Protection of personal data

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, or GDPR (General Data Protection Regulation), is a comprehensive set of rules for data protection in the EU. It came into effect on May 25, 2018. In the Czech Republic, it is specified by Act No. 110/2019 Coll. on the processing of personal data.

Pilsenské městské dopravní podniky, a.s. (hereinafter referred to as PMDP)

Registered office: Denisovo nábřeží 920/12, Východní Předměstí, 301 00 Pilsen

Company ID: 25220683
Tax ID: CZ25220683

registered in the Commercial Register maintained by the Regional Court in Pilsen under file number B 710

Personal Data Protection Officer:

Mgr. Martin Chval
e-mail: poverenec@pmdp.cz
mobile: +420 724 361 999 +420 724 361 999

For inquiries regarding personal data protection, you can also use the PMDP info line at +420 371 655 600 +420 371 655 600 (Mon-Fri 7:00 a.m.-6:00 p.m.).

We process your personal data to the extent necessary to provide the services you use. All processing is always carried out in accordance with the GDPR and applicable legislation, and only for a predetermined purpose and on a relevant legal basis. The most common purposes of processing include, but are not limited to:

• keeping records of users of the Pilsenská karta system;
• keeping records of users of the Pilsen Ticket system;
• keeping records of "fare dodgers";
• operating an e-shop for promotional items;
• issuing newsletters.

In doing so, the company ensures compliance with the basic principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability of the controller. The rules for the processing of personal data are defined in the company's internal guidelines.

PMDP processes personal data that falls into the following categories:

• identification data;
• address data;
• descriptive data;
• data on the use of services;
• data on third parties (e.g., legal representatives in the case of minors).

PMDP does not process special categories of personal data, such as data on ethnic origin, political party affiliation, church affiliation, etc.

We only store your personal data for as long as is necessary and archive it in accordance with the statutory periods imposed on us by law. We process data for the duration of the contractual relationship or other legal basis. Once the legal reason for processing has ceased to exist, we destroy or anonymize the personal data. We have strict internal rules in place to verify the legality of personal data retention, and we do not retain data for longer than is necessary for the purpose of processing.

PMDP also processes your personal data to ensure the protection of PMDP's legitimate interests, and such processing does not require the consent of the data subjects. We always carefully assess the existence of a legitimate interest.

We process and store the personal data you have provided to us mainly within PMDP. We also cooperate with external processors when processing certain data. We carefully select the entities that cooperate with us based on guarantees that they will ensure the technical and organizational protection of the personal data we transfer. Personal data may be processed for PMDP by processors exclusively on the basis of a personal data processing agreement. Your data is transferred, for example, to the following processors:

• partners of the Pilsenská karta system;
• Pilsenská vstupenka system partners (cultural event organizers or sellers);
• the operator of the Pilsenská karta clearing center;
• the provider of municipal ICT services.

Recipients of personal data may also include courts, bailiffs, public authorities, the Czech Police, etc.

PMDP does not transfer data to third countries.

If the processing of personal data is based on your consent to the processing of personal data, you have the right to withdraw this consent at any time.

You have the right to access personal data concerning you – you have the right to request information on whether and to what extent your personal data is processed by PMDP. The company will provide you with copies or extracts of your personal data processing.

You have the right to have PMDP correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

You have the right to erase data that you have provided to PMDP on the basis of consent to the processing of personal data.

You have the right to have PMDP restrict the processing of personal data in cases specified by the General Data Protection Regulation. You have the right to object to the processing of personal data concerning you if PMDP processes personal data for the following reasons:

• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in PMDP,
• processing is necessary for the purposes of the legitimate interests pursued by PMDP or a third party,
• for direct marketing purposes,
• for scientific or historical research purposes or for statistical purposes.

The rights described above are handled upon your written request and after verification of the identification data provided to prevent access to the data by another person. The request can be submitted in person on the prescribed forms at the PMDP customer center – Denisovo nábřeží 12, Pilsen.

If you suspect that your personal data is not being handled in accordance with applicable legislation, you have the right to notify a PMDP representative at the above address. If the situation is not remedied, you are entitled to file a complaint with the supervisory authority, which is

Office for Personal Data Protection:
Pplk. Sochora 27
170 00 Prague 7
telephone: +420 234 665 111