- Company profile
- Organisational structure
- DPP Data Summary
- History
-
Personal Data
- DPP Employees
- Job Applicants
- Passenger with a Lítačka Card
- Passenger with a Paper Ticket (coupon)
- Requesting a Refund
- Passenger Fined by Inspectors
- DPP – Receivables
- Fanshop Customers
- Tram Rental and Adventure Tourism Clients
- Purchased Goods Comlaints
- Camera Records
- Tram and buses camera records
- Cookies
- Requesting Information in Relation to Act No. 106/1999 Sb.
- Applicant Requesting Information Related to Their Rights under the General Data Protection Regulation (GDPR)
- Processing of Personal Data Provided through the Company’s Contact Form
- Key Terms of the General Data Protection Regulation (GDPR)
- Your Rights
- Press news
Your Rights
Right to Information (pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR))
You have the right to information about how your personal data are being processed. You can find this information in this document.
Right of Access (pursuant to Article 15 of the General Data Protection Regulation (GDPR))
You have the right to obtain confirmation from the Prague Public Transit Company (DPP) as to whether or not are your personal data processed; and, if they are, you have the right to access your personal data.
You have the right to obtain a copy of the processed categories of your personal data DPP may charge you a reasonable fee for multiple copies based on the related administrative costs.
Right to rectification (pursuant to Article 16 of the General Data Protection Regulation (GDPR))
You have the right to obtain the rectification of your inaccurate personal data without undue delay. Taking into account the purposes of the processing, you have the right to have your incomplete personal data completed.
Right to Erasure –the Right-to-be-Forgotten (pursuant to Article 17 of the General Data Protection Regulation (GDPR))
You have the right to have the Prague Public Transit Company (DPP) delete your personal data without undue delay if one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
(c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
(d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(f) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
Your right to erasure, which has been specified above in this paragraph, does not apply if the processing of your personal data is necessary for any of the following:
(a) for exercising the right of freedom of expression and information;
(b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(c) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3);
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(e) for the establishment, exercise or defence of legal claims.
Right to Object (pursuant to Article 21 of the General Data Protection Regulation (GDPR))
On a grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions you have the right to object. DPP shall no longer process the personal data unless the DPP demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. If your personal data are being processed for direct marketing purposes, your personal data will no longer be processed for this purpose.
Right to Lodge a Complaint with a Supervisory Authority (pursuant to Article 77 of the General Data Protection Regulation (GDPR))
You have the right to lodge a complaint with the supervisory authority, which is the Úřad pro ochranu osobních údajů (ÚOOÚ), located at the address: Pplk. Sochora 27, 170 00 Prague 7.
Personal Data Breach Communication
(pursuant to Article 34 of the General Data Protection Regulation (GDPR))
When the personal data breach is likely to result in a high risk to your rights and freedoms, DPP shall communicate the personal data breach to you without undue delay.
The Prague Public Transit Company (DPP) has appointed a Data Protection Officer (DPO) to oversee compliance with its legal obligations and abovementioned data protection principles. You can contact the Prague Public Transit Company (DPP)’s Data Protection Officer in the following ways.
Mgr. Lukáš Hermanovský
- In writing (paper contact): Sokolovská 42/217, 190 00 Prague 9
- DPP (Prague Public Transit Company) data box: fhidrk6
- By filling out this contact form on the topic of "Personal Data"
- In person (direct contact) for access to data – reception (service desk) at the registered office of the administrator during office hours.
Filings submitted other than by data box or in person must include your date of birth in order to properly identify you (so that your personal data are not provided to any unauthorized party). Common example might be a situation in which someone with the same name as yours would try to access thepersonal data. The obligation to identify the applicant is in accordance with the provisions of Article 12 (6) of the General Data Protection Regulation (GDPR).
Changes to this Information
Please note that despite the Prague Public Transit Company (DPP)’s striving to maintain a consistent high level of protection of your personal data, it is possible that this information may be updated or changed in the future. In such a situation, the processing of personal data will always be governed by the latest information. Please keep yourself informed of the processing procedures. Thank you.