FORGOT YOUR DETAILS?

 

GDPR

Information on the Processing of Personal Data

The purpose of this document is to inform data subjects and the public that the Institute for the Regulation of Gambling, z.s. (hereinafter also referred to as “IPRH”), fully respects the importance of personal data protection and security. At the same time, IPRH assures data subjects and the public of the lawfulness of its procedures and undertakes to make every effort to protect the privacy of data subjects in accordance with the requirements set out by applicable legislation.

The legal basis for personal data protection is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter also referred to as the “GDPR”), and Act No. 110/2019 Coll., on the Processing of Personal Data.

Who is the controller of your personal data?

The controller of your personal data is the Institute for the Regulation of Gambling (IPRH), registration number (IČO): 07542232, with its registered office at Opletalova 921/6, Nové Město, 110 00 Prague 1, Czech Republic.

The Data Protection Officer is GDPR Solutions a.s., registration number (IČO): 061 00 091, with its registered office at Opletalova 921/6, 110 00 Prague 1, Czech Republic. The Data Protection Officer can be contacted at any time via email at poverenec@iprh.cz

What is your relationship with IPRH?

Legal Basis for the Processing of Your Personal Data

The legal basis for the processing of your personal data is the performance of a contract to which you are a party. In addition, we process your personal data on the basis of obligations imposed on us by law (such as the Civil Code, Labour Code, Accounting Act, etc.). In certain cases, the legal basis may also be the legitimate interest of IPRH – typically for the purpose of protecting legal claims.

Purposes for Which We Process Your Personal Data

  1. Performance of work activities
  2. Human resources administration
  3. Payroll, accounting and tax administration
  4. Protection of IPRH’s legal claims

Who Do We Share Your Personal Data With

Where necessary, your personal data may be shared, to the extent required, with processors or recipients, solely in connection with the purposes of processing listed above. These recipients may include, in particular, public authorities or IPRH suppliers (e.g. external accountants or IT service providers).

Method of Processing

Your personal data may be processed both electronically and in paper form. We do not disclose your personal data to anyone other than the recipients listed above.

Period for Which We Process Your Personal Data

The retention period for personal data is closely linked to the legal basis and purpose of processing. If we process your data on the basis of a legal obligation, the retention period is determined by the relevant legal regulations. Following the termination of the contractual relationship, we no longer process your personal data unless they are subject to statutory processing obligations and related retention periods, or unless further processing is based on our legitimate interest.

Scope of Personal Data Processed

We primarily process your contact details (first name, surname, email address, telephone number, postal code, and city of residence), including additional information necessary for payroll and HR administration as required by law. We also process your personal data in connection with the performance of your work activities (information regarding your job responsibilities and related matters).

Legal Basis for the Processing of Your Personal Data

The legal basis for the processing of your personal data is the performance of a contract concluded between you or the entity you represent and IPRH. We may also process personal data on the basis of our legitimate interest for the purpose of protecting our rights and legal claims (e.g. in the event of disputes).

Purposes for Which We Process Your Personal Data

  1. Conclusion and performance of contracts
  2. Tax and accounting administration
  3. Protection of IPRH’s legal claims

Who Do We Share Your Personal Data With

Where necessary, your personal data may be shared, to the extent required, with processors or recipients solely in connection with the purposes of processing listed above. These recipients may include, in particular, public authorities or IPRH suppliers (e.g. external accountants or IT service providers).

Method of Processing

Your personal data may be processed both electronically and in paper form. We do not disclose your personal data to anyone other than the recipients listed above.

Period for Which We Process Your Personal Data

The retention period for personal data is closely linked to the legal basis and purpose of processing. If we process your data on the basis of a legal obligation, the retention period is determined by the relevant legal regulations. Following the termination of the contractual relationship, we no longer process your personal data unless they are subject to statutory processing obligations and related retention periods, or unless further processing is based on our legitimate interest.

Scope of Personal Data Processed

We process your identification data, in particular your first name, surname, date of birth, company registration number (IČO), telephone number, and email address. We also process payment information, particularly bank account details and information necessary for invoicing and payment processing.

In addition, we process data related to the performance of the contract, such as descriptions of supplies and services, delivery schedules, and other related information.

Legal Basis for the Processing of Your Personal Data

We process your personal data on the basis of our mutual contractual relationship or on the basis of our legitimate interest.

Purposes for Which We Process Your Personal Data

  1. Maintaining the association membership register
  2. Ensuring the operation and functioning of the association

Who Do We Share Your Personal Data With

Where necessary, your personal data may be shared, to the extent required, with processors or recipients solely in connection with the purposes of processing listed above. These recipients may include, in particular, public authorities or IPRH suppliers (e.g. external accountants or IT service providers).

Method of Processing

Your personal data may be processed both electronically and in paper form. We do not disclose your personal data to anyone other than the recipients listed above.

Period for Which We Process Your Personal Data

The retention period for personal data is closely linked to the legal basis and purpose of processing. If we process your data on the basis of a legal obligation, the retention period is determined by the relevant legal regulations. Following the termination of the contractual relationship, we no longer process your personal data unless they are subject to statutory processing obligations and related retention periods, or unless further processing is based on our legitimate interest.

Scope of Personal Data Processed

We primarily process your first name, surname, date of birth, permanent residence address, email address, telephone number, position within the association, and, where applicable, the relevant organisation you represent (in the case of representatives of legal entities).

Legal Basis for the Processing of Your Personal Data

The legal basis for the processing of your personal data is the performance of a contract concluded between you or the entity you represent and IPRH. Personal data may also be processed on the basis of our legitimate interest, particularly for the purpose of protecting our rights and legal claims (e.g. in the event of disputes).

Purposes for Which We Process Your Personal Data

  1. Conclusion and performance of contracts
  2. Tax administration
  3. Communication with partners

Who Do We Share Your Personal Data With

Where necessary, your personal data may be shared, to the extent required, with processors or recipients solely in connection with the purposes of processing listed above. These recipients may include, in particular, public authorities or IPRH suppliers (e.g. external accountants or IT companies).

Method of Processing

Your personal data may be processed both electronically and in paper form. We do not disclose your personal data to anyone other than the recipients listed above.

Period for Which We Process Your Personal Data

The retention period for personal data is closely linked to the legal basis and purpose of processing. If we process your data on the basis of a legal obligation, the retention period is determined by the relevant legal regulations. Following the termination of the contractual relationship, we no longer process your personal data unless they are subject to statutory processing obligations and related retention periods, or unless further processing is based on our legitimate interest.

Scope of Personal Data Processed

Identification data (first name, surname, company registration number – IČO), payment information, and data necessary for invoicing purposes.

Legal Basis for the Processing of Your Personal Data

When visiting our website, your personal data are processed solely on the basis of the controller’s legitimate interest pursuant to Article 6(1)(f) of the GDPR, as our website uses only technically necessary cookies required to ensure the proper display of the website, its security, and basic functionality.

As our website does not use any analytical, marketing, or other non-technical cookies, your prior consent through a cookie banner is not required for visiting the website. Further information regarding individual cookies can be found in the table below.

Purposes for Which We Process Your Personal Data

Only to ensure the functionality and security of the website.

Who Do We Share Your Personal Data With

Your personal data may be shared, to the extent necessary, with our technical partners who assist us in operating our website and related services. Further information regarding cookies is provided in the table below.

Period for Which We Process Your Personal Data

Technically necessary cookies are processed only for the period strictly required for the operation of the website.

Cookies

Cookies are small data files that may be stored on your device when visiting a website. Our website uses exclusively technically necessary cookies, which are essential for the proper and secure operation of the website. We do not collect any data for analytical, personalised, or advertising purposes through cookies.

In accordance with applicable legislation, your prior consent is not required for these necessary cookies.

Technically Necessary Cookies

Cookies used for essential technical purposes ensure the functionality of our website. Without them, we would not be able to ensure its proper operation. Therefore, these cookies may be stored on your device without your consent on the basis of our legitimate interest.

Website Analytics

For anonymous traffic statistics, we use a tool known as a beacon (see below). This tool collects anonymous data only and does not involve the processing of your personal data.

https://www.iprh.cz/wp-content/plugins/koko-analytics/assets/dist/js/script.js?ver=1.0.40

Cookies Used by Our Website

Provider Name Retention Period Type
www.google.com _GRECAPTCHA Duration of website visit Technical
www.iprh.cz PHPSESSID Duration of website visit Technical
www.iprh.cz pmpro_visit Duration of website visit Technical

What Rights Do You Have in Relation to the Processing of Your Personal Data

  1. Right of access to personal data. This right is exercised upon your request. You have the right to ask us whether we process your personal data, which categories of data are processed, the purpose of processing, and the retention period. Upon request, you will be granted access to these data or receive a free copy of the processed data. This right enables you to verify that your personal data are not being processed unlawfully.
  2. Right to accuracy of personal data. As the controller, we are obliged to take measures to ensure that we process accurate and up-to-date personal data. This includes your right to inform us of changes to your personal data that we process.
  3. Right to be forgotten (right to erasure). This right allows you to request the deletion of your personal data and for us to cease storing them, unless another legal basis prevents this. Should such an exception apply, we are obliged to inform you within one month.
  4. Right to data portability. You also have the right to data portability, allowing your personal data to be transferred between different controllers.
  5. Right to object. Under the GDPR, you have the right to object at any time to the processing of your personal data. If you raise an objection, we will cease processing your data until we demonstrate that we have legitimate grounds for processing.
  6. Right to withdraw consent. You have the right to withdraw your consent at any time where the processing of your personal data is based on consent. Once consent is withdrawn, we will stop processing the relevant personal data.
  7. Right to lodge a complaint. Under the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that we have violated data protection legislation in the course of processing your personal data. The competent supervisory authority is the Czech Data Protection Authority (Office for Personal Data Protection), located at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
  8. Right not to be subject to automated decision-making. You have the right not to be subject to a decision based solely on automated processing, including profiling. This right does not apply where such processing is necessary for entering into or performing a contract between you as the data subject and us as the controller. It also does not apply where you have explicitly consented to such processing or where it is authorised by European Union or Member State law applicable to us as controller and such law provides appropriate safeguards for your rights, freedoms, and legitimate interests.

In more complex cases, we may request reimbursement of costs associated with handling your request, particularly where such costs exceed the ordinary scope of our activities.

Institute for Gambling Regulation z.s.

Opletalova 921/6
110 00 Praha 1
IČO: 07542232
Registration with the Municipal Court in Prague File number L 71041

CONTACT

Phone: +420 725 453 380
E-mail: institut@iprh.cz

MENU

© 2023 INSTITUTE FOR GAMBLING REGULATION Z.S.

TOP