Applicant Requesting Information Related to Their Rights under the General Data Protection Regulation (GDPR)

Legal basis for the processing of your personal data:

The processing of your personal data is necessary for general compliance with legal obligations, especially Article 12 of the General Data Protection Regulation (GDPR) and the provisions of Article 11 of Act No. 110/2019 Sb., on the processing of personal data.

The legal basis for the processing in this case is:

• keyword (title): law.

Processed Personal Data 

The range of processed data depends on the specific request. We usually need to process your first and last name, email address and data needed for a verification of your identity.

Your personal data are being processed in order to do the following:

• to ensure the rights of data subjects,
• to communicate with the data subjects,
• to provide evidence of and demonstrate how the rights of data subjects are recognized and responded to by the Prague Public Transit Company (DPP).

Recipients or categories of recipients of Personal Data

Personal data may be passed on to third parties (recipients) only for the purposes referenced above.

The period for which the personal data will be stored and the criteria used to determine this period 

Your personal data are processed for the time period necessary to fulfill the purposes of the processing. The Prague Public Transit Company (DPP) will delete personal data as soon as the purposes of processing cease to exist.

The time period, for which the personal data will be stored is determined on the basis of the following criteria:

• Litigation and other proceedings: Should the processing of your personal data be relevant to any proceedings in which the Prague Public Transit Company (DPP) is a party (or intervener), we will process your personal data for the entire duration of these proceedings and for any related subsequent or ancillary proceedings.
• Legal requirements: Your personal data are processed by the DPP for the entire duration of the period during which DPP may have to respond to legal requests or actions initiated by DPP or by you in relation to the processing of your personal data. 

We store your personal data for a time period of 36 months from the date of our response. 

Processing Method

Personal data is processed both manually and by electronic means.