Terms and Conditions of Protection of Personal Data - studies
pursuant to Regulation No 2016/679 of the European Parliament and of the Council (EU) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (hereinafter referred to as GDPR)
Personal Data Administrator: CEMI MBA Studies s.r.o., with its registered office at Mezi Vodami 639/27, Modřany, 143 00 Prague 4, ID No: 24133311, entered with the Municipal Court in Prague, Section C, File 181632, email: info@cemi.cz, web: www.cemi.cz (hereinafter referred to as "Company" or "Administrator").
PREAMBLE
These terms and conditions contain information on the processing of personal data delivered to the administrator in the context of a study contract and study itself. They do not apply to the processing of personal data on the basis of consent, and do not apply to the processing of personal data in the communication of the administrator study applicants and other persons.
I. STUDIES
1. As the administrator of your personal data, we are responsible for their protection and we undertake to process them with appropriate technical and organizational security. If they are handed over to us in the framework of concluding a study contract and study itself, we always process them under the conditions below.
2. The purpose, legal basis of the processing, and processing time of your personal data is as follows:
a) purpose: conclusion of a study contract and fulfilment of contractual or legal obligations related to the provision of educational services; legal basis: performance of the contract (pursuant to Article 6 (1) (b) of GDPR); processing time: 3 years from graduation,
(b) records of graduates for the purpose of verifying graduation and the issuing related certificates, issuing duplicate diplomas, etc.; legal reason: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 40 years from graduation,
(c) records of graduates for the purpose of establishing their position on the market in connection with the verification of the practical use of the education provided by the Institute, legal reason: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 40 years from graduation,
(d) purpose: presentation of educational activities - building the reputation of the Institute through the acquisition and publication of photo and video documentation; legal reason: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 10 years from graduation,
(e) purpose: direct marketing - offering related educational services, in particular in the form of communications via e-mail (pursuant to Section 7 of Act 480/2004 Coll., o některých službách informační společnosti), legal reason: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 3 years from graduation.
(f) purpose: archiving accounting documents on the basis of the obligation arising from accounting legislation; legal title: fulfilment of legal obligation (pursuant to Article 6 (1) (c) of GDPR); processing time: determined by the applicable legal regulation,
g) purpose: ensuring IT and network security of processing, legal basis: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 3 years.
h) purpose: potential enforcement of legal claims under a contract or related legal dispute; legal basis: legitimate interest (pursuant to Article 6 (1) (f) of GDPR); processing time: 3 years.
3. You are under no obligation to provide us with personal information, but it is a condition for the execution of the order (conclusion of the contract) - processing will be done for contractual reasons.
4. In the processing of personal data, we may transmit your personal data to the following processors and recipients:
- software providers - to facilitate the operation of the e-shop and ensure its technical security (server hosting, e-mail hosting, cloud-hosting, CRM system or EPR system, office applications, etc.),
- backup servers and other hardware providers - in order to ensure the proper operation of the e-shop and the protection and availability of related data,
- accounting office - for the purpose of keeping an accounting agenda and the related archiving of tax documents,
- tax advisor, auditor, law firm for advice on the operation of the e-shop,
- collection agencies - for collection of company receivables,
- the bank to receive the payment,
- state administration bodies in cases provided for by law,
all according to the current needs and to the extent necessary for organizational and technical provision of the proper operation of the Institute.
5. In order to express your opposition to the processing of your personal data as well as the exercise of any other rights you may have against us during processing, please use this address at info@cemi.cz.
II. YOUR RIGHTS
While we process your personal information, you have the right to:
- ask the company for information about what personal data they are processing,
- ask the company for an explanation regarding the processing of your personal information,
- request access to your personal data and update or correct them,
- request the company to erase your personal data, or restrict their processing,
- transfer your personal information to another administrator,
- to object to the processing of your personal data due to a legitimate interest of the company (see Article I (2) (c), (d) and (e) and Article II (2) a), b),
- to withdraw from commercial communication pursuant to Section 7 of Act 480/2004 Coll., o některých službách informační společnosti
To apply the above claims, please email: info@cemi.cz. In case of any doubt whether we process your personal data properly - according to applicable legal regulations, you may also contact the Office for Personal Data Protection.