en
cs
deData Protection (GDPR)
› About Us › Data Protection (GDPR)Data Protection Rules - Information Memorandum on Compliance with GDPR
Regional Museum and Gallery in Most, p. o.
Dear citizen, dear visitor
allow us to inform you about how the Regional Museum in Most, p. o. (hereinafter referred to as "the museum") manages and processes your personal data in connection with the Regulation on the Protection of Personal Data. The purpose of the data protection rules is to provide you with information primarily about what personal data we collect, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we may provide it, where you can obtain information about your personal data that we process, and what your individual rights are in the area of personal data protection. Your inquiries, comments, and any rights you exercise under the Regulation on the Protection of Personal Data can be addressed to the Regional Museum in Most at: Čsl. armády 1360/35, 434 01 Most or via email at infomuzeum-most.cz or other verified electronic communication.
General Information
Principles of Personal Data Processing
When processing your personal data, we respect and uphold the highest standards of data protection and adhere to the following principles:
We always process your personal data for a clearly and understandably defined purpose, using specified means, in a specified manner, and only for the duration necessary for the purposes of processing. We process only accurate and verified personal data of visitors and ensure that their processing corresponds to the defined purposes and is necessary to fulfill these purposes.
We ensure the highest possible security of visitors' personal data and prevent any unauthorized or accidental access to citizens' personal data, their alteration, destruction, or loss, unauthorized transfers, other unauthorized processing, as well as other misuse.
We always inform you clearly about the processing of your personal data and your rights to accurate and complete information about the circumstances of this processing, as well as your other related rights.
In the museum, we comply with appropriate technical and organizational measures to ensure a level of security corresponding to all possible risks. All persons who come into contact with visitors' personal data are obliged to maintain confidentiality about the information obtained in connection with the processing of this data.
Information on Personal Data Processing
Information about the Administrator and the Data Protection Officer
The administrator of your personal data is the Regional Museum in Most: Čsl. armády 1360/35, 434 01 Most, IČ: 00080730
The Data Protection Officer is the National GDPR Platform z. s., IČ: 06223851, infogdpr-platforma.cz
Purposes of Processing and Legal Basis for Processing
Information about the Administrator and the Data Protection Officer
The administrator of your personal data is the Regional Museum in Most: Čsl. armády 1360/35, 434 01 Most, IČ: 00080730
The Data Protection Officer is the National GDPR Platform z. s., IČ: 06223851, infogdpr-platforma.cz
Purposes of Processing and Legal Basis for Processing
All personal data is processed based on a legal basis. The legal basis for processing personal data includes contracts, consent, legal obligations, vital interests, public interest, and legitimate interests of the administrator or third parties. We process personal data for the following purposes:
Processing of Personal Data Without Your Consent:
Initiating research and whenever there is a change in the purpose or subject of the study
Mandatory record-keeping of documents related to public procurement
Mandatory record-keeping necessary for the registration of items
Registration of readers/researchers in the library and for the collection of library debts
Acquisition of collection items
Payment for copying and for paying reminders
Loan of books
Registration of a child for a museum camp
Registration of new acquisitions into the museum's collections
Buying and selling items and services
Receiving a donation
Granting consent for publication
Lending or borrowing items
Acquisition of collection items
Restoration and other services
Approval of purchases of items for the museum and when decommissioning items from the museum's collections
Sales of promotional items
Issuing and receiving cash into the museum's cash register
Administrative record-keeping of file services
Contact record-keeping
Monitoring the movement of persons in the museum
Evaluation of the museum, exhibitions
Personal data is processed for direct marketing purposes
Conducting professional seminars
Processing of Personal Data With Your Consent:
This generally involves situations where you voluntarily consent to us processing personal data you have provided or otherwise obtained, e.g., certain photographs, personal data of children under 15 years, or data for the purposes of addressing complaints or suggestions related to our services. If you do not provide consent, it may result in the museum being unable to provide certain products or services, or it may be forced to reasonably adjust the availability, scope, or conditions of the products and services provided, or the handling of complaints or suggestions.
Based on your consent, the museum further processes your personal data for the following purposes:
Care for visitors that does not arise from legal regulations. This includes activities that do not represent the fulfillment of a contract or another legal framework for processing personal data and which include the following activities: Publications in local press, periodicals, web or other electronic media that go beyond ensuring public relations agendas.
Offering products and services.
This primarily involves disseminating information, offering products and services of the museum and other persons, including offers of products and services specifically targeted at individual citizens, through various channels, such as mail, electronic means including email, and through websites. To a certain extent, in these cases, the museum is entitled to offer products and services to citizens without obtaining their consent, if it arises from the law or its legitimate interest, in which case you will be informed of your right to object to further offers of products or services. Your personal data may also be transferred to third parties for the purpose of disseminating information and offering products and services.
Scope of Processed Personal Data
Our museum processes your personal data to the extent necessary to fulfill the above purposes. We primarily process contact and identification data based on our legal obligations, processing this personal data only to the necessary and legitimate extent.
First name, surname, maiden name, date of birth, permanent contact address, and ID card number
First name, surname, address (only for donated or purchased items)
Optional personal data: email, phone, contact address, bank account number
Child's first name and surname, first name and surname of the child's legal representative, phone and email of the legal representative, signature of the legal representative
Title, first name, surname, address, IČ, DIČ for a self-employed individual
Delivery address of items from the museum's collections, delivery address
Method of Processing Personal Data, Processors
The method by which the museum processes your personal data includes manual and electronic processing.
Your personal data is primarily processed by museum employees, and to the necessary extent, it may also be processed by third parties. Before any transfer of your personal data to a third party, we will always conclude a written contract with that party, which contains the same guarantees for the processing of personal data as the museum itself complies with in accordance with its legal obligations. The current list of processors is available at www.muzeummost.czThe museum informs that personal data may be transferred to third parties based on a legal request from entities that have the legal authority to require the transfer of such personal data.
Recipients of Personal Data
Your personal data is transferred to third parties who participate in improving our services, such as IT services, law firms, and other entities. Before any transfer of your personal data to a third party, we will always conclude a written contract with that party, which regulates the processing of personal data to ensure the same guarantees for the processing of personal data as the museum itself complies with in accordance with its legal obligations.
In accordance with applicable legal regulations, the museum is entitled to directly transfer your personal data without your consent.
To relevant state administration authorities, courts, and law enforcement agencies for the purpose of fulfilling their obligations, for the purposes of enforcement of decisions, and to misdemeanor commissions.
To other persons to the extent specified by legal regulations, e.g., to third parties for the purpose of enforcing our claims against citizens.
To other offices and institutions or persons, such as the Regional Office, administrative court, financial administration, participants in proceedings, persons who have demonstrated a legal interest, applicants for information under Act No. 106/1999.
With your consent, we will further transfer your personal data:
To other persons for the purpose of disseminating information, offering products and services of the museum. Such transfers will only be made with your consent, and we will only transfer your identification and contact data to the extent necessary for the recipient. In such transfers, we will carefully ensure that your personal data is not endangered or misused.
Duration of Personal Data Processing
The museum processes citizens' personal data only for the duration necessary for the purposes of processing. We continuously assess whether there is still a need to process certain personal data necessary for a specific purpose. If we find that they are no longer needed for any of the purposes for which they were processed, we will delete or anonymize the data. The expected duration of personal data processing is determined by our destruction and archiving regulations and legal regulations. We process contractual obligations for the duration of the contractual relationship.
We process the offering of products and services for the duration of the contractual relationship. If personal data is transferred to third parties in this context, the duration of processing is determined by the third party in accordance with applicable legal regulations and the rules set forth in these rules.
Personal data related to care for citizens, visitors in direct marketing, press releases, and documentary materials will be removed immediately after the necessity period has expired.
Camera recordings are made and automatically deleted after 8 days.
Personal data for the purposes of the museum's management agendas are processed for the duration necessary to exercise rights and fulfill obligations arising from commitments to data subjects or legal entities on behalf of which the data subject acts (usually at least to the extent of the general limitation period), and further to the necessary extent for the purposes of the museum's legitimate interests, for example, for future proof of ownership rights.
Personal data is processed for the duration that may be necessary to ensure the purpose of proceedings, including the enforcement of decisions and the application of extraordinary remedies, plus the time necessary for the destruction process (usually up to 5 years from the final conclusion of the proceedings).
All your personal data is stored in a manner that complies with the legal regulations of the Czech Republic and the EU.
Rights of the Data Subject
The data subject is entitled to request information about the processing of their personal data, the purpose of processing personal data, the scope, or categories of personal data being processed, the sources of personal data, the nature of automated processing, the processors, the recipients, or categories of recipients of personal data, and has the right to withdraw their consent at any time. The museum will provide the requested information free of charge without undue delay or, in the case of repeated requests, for a reasonable fee not exceeding the costs necessary to provide such information. Citizens have the right to access personal data. (Art. 15 of the Regulation)
If the data subject discovers or believes that the museum or the museum's contractual processor is processing personal data in violation of the protection of the private and personal life of the data subject or in violation of the law, the data subject may:
Request the museum or its contractual processor for an explanation.
Request that the museum or its contractual processor rectify the situation, especially the data subject is entitled to request blocking, supplementation, or deletion of personal data, the right to correction and deletion (Art. 16 and 17 of the Regulation), the right to rectify inaccurate or incomplete personal data, the right to restrict processing (Art. 18 of the Regulation), the right to data portability (Art. 20 of the Regulation), and to raise objections against profiling and automated decision-making (Art. 21 and 22 of the Regulation). The museum has an obligation to notify individual recipients to whom personal data has been made available, e.g., in the case of correction or deletion, etc. In such cases, the administrator informs the data subject about these recipients at their request (Art. 19 of the Regulation). The data subject has the right to be informed in the event of a breach of personal data security. (Art. 34 of the Regulation)
The data subject thus has the right to contact the museum or the data protection officer at any time and request information and access to the processing of personal data. The stated rights can be exercised at the provided contacts of the museum, or they can also address a complaint to the supervisory authority according to the EU Regulation. The museum also ensures the protection of personal data of self-employed individuals within the framework of GDPR.
Obligation to Provide Personal Data
If the obligation to provide personal data is a legal or contractual requirement or a requirement that must be included in the contract, the data subject is obliged to provide personal data so as not to face possible consequences of not providing such data.
The Regional Museum in Most, p. o. always aims to maximize support and protection of your personal data, and we look forward to our continued cooperation.
Data Protection Officer: Mgr. Jiří Kalach, National GDPR Platform z. s., Revoluční 1082/8, 110 00 Prague 1, jiri.kalachgdpr-platforma.cz, +420 608 958 090