We do not take the protection of your personal data lightly. In accordance with Regulation No. 2016/679 of the European Parliament and of the Council (known also as the “General Data Protection Regulation (GDPR)”, hereinafter referred to as the “Regulation”), Act No. 110/2019 Sb., on the processing of personal data and other regulations applicable to the processing of “personal data”, the Prague Public Transit Company (DPP) would like to inform you about the processing of personal data.
The Controller is a person who alone, or together with others, determines the purposes for which your personal data needs to be processed and the manner in which the processing of your personal data will take place.
Information about controller:
The Prague Public Transit Company (DPP), business ID (IČ): 00005886, with its registered office in Prague 9 at Sokolovská 42/217, postal code 190 00 (hereinafter referred to as “DPP”).
“Personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. DPP does not consider the following data to be personal information or data: data and/or information that has been anonymized or collected in such a way that it can no longer be used to identify a specific individual, either in combination with other information or in any other way.
With respect to all processed information, DPP makes a determination as to whether such information should be classified as “personal data”. For example, the first name of a person living in a large city would not be considered personal data; however, if it was the first name of a person living in a small village, where a first name could lead to the identification of a specific individual, then such information would be considered personal data.
What are the basic criteria applicable to the processing of my personal data?
The legal conditions which are applicable to DPP’s processing of your personal data are generally following:
Overview of purposes for the processing of your personal data by DPP;
There has to be a legitimate purpose, in accordance with the Regulation, for DPP to process your personal data. It is not legally permitted to process your personal data without such a legitimate purpose. The purposes for which your personal data can be processed by DPP include the requirements to provide the following basic services and meet the related requirements and obligations: