česky  hrvatski 

prošireno traženje
upozorenje na članak štampati Decrease font size Increase font size

Information on the Processing of the Personal Data Obtained Through the “D&B Hoovers” Database

In compliance with Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”), the Ministry of Foreign Affairs provides the following information on the processing of personal data obtained through the “D&B Hoovers” database (the “Database”).

The Ministry of Foreign Affairs of the Czech Republic (the “MFA”) was established by Act No 2/1969 concerning the establishment of ministries and other central government authorities of the Czech Socialist Republic as amended. According to Section 6(1) of this act, the MFA is a central government authority responsible for the area of foreign policy. It creates foreign policy concepts, coordinates foreign development assistance, coordinates external economic relations, takes part in negotiations on international sanctions, and coordinates the Czech Republic's positions relating to such sanctions.
 

Within the limits of its competence, the MFA makes provisions for the fulfilment of tasks relating to bilateral economic and trade relations and provides support for  Czech enterprises and their trade and economic interests in the area of external economic relations, namely in establishing contacts and obtaining information on foreign markets and business opportunities. The MFA takes part in promoting foreign investment, namely by assisting with specific investment projects. To this end, the MFA works closely with the relevant organisations, institutions and business associations (namely CzechTourism, CzechTrade, CzechInvest, Czech Export Bank, Export Guarantee and Insurance Corporation, Czech Chamber of Commerce, Confederation of Industry of the Czech Republic, Association of Exporters).    

Within the MFA, the personal data contained in the Database are processed by the Economic Diplomacy Department. The processing is necessary for the performance of a task carried out in the exercise of official authority as foreseen in Article 6(1)(e) of the GDPR.  

 

Contact details of the MFA

Address

Czernin Palace
Loretánské nám. 101/5
118 00 Praha 1 - Hradčany

Electronic registry  

epodatelna@mzv.cz

Central telephone number

+420-224-181-111

Data mailbox

e4xaaxh

Contact details of the Economic Diplomacy Department

E-mail

oed@mzv.cz

Telephone

+420 224-182-592

Contact details of the MFA Data Protection Officer

First name, surname

Alice Marie Svobodová

E-mail

poverenec@mzv.cz

Telephone

+420-224- 182-335

     

 
The Database contains data on foreign trade and business entities. The data are actively collected by the MFA and Czech diplomatic missions for the purposes stated above. The personal data are processed by authorised staff of the Economic Diplomacy Department and they are not disclosed to any other persons or entities. 

The Database contains the following:

Identification data

  • First name/surname
  • Business ID
  • Registered office


Contact data

  • E-mail
  • Telephone number


Other

  • Company name
  • Basic financial information on the company.


The Database does not contain any special categories of personal data.

The data received through the Database are processed throughout the period for which the contract with the Database provider is in force, unless the data subject objects to the processing

The personal data contained in the Database are provided by Bisnode D&B Česká a Slovenská republika, s.r.o., business ID 45806314, registered office address: Siemensova 2717/4, Praha 5. Additional information on Bisnode D&B Česká a Slovenská republika, s.r.o. and on the processed data is available at www.bisnode.cz/privacy.

 

On the basis of the GDPR, data subjects may exercise the following rights. The rights may be invoked by contacting the Economic Diplomacy Department (see contact details above). The Economic Diplomacy Department may also be contacted with any inquiries concerning the processing of personal data. 

Rights of data subjects

 What do the rights mean?

 

Right to be informed (Article 14 of the GDPR)

To ensure transparency of processing, the data controller must inform the data subject about the processing of the data subject's personal data. To comply with this obligation, the MFA publishes on its website information on the processing of the personal data obtained through the “D&B          Hoovers” and “D&B OnBoard” databases

Right of access  (Article 15 of the GDPR)

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If that is the case, the data subject has the right to receive such personal data and information concerning the processing

Right to rectification (Article 16 of the GDPR)

The data subject has the right to correction of inaccurate personal data and/or completion of incomplete personal data

Right to erasure (Article 17 of the GDPR)

The data subject has right to erasure of personal data concerning him or her on the grounds listed in the GDPR

Right to restriction of processing (Article 18 of the GDPR)

The data subject has the right to request the controller to restrict the processing of personal data. This means that personal data may be stored but must not be used or processed.

The data subject has this right in the following cases listed in the GDPR: 

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of personal data
  • The processing is unlawful and the data subject opposes the erasure of personal data and requests the restriction of their use instead
  • The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defence of legal claims
  • The data subject has objected to the processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override the interests or rights and freedoms of the data subject

Right to object (Article 21 of the GDPR)

In cases where personal data are processed for the purpose of performance of a task carried out in the exercise of official authority as foreseen in Article 6(1)(e) of the GDPR, the data subject has the right to object to such processing at any time.

Right to lodge a complaint with a supervisory authority (Article  77 of the GDPR)

The data subject has the right to contact the Office for Personal Data Protection and lodge a complaint concerning actions of the data controller relating to the protection of personal data (www.uoou.cz).