Privacy Policy

Privacy Notice – Personal Data Processing

Contents:
I. Basic Information
II. Information and Access to Personal Data
III. Data Subject Rights
IV. Security and Confidentiality of Personal Data

I. Basic Information

Identity and Contact Details of the Controller

The controller of your personal data is Pražský kulturní a filmový institut s.r.o.,
registered at Malostranské náměstí 266/5, 110 00 Prague 1 – Malá Strana, Czech Republic.
Company ID: 25787527 | VAT ID: CZ25787527
Tel.: +420 222 710 187| E-mail: info@praguefilminstitute.cz
(hereinafter referred to as the “Controller”).

Purposes and Legal Bases for Processing Personal Data

We process your personal data for the following purposes:

1. Study applications – to register and process your application, and to conclude and perform the contract for the selected study program or course.
2. Lecture and workshop registrations – to process your registration and attendance.
   • If the event is recorded, your data may also be used for creating audio or video recordings, which can be published for presentation and promotional purposes.
3. Information requests and newsletters – to respond to your inquiries or requests, and, where relevant, for sending information about our activities and marketing communications.
4. Contractual and legal obligations – to meet legal requirements such as bookkeeping, tax obligations, visa support, or health insurance arrangements.
5. Legitimate interests – to promote our activities, protect our rights and property, ensure IT and network security, prevent fraud, and for historical, statistical, and scientific purposes, always in a transparent and proportionate manner.

Recipients of Personal Data

Your personal data may be shared with:

• State authorities of the Czech Republic (e.g., Ministry of the Interior, Ministry of Education, Police of the Czech Republic),
• Visa agencies, insurance companies, and contractual partners involved in study arrangements or program delivery,
• Business partners assisting with the organization, promotion, and provision of our services,
  and always only to the extent necessary for the given purpose.

Transfers to Third Countries

We do not intend to transfer your personal data outside the EU.
If required, selected data are shared only with the educational accreditation agency based in the United Kingdom.

Categories of Personal Data Processed

We process, in particular:

• Name, surname, academic titles, photograph, residential address, nationality, ID/passport details, phone number, e-mail address,
• Data provided in your application or request and during your studies (results, documents, course outputs, and student work),
• Audio, photo, or video recordings taken during studies or events,
• Health questionnaire data (only for health insurance purposes).

Please provide accurate and up-to-date data, and inform us of any changes to ensure proper processing.

Data Retention Period

• For the duration of the contract and at least 3 years thereafter,
• 5–10 years for legal obligations,
• 3 years for legitimate interests (longer in case of disputes),
• Course materials and outputs may be stored longer for historical, statistical, or scientific purposes.

Voluntary vs. Mandatory Provision of Data

Providing your data is voluntary, but necessary for concluding and performing the contract (study application, course, program, lecture attendance).
Without these data, the contract cannot be concluded and services cannot be provided.

In some cases, the law requires you to provide certain personal data (e.g., for registration in accredited programs, diploma issuance, visa, or health insurance).
You will be informed of such cases separately.

II. Information and Access to Personal Data

You have the right to:

• Access your personal data,
• Request their rectification or erasure,
• Request restriction of processing,
• Object to processing,
• And exercise your right to data portability.

If you no longer wish for your data to be processed, wish to withdraw your consent, or have any other questions, contact us at: info@praguefilminstitute.cz. You also have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ).

III. Data Subject Rights in Detail

Right of Access
You can request confirmation of whether we process your personal data. If we do, you may access them and obtain a copy, along with related information such as the purpose, duration, recipients, sources, and your rights.

Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Please notify us of any inaccuracies.

Right to Erasure (“Right to be Forgotten”)
You may request deletion of your personal data if they are no longer needed, if you withdraw consent (where applicable), or if the data were processed unlawfully.

Right to Restriction of Processing
You can request limitation of processing, for example, if your personal data are inaccurate or processing is unlawful.
We will inform recipients of any rectification, erasure, or restriction.

Right to Data Portability
You may request to receive your personal data in a structured, commonly used, machine-readable format, and have them transmitted to another controller under legal conditions.

Right to Object
You may object to processing based on our legitimate interests.
Processing will stop unless we demonstrate compelling legal grounds that override your interests or for the establishment, exercise, or defense of legal claims.

We do not make any automated decisions producing legal effects on you.

IV. Security and Confidentiality of Personal Data

Personal data are stored:

• Electronically on secure storage, and
• Physically in printed form.

Access to all personal data, whether in electronic or physical form, is strictly limited to authorized personnel directly involved in fulfilling the purpose of the processing.

We implement appropriate technical and organizational measures to protect against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

If a personal data breach occurs and is likely to present a high risk to your rights and freedoms,
we will notify you without undue delay.