Information provided when personal data are obtained (Privacy notice)

  1. Personal Data Controller:
    Člověk v tísni, o.p.s. (People in Need), with its registered office at Šafaříkova 24, 120 00 Prague 2, ID No. 25755277, registered in the Foundations Register maintained by the Municipal Court in Prague, Section O, File 119
    Contact details of the Data Protection Officer: dpo@clovekvtisni.cz
  2. Scope of Personal Data Processed: Please note that the Controller will process the following personal data to the extent necessary: name and surname, address, e-mail address, and telephone number.
  3. Purpose of Processing: The Controller will process the data for the purpose of collecting bids as part of People in Need procurement procedures.
  4. Legal Basis for Processing: The legal basis for processing is:
    • Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR), namely the collection and evaluation of bids and the potential conclusion of an agreement with the selected bidder;
    • Processing is necessary for compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR), namely obligations arising from applicable procurement rules and donor requirements, including the duty to document procurement processes and retain records for audit purposes;
    • Processing is necessary for the purposes of the legitimate interests pursued by the Controller (Article 6(1)(f) GDPR), namely the proper administration of procurement procedures, ensuring transparency, and the ability to respond to audits or resolve disputes related to the tendering process.
  5. Data Retention Period: The Controller will retain the above-mentioned data for a period of seven years. This retention period is required by our donors for audit purposes. We periodically review whether the data is still needed. Once the retention period ends, the data will be securely deleted.
  6. Means of Processing: The processing of personal data is carried out by the Controller.
  7. Data Subject Rights: You have the following rights:
    • The right to request information about which of your personal data the Controller processes;
    • The right to request an explanation from the Controller regarding the processing of your personal data;
    • The right to request access to your personal data, and to request their rectification, update, restriction, or deletion, as applicable;
    • The right to object to the processing;
    • The right to receive your personal data in a structured, commonly used, and machine-readable format, where processing is based on consent or a contract;
    • The right to contact the Controller or lodge a complaint with the Office for Personal Data Protection if you believe the processing of your personal data violates applicable law.