Information regarding the method of personal data processing is compulsorily published on the website of the LAA ČR
Basic information about the personal data manager
Light Aircraft Association of the Czech Republic (hereinafter referred to as "LAA ČR") as the controller of personal data of natural persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data on the free movement of such data and cancellation directive 95/46/EC (general regulation on the protection of personal data) takes care of the legality, correctness and transparency of the processing of personal data of natural persons established by the regulation.
Contact details of the personal data protection officer
The personal data protection officer of the LAA ČR is Ing. Jiří Rybář The personal data protection officer can be contacted at the email address: poverinec@laacr.cz.
Method of personal data processing
Personal data of natural persons are processed for the purposes of registering members of the LAA CR and for purposes defined by law or other directly applicable regulations of the European Community.
Personal data of natural persons is obtained on the basis of applicable legal regulations, to the extent set out here. The processing of personal data at LAA ČR takes place mainly on the basis of the legal titles defined in Article 6 paragraph 1 letter a) b), c), e) regulation on personal data protection. In the event of any further processing of personal data for a purpose other than that resulting from applicable legal regulations, or where the scope of processed personal data exceeds the limits set by law, especially data related to membership in the LAA ČR, the LAA ČR requires demonstrable consent of the data subject to the processing.
Personal data of natural persons is obtained on the basis of applicable legal regulations, to the extent set out here. The processing of personal data at LAA ČR takes place mainly on the basis of the legal titles defined in Article 6 paragraph 1 letter a) b), c), e) regulation on personal data protection. In the event of any further processing of personal data for a purpose other than that resulting from applicable legal regulations, or where the scope of processed personal data exceeds the limits set by law, especially data related to membership in the LAA ČR, the LAA ČR requires demonstrable consent of the data subject to the processing.
Authorization of data subjects
1. The right to withdraw consent to processing
In cases where the processing of personal data takes place on the basis of consent, the data subject is entitled to revoke this consent at any time. However, revocation of consent does not affect the legality of processing based on consent that was given before its revocation.
In cases where the processing of personal data takes place on the basis of consent, the data subject is entitled to revoke this consent at any time. However, revocation of consent does not affect the legality of processing based on consent that was given before its revocation.
2. Right of access to personal data
Every natural person has the right to obtain confirmation from the LAA of the Czech Republic as to whether personal data concerning him or her are being processed or not. If they are processed, everyone has the right to receive the following information: purpose of processing, categories of personal data, recipients or categories of recipients to whom personal data have been or will be made available, planned period for which personal data will be stored, existence of the right to request correction or erasure of personal data from the administrator data relating to the subject or restriction of their processing, or the right to raise an objection, the right to file a complaint with a supervisory authority, the right to information about the source of personal data, if they are not obtained from the subject.
3. Right to repair
The data subject has the right to demand that the LAA ČR correct inaccurate personal data concerning him without undue delay. Likewise, the data subject has the right to request completion of incomplete personal data.
4. Right to erasure
Data subjects are entitled to request the erasure of their personal data in cases specified by the regulation. The reasons for the deletion are given in Article 17, paragraph 1 of the regulation. From the point of view of the data subject, however, the fact that this right does not have an absolute effect plays a significant role. Indeed, the regulation itself, in the provision of Article 17, paragraph 3, lists several exceptions that make the deletion of personal data impossible. These are cases where the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation that requires processing under Union or Member State law to which the controller applies, or for the fulfillment of a task carried out in the public interest or in the performance public authority to which the administrator is entrusted, also for the purposes of archiving in the public interest, for the determination, exercise or defense of legal claims. In this context, it is therefore necessary to approach the right to request erasure with caution, as the substantial majority of agendas in which personal data are processed at LAA ČR are conducted for the above-mentioned reasons. Therefore, if, as part of the assessment of the subject's request for deletion of personal data, the LAA ČR concludes that any of these exceptions are applicable, the subject's right to deletion will not be possible.
5. The right to restrict processing
The data subject has the right to have the LAA ČR limit the processing, especially if the data subject denies the accuracy of the personal data and for the time required to verify the accuracy of the personal data, if the processing is unlawful and the subject requests a restriction of their use instead of deletion, if the administrator does not need them for processing purposes.
6. The right to object
The data subject has the right, for reasons relating to his specific situation, to object at any time to the processing of personal data concerning him, on the basis of Article 6 paragraph 1 letter e) or f) of the Regulation. LAA ČR does not process personal data further, unless it proves serious legitimate reasons for processing that outweigh the interests or rights and freedoms of the data subject, or for the determination, exercise or defense of legal claims.
Personal data are not processed by LAA ČR under any circumstances for marketing purposes, profiling or automated decision-making is not carried out on the basis of them. Personal data are not passed on to other entities under private law, with the exception of the insurance company with which LAA ČR has a framework insurance contract to ensure the insurance of its members.