Protection of personal data

Regulation (EU) 2016 / 679 of the European Parliament and of the Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 /ES, also known as the GDPR (General Data Protection Regulation), is a comprehensive set of rules for data protection in the EU. It takes effect on 25 May 2018. In the Czech Republic, it is further specified by Act No. 110 / 2019 Sb., on the processing of personal data.

Pilsenské městské dopravní podniky, a.s. (hereinafter “PMDP”)

Headquarters: Denisovo nábřeží 920 / 12, Východní Předměstí, 301 00 Pilsen

Company ID No.:25220683
VAT No.: CZ25220683

Registered in the Commercial Register maintained by the Regional Court in Pilsen under file number B 710

Data Protection Officer:

Mgr. Martin Chval
email: poverenec@pmdp.cz
cell: +420 724 361 999 +420 724 361 999

For inquiries regarding personal data protection, you may also contact the PMDP helpline at +420 371 655 600 +420 371 655 600 (Mon–Fri 7:00–18:00).

We process your personal data to the extent necessary to provide the specific service you are using from us. All processing is always carried out in accordance with the GDPR and applicable legislation, and only for a predetermined purpose and based on a relevant legal basis. The most common purposes of processing include, but are not limited to:

• maintaining a registry of users of the Pilsenská karta system;
• maintaining a registry of users of the Pilsenská vstupenka system;
• maintaining records of “fare evaders”;
• operating an online store for promotional items;
• issuing newsletters.

In doing so, the company ensures compliance with the fundamental principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, limited storage, integrity, confidentiality, and controller accountability. The rules for processing personal data are defined in the company’s internal guidelines.

PMDP processes personal data that falls into the following categories:

• identification data;
• address data;
• descriptive data;
• data on the use of services;
• data regarding third parties (e.g., a legal guardian in the case of minors).

PMDP does not process special categories of personal data, such as data regarding ethnic origin, political party affiliation, religious affiliation, etc.

We retain your personal data only for as long as strictly necessary and archive it in accordance with the statutory retention periods required by law. We process data for the duration of the contractual relationship or other legal basis. Once the legal basis for processing no longer applies, we destroy or anonymize the personal data. We have strict internal rules in place to verify the lawfulness of retaining personal data, and we do not retain data longer than is necessary for the purpose of processing.

PMDP also processes your personal data to safeguard PMDP’s legitimate interests; such processing does not require the consent of data subjects. We always carefully assess the existence of a legitimate interest.

We process and store the personal data you have provided to us primarily within PMDP. We also collaborate with external processors when processing certain data. We carefully select the entities with which we collaborate based on guarantees that they will ensure the technical and organizational protection of the personal data we transfer to them. Processors may process personal data on behalf of PMDP exclusively on the basis of a personal data processing agreement. Your data is transferred, for example, to the following processors:

• partners of the Pilsenská karta system;
• partners of the Pilsenská vstupenka system (cultural event organizers or ticket sellers);
• the operator of the Pilsenská Karta Clearing Center;
• the provider of municipal ICT services.

Recipients of personal data may also include courts, bailiffs, public authorities, the Czech Police, etc.

PMDP does not transfer data to third countries.

If the processing of personal data is based on your consent to the processing of personal data, you have the right to withdraw this consent at any time.

You have the right to access the personal data concerning you—you have the right to request information regarding whether and to what extent your personal data is being processed by PMDP. The company will provide you with copies or a summary of the personal data being processed.

You have the right to have PMDP correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.

You have the right to have data that you provided to PMDP on the basis of your consent to the processing of personal data erased.

You have the right to have PMDP restrict the processing of personal data in the cases specified by the General Data Protection Regulation. You have the right to object to the processing of personal data concerning you if PMDP processes personal data for the following reasons:

• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in PMDP,
• processing is necessary for the purposes of the legitimate interests of PMDP or a third party,
• for direct marketing purposes,
• for the purposes of scientific or historical research or for statistical purposes.

The rights described above are processed upon your written request and subject to verification of the identification data provided to prevent the disclosure of another person’s data. You may submit this request in person using the prescribed forms at the PMDP Customer Service Center—Denisovo nábřeží12, Pilsen.

If you suspect that your personal data is not being handled in accordance with applicable legislation, you have the right to report this to a PMDP representative at the address listed above. If the situation is not remedied even after that, you are entitled to file a complaint with the supervisory authority, which is

Office for Personal Data Protection:
Pplk. Sochora
2717000Prague7
phone: +420 234 665 111