Applicant Requesting Information Related to Their Rights under the GDPR

Legal basis for the processing of your personal data:

The providing and processing of your personal data is necessary on the basis of the Prague Public Transit Company (DPP)’s duty to fulfill legal obligations, primarily arising out of the provisions, inter alia of Article 12 of the General Data Protection Regulation (GDPR) and the provisions of Article 11 of Act No. 110/2019 Coll., on the processing of personal data. Under the above, you have the right (but not the obligation) to contact the Prague Public Transit Company (DPP) and ask it to respond to certain requests and answer certain questions.

The legal basis for the processing in this case is:

  • keyword (title): law.

Personal Data Processed

It depends on the implementation of a specific law according to the Regulation. This is usually your first and last name, email address and any other personal data that is important with respect to the processing of your application, including a verification of your identity.

Your personal data is being processed in order to do the following:

  • implement the rights of data subjects (individuals) whose personal data is being processed by the Prague Public Transit Company (DPP),
  • communicate with the respective data subjects (individuals),
  • provide evidence of and demonstrate how the rights of data subjects (individuals) are recognized and responded to by the Prague Public Transit Company (DPP).

Recipients or categories of recipients of Personal Data

To the extent it is necessary for the company to do so, your \personal data may be passed on to third parties (recipients); but, only for the purposes described above.

For how long will the company be storing my personal data and what is the criteria being used to determine this period?

Your personal data is generally processed for the time period necessary to fulfill the purpose of the processing. The Prague Public Transit Company (DPP) will delete personal data as soon as the purpose for which the personal data was processed ceases to exist.

The company determines the period of time during which it is necessary to continue to process your personal data on the basis of the following criteria:

  • Legal requirements: Your personal data is retained by the company for the entire duration of the period during which the company may have to respond to legal requests or actions initiated by the company or by you in relation to the company’s handling of your personal data. This can, in particular, relate to any complaints received by the company from the Office for Personal Data Protection (Úřad pro ochranu osobních údajů or UUOC) and for any other period of time, as required under the law.
  • Litigation and other proceedings: Should the processing of your personal data be relevant to any proceedings in which the Prague Public Transit Company (DPP) is a party (or intervener), the company will retain your personal data for the entire duration of such proceedings and for the period of time during which there can be any related subsequent and ancillary proceedings. 

We store your personal data in this database for a period of 36 months from the date of sending out a response, after which it will be deleted, unless otherwise necessary for the reasons stated above.

Processing Method

Personal data is processed both manually and electronically. Personal data is not made available to anyone except the recipients noted above.