Information on the Processing of Personal Data of Users of the Bakala Foundation Student Hub, Operated by The Bakala Foundation
The Bakala Foundation consistently processes personal data in compliance with applicable laws, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) (hereinafter referred to as the “Regulation”) and other legislation governing the handling of personal data.
The data controller is Nadace The Bakala Foundation, Company ID (IČ): 27921247, with its registered office at Tržiště 366/13, 118 00 Prague 1 – Malá Strana, registered in the Register of Foundations maintained by the Municipal Court in Prague, Section N, File 646 (hereinafter referred to as “BF”), email: email@example.com, website: https://www.bakalafoundation.org/.
The Bakala Foundation Student Hub
The Bakala Foundation Student Hub (hereinafter referred to as the “Hub”) is a shared space at the BF headquarters that serves as a place for high school and university students to study, work on joint non-commercial projects, and perform other, nonprofit education-related activities.
The data subject is any Hub user (hereinafter referred to as the “User”).
Scope of Processed Data
BF processes the personal data provided by the User via the registration form available at https://forms.gle/i6Ekbt9DKGwGDwL76 on the BF website. Personal data processed include:
- Common personal data: first and last name, permanent address, date of birth, email address, name and address of the school and, further, in connection with electronic access to the BF website, IP address and cookies.
Purpose of Data Processing and Legal Grounds for Processing
Users’ personal data are processed for the purpose of reviewing their Hub membership application, monitoring their use of the Hub, distributing messages on the Hub’s operating terms and changes thereto, and providing information about the program and upcoming events at the Hub.
The processing of personal data is based on the legitimate interest of BF as the Hub operator. BF’s interest is to use the information about the Users to plan the Hub’s program and to optimize the services provided to the Users.
The processed personal data are obtained directly from the User including, but not limited to, via the registration form and through subsequent communication with the User.
Disclosure of Data to Other Persons
Personal data may be disclosed to entities authorized under special legislation (e.g. law enforcement authorities, etc.) and persons in the position of BF’s data processors with whom BF cooperates in the course of its activities.
Such persons may include (without limitation): software service providers, Fondation Zdenek et Michaela Bakala in Geneva, Switzerland (sponsor of the Hub operation), Wratislaw Palace, s.r.o. (the company managing the building where the Hub is located).
The period for which the User agrees to the processing of personal data and personal data storage
The User grants BF his or her consent to the processing of personal data for the period during which he or she will be using the services of the Hub, and for a period not exceeding five (5) years from the last use.
Why Users’ personal data are necessary for BF
Providing the User’s personal data is a necessary condition for the use of Hub services, so it is a contractual requirement.
Additional information about rights related to personal data processing
Pursuant to the Regulation, the User has the following rights (without limitation):
Right of access to personal data: The User has the right to obtain confirmation from BF as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.
Right to rectification and erasure or to restriction of processing: The User has a limited right (as set out by the Regulation) to ask BF for rectification or completion of inaccurate or incomplete personal data, respectively, to request the erasure of personal data if the reason for their processing has expired or does not exist, or to request the restriction of personal data processing in connection with disputing the circumstances of personal data processing with BF.
Right to object: The User has the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on the legitimate interests of BF or other persons (pursuant to the Regulation); the legitimate interests under the Regulation include, without limitation, protection of BF’s rights and claims.
Right to data portability: The User has the right (under the conditions set out in the Regulation) to receive from BF the personal data concerning him or her and the right to transmit those data to another controller.
How these rights can be exercised: The User may at any time exercise his or her rights arising from the processing of personal data by contacting BF at its postal address or by email at the address provided above.
Right to lodge a complaint with the supervisory authority: On any matter relating to personal data processing, the User shall have the right to lodge a complaint with the supervisory authority if he or she believes that the processing of personal data concerning him or her has breached the Regulation. The relevant supervisory authority is the Office for Personal Data Protection, with its registered office in Prague, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, email: firstname.lastname@example.org, tel.: +420 234 665 111.