis for their processing is thus the fact that the processing is necessary for the performance of the contract or for the implementation of measures taken before the conclusion of the contract. The provision of these personal data is a contractual requirement and you are obliged to provide us with these data. Otherwise, the contractual relationship cannot be concluded.
In addition, if you provide us with your other contact details, which include in particular your email, social media profile address and telephone number, this will facilitate communication between you and the organisation, the legal basis for processing such data being either the performance of the contract or our legitimate interest, which lies precisely in facilitating communication with our contractual partners.
To whom can we disclose your personal data?
We manage your personal data within our organisation and we only pass it on to third parties with your consent. In some cases, however, we are obliged to pass on your personal data to other recipients without your consent.
In some cases, we are entitled to further disclose your data on the basis of the law. In particular, this may include disclosure of your data to government authorities.
In some cases we also use external suppliers, in particular for technical support of our information system. These activities may involve the processing of some of your personal data. The external suppliers are in the position of so-called processors and have a written contract with us, which obliges them to comply with strict principles when handling your data. In this case, your consent is not required for the purpose of carrying out the processing activity, as such processing is directly permitted by law. Please know that we choose our suppliers according to strict criteria, so you do not have to worry about your data. Currently, the following categories of processors process your personal data.
We do not transfer your personal data abroad as a matter of principle. This can only happen exceptionally if you give your consent or if this is required by law.
In what form is my personal data processed?
We process your data in electronic and paper form.
How long do we keep your data?
We only keep your data for as long as is strictly necessary. Tax and accounting documents are kept for a minimum of 10 years in accordance with current legislation. Other documents are also generally kept for 10 years, taking into account the legal limitation periods in case they need to be submitted as evidence in a court case. In the event that litigation is initiated, we retain this data beyond these time limits for the duration of the litigation.
What rights do you have in relation to your personal data?
As a data subject, the law gives you a number of rights. As in some cases the law requires us to process the personal data of our contractual partners, some of your rights are limited by law. However, as our contractual partner, you have the following rights in relation to your personal data.
Right of access to personal data
You have, of course, the right to know what data is being processed about you, for what purpose, for how long, where we have obtained this data, whether and to whom we transfer it. You also have the right to be informed of other rights relating to this data. This document is mainly intended to inform you, however, we are ready to provide you with confirmation or clarification on any point of this information.
If you ask us to do so, we will also provide you with a copy of the personal data processed without undue delay. We are entitled to charge a reasonable fee for this copy, particularly if it is requested repeatedly, in relation to administrative costs. If you make this request in electronic form, we will automatically assume that you are also interested in receiving the information in electronic form. However, you have the option to request it in another way. Please note that the right to obtain a copy of the personal data processed cannot adversely affect the rights of other persons.
Right to rectification of personal data
If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to request that we complete or correct it without undue delay.
Right to restriction of processing of personal data
This right allows you to request, in certain cases, that certain of your personal data be marked and not be further processed for a certain period of time. This is not the same as the right to erasure, as the restriction of processing is not permanent. You have the right to have us restrict the processing of your personal data if:
- you contest the accuracy of the data we process about you for the time necessary to verify its accuracy,
- the processing is without legal basis (e.g. beyond the data we are entitled to process) but you prefer to restrict the processing instead of erasing it, for example because you expect to provide us with the data in the future anyway,
- we no longer need to process your personal data but you require it for the establishment, exercise or defence of legal claims,
- you object to the processing (see the next point in the notice for this right).
If processing is restricted, the data may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, whether natural or legal, or for reasons of important public interest.
Right to object to the processing of personal data
You may only exercise your right to object to the processing of your personal data where we would process some of your personal data in the public interest or on the basis of our legitimate interest. If this happens, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so (in particular, if we need it to establish, exercise or defend legal claims).
Right to complain to a supervisory authority
The exercise of the rights set out so far is without prejudice to your right to lodge a complaint with the Data Protection Authority using the contact details set out at the beginning of this document. You can file a complaint at any time when you have doubts about whether your personal data is being processed as it should be, i.e. unlawfully or in breach of the law.
Right to erasure
In some cases, as a data subject, you also have the right to have your personal data erased. We generally erase your personal data when we no longer need it and have no legal basis for processing it. We will also delete your data if it has been processed on the basis of consent and that consent has been withdrawn.
Please note that even if this is one of the grounds for erasure, it does not mean that we will immediately delete all your personal data. This right does not apply if the processing of the personal data is still necessary for compliance with our legal obligations, for archiving purposes, for scientific or historical research or statistical purposes, or for the establishment, exercise or defence of legal claims.
Right to withdraw consent
Where your personal data is processed on the basis of consent, you also have the right to withdraw consent at any time. However, the withdrawal of consent will not affect any previous processing that we have carried out prior to the withdrawal of consent.
How can I exercise individual rights?
For all matters relating to the processing of your personal data, whether it is an enquiry, exercising a right, making a complaint or otherwise, you can contact our Data Protection Officer in the following ways:
- by mail or in person at U Nemocnice 1, 128 00 Prague 2,
- by e-mail at poverenec@uhkt.cz,
We will process your request without undue delay, but within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.