CYIA Processing of Personal Data

• The legal basis for processing certain personal data is the legitimate interest of the organiser in ensuring the efficient organization and evaluation of the Award, including the necessary record-keeping of registered participants.
• The legal basis for processing certain personal data are the legal obligations of the organizer, where the organizer processes personal data of the participants to comply with legal obligations to which it is subject. This includes (i) complying with applicable laws and regulations, (ii) responding to lawful requests and legal processes, (iii) ensuring compliance with our terms and conditions and other legal obligations.
• The legal basis for the processing of certain personal data of the participants, in particular in the case of records of appearance (photographs, video recordings—training, lectures, seminars, etc.) or voice recordings of the participant (audio recordings), is the consent of the relevant participant.

1. performance of the organiser’s obligations while ensuring smooth organisation of the award and compliance with statutory provisions,
2. accounting and tax agenda,
3. internal records of activities, including budget management and resource allocation,
4. protection of the organiser’s property and intellectual property and monitoring of compliance with legal regulations, including the compliance with ethical principles,
5. transparent communication with the participants, jury, public authorities, and business partners, as well as with other CLARA partners,
6. announcement of results, presentation of the outcomes of the Award.

The organiser provides personal data to the following categories of recipients:

1. external providers of accounting and tax advisory services,
2. administrative authorities and bodies on the basis of relevant legal regulations or in accordance with their binding decisions,
3. auditing and accounting companies, IT providers, banking institutions, insurance companies, law firms, congress agencies and travel agencies, companies providing support services,
4. CLARA partners.

Personal data will be processed and retained for the period necessary under applicable law and only for the period necessary to fulfil the above-mentioned purpose.

Personal data processed on the basis of the organiser’s legitimate interests are processed only for the duration of the given purpose.

Personal data processed for the purpose of performance of legal obligations are processed for a period stipulated by the applicable generally binding legal regulations, especially Act No. 563/1991 Coll., on Accounting, as amended, Act No. 586/1992 Coll., on Income Taxes and etc.

Personal data processed on the basis of the participant’s consent are processed until the recall of the consent.

If no such period exists, personal data will be processed and retained for a period of 10 years from the termination of this agreement.

In accordance with GDPR, participants have the right to:

• request information about what personal data are processed,
• request access to their personal data and have it corrected or updated,
• request clarification regarding the processing of their personal data,
• request the erasure of their personal data if the purpose for processing no longer applies or if the data was processed unlawfully,
• object to the processing of their personal data,
• lodge a complaint with a supervisory authority. For questions or to exercise your rights, please Evropská 2758/11, Dejvice, 160 00 Praha 6 or at email address: info@indrc.com.

The supervisory authority in the Czech Republic is:

Úřad pro ochranu osobních údajů

Pplk. Sochora 27, 170 00 Prague 7, Website: www.uoou.cz

The personal data of participants may be disclosed to third parties in order to fulfil legal obligations related to the administration, reporting, auditing, and oversight of the public grant funding this award. Such recipients may include EU-based public authorities, such as the European Research Executive Agency (REA) or the Czech Ministry of Education, Youth and Sports.

In processing of participants’ personal data, the organiser may transfer the personal data to persons with their registered office in the European Union or in third countries. For cases of transfer of personal data to third countries that are not subject to the European Commission’s adequacy decision, the organiser has adopted all the necessary measures and guarantees to ensure an adequate level of protection of the personal data as required by the applicable laws of the Czech Republic, specifically by using standard contractual clauses on personal data protection.

By ticking any number of boxes below, the participant consents to the processing of the relevant personal data listed below. The provider understands that the provision of consent is not an obligation of the participant, does not affect any other rights and the participant may withdraw consent at any time, but such withdrawal will not affect the lawfulness of the processing of personal data based on such consent for the period prior to such withdrawal, but no longer than 5 years of granting of the consent. The principal will process the participant’s personal data for these purposes until the consent is withdrawn.

• • • Use of photographs, audio and/or visual recordings for communication purposes, through communication media (including hard copy in internal communication systems), in particular INDRC and CLARA email, internet and social networks (platforms LinkedIn, INDRC and CLARA web site or others) in the case of communication of photographs of local or international activities, or in the context of internal announcements.
    • Use of photographs, audio and/or visual recordings for internal and external communication purposes, through communication media including printed form.