In relation to its mission and activities EIFlexi processes personal data of:
‍
1. Participants in educational and other events – including their name, surname, work mobile phone number, e-mail address, (and in the case of specific events, ID number) for the purpose of invoicing where the legal title of the processing is the fulfilment of the contract under Article 6 (1) b) GDPR. The legal reason for processing is the fulfillment of a legal obligation Article 6 (1) c) of the GDPR, (Section 178b (4) of Act No. 326/1999 Coll., on the Residence of Foreigners, and Section 98 of the Employment Act in accordance with Resolution of the Government of the Czech Republic No. 962 of 24 November 2014).

2. Website visitors – network identifiers called cookies. This information is anonymous (e.g., the type of browser, domain name of the Internet connection provider). The purpose of the processing is to improve (analytical cookies) and ensure the correct functioning of the website (essential cookies). The legal reason for the processing is considered a legitimate interest according to Article 6 (f) of the GDPR.

3. Visitors to the headquarters and relocated workplaces – identification data: name, surname, ID number. The purpose of the processing is to ensure health and safety. The legal reason for the processing is to fulfil a legal obligation pursuant to Article 6 (1) c), which is a legitimate interest under Article 6 (f) of the GDPR.

The purpose of personal data processing may also include direct marketing/sending commercial messages, where the commercial message is sent to an e-mail address only based on prior consent (Article 6 (1) a) of the GDPR). The possibility to withdraw consent and refuse being sent commercial messages is possible at any time.

Personal data is processed only for the stated legal purposes and will be kept for a period that does not exceed the time necessary to fulfil the purpose for which it is collected and processed. The security, inviolability and confidentiality of personal data is ensured by the implementation of adequate security technical and organizational measures. Personal data are not sold or otherwise provided to commercial entities.

Any further processing of personal data for reasons other than those listed above takes place based on the consent of the data subject (e.g., taking photos and publishing them in the media, and on social media).
‍
Personal data are processed directly by EIFlexi.

The processing of personal data takes place in technically and physically secured electronic information systems.

Personal data may be transferred for processing within the European Union, or within the European Economic Area (e.g., within the framework of activities conducted by EIF, a. s., etc.). Under certain conditions, personal data may be made available to state authorities (courts, the police, notaries, financial authorities or other entities in the exercise of their legal powers to the extent set by special legal regulations).

The personal data subject has the right to ask EIFlexi for access to their personal data, the right to have it corrected, deleted or its processing restricted, as well as to raise objections to its processing and the right to its portability, if this does not conflict with the purpose of processing.

Data subjects also have the right to withdraw their consent in cases where the processing is carried out based on consent. In the processing of personal data by EIFlexi, personal data are not used for decision-making purely based on automated processing, nor profiling.

Contact information of the personal data manager:
‍
EIFlexi, s. r. o.
Ing. Kateřina Hamzová
Za Strahovem 339/20,
169 00 Praha 6-Břevnov
IČO: 27678849
hamzova@eiflexi.cz
‍
The data subject has the right to file a complaint with the Office for Personal Data Protection, with its registered office at Plk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz.

These personal data protection policies are regularly reviewed and EIFlexi reserves the right to change them if necessary.