Duty LXD-0908
Processes personal data, in the Czech Republic
GDPR Articles 12-21 and Act No. 110/2019 Sb. Section 11, Data Subject Rights in the Czech Republicsince 2 lines
Regulation (EU) 2016/679, Arts. 12-21; Zákon č. 110/2019 Sb., o zpracování osobních údajů, § 11 · Read the law's page
- Honor a person's request to access, rectify, erase, restrict, port, or object to processing of their personal data in the Czech Republic within one month of receipt.
- You may apply a person's rights in the Czech Republic proportionately, or postpone answering a request, where necessary and proportionate to protect an interest Section 6(2) lists, such as the rights and freedoms of others or the enforcement of a private-law claim, and must then notify the Office for Personal Data Protection without undue delay, under Act No. 110/2019 Sb. Section 11.
GDPR Articles 33-34, Breach Notificationsince 2 lines
Regulation (EU) 2016/679, Arts. 33-34 · Read the law's page
- Notify UOOU without undue delay, and within 72 hours where feasible, after becoming aware of a personal-data breach affecting a person in the Czech Republic, unless the breach is unlikely to risk their rights and freedoms, and notify affected individuals without undue delay where the breach is likely to result in a high risk to them.
- If you process personal data on behalf of a controller, notify the controller without undue delay after becoming aware of a personal data breach (Article 33(2)).
GDPR Chapter V, Cross-Border Transfer Restrictionssince 1 line
Regulation (EU) 2016/679, Arts. 44-49 · Read the law's page
- Rely on an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in the Czech Republic outside the EEA.
Personal data processing for scientific or historical research or for statistical purposessince 1 line
Act on Personal Data Processing (Zákon č. 110/2019 Sb.), § 16 · Read the law's page
- Where it allows the scientific, historical research or statistical purpose to be reached, further process special-category personal data (GDPR Article 9(1)) in a form that does not permit identification of the data subject, unless the data subject's legitimate interests prevent it (section 16(2)).
Act on Personal Data Processingsince 1 line
Zakon c. 110/2019 Sb., o zpracovani osobnich udaju · Read the law's page
- Establish a GDPR Article 6 lawful basis before processing personal data of a person in the Czech Republic.
UOOU Enforcement, GDPR Article 82, and the Act on Collective Civil Court Proceedingsince 1 line
Regulation (EU) 2016/679, Arts. 82-83; Zakon c. 179/2024 Sb., o hromadnem obcanskem soudnim rizeni; Zakon c. 180/2024 Sb. · Read the law's page
- Compensate any person who suffered material or non-material damage from your infringement, as controller or processor, under GDPR Article 82.
Anonymisation of medical documentation data used for science and researchsince 1 line
Health Services Act (Zákon č. 372/2011 Sb.), §§ 55b and 77a(6) · Read the law's page
- When processing data from medical documentation for science and research, anonymise the data so that the identity of the patient cannot be recognised (section 55b).