PERSONAL DATA PROTECTION

Did you receive a letter from us and want to verify what data we hold about you?
If you have the letter in front of you, use this app: GDPR verification.

If you don't have the letter to hand, write us a letter or an e-mail:
Address: Lhotky 60, Malotice (Kostelec nad Černými lesy), 281 63
E-mail: darce@dog-point.cz
Or call us at: +420 296 330 541
You'll receive a reply within 10 days.

Basic terms

  • Personal data is any information about a natural person (a data subject) on the basis of which the natural person can be identified.

  • A data subject is a living natural person whose personal data is processed. Under the GDPR, a legal entity is not a data subject, and the GDPR therefore does not apply to data processed about a legal entity, because data relating to a legal entity is not personal data. The GDPR does not extend its scope to data about deceased persons.

  • Controller and processor — both the controller and the processor are legal or, where applicable, natural persons who handle personal data.

  • The controller (in this case Dogpoint o.p.s.) is the one for whose “benefit” the personal data is processed. The controller is therefore always primarily responsible for its processing. The controller decides on the purpose, manner, scope and means by which the personal data will be processed.

  • The processor (in this case Dogpoint o.p.s. and entities entrusted with processing by Dogpoint o.p.s.) is, by contrast, the person who carries out the processing of personal data on the basis of instructions (a mandate) and for the benefit of the controller. A contractual relationship arises between the controller and the processor. Primary responsibility toward the data subject always lies with the controller, not the processor; nevertheless, in some cases the data subject may approach the processor directly.

General

Dogpoint o.p.s. processes and stores personal data in accordance with applicable legislation — i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing. No automated decision-making or profiling takes place when we process personal data.

What personal data do we process?

The personal data we work with includes:

  • Name

  • Address

  • E-mail address (if provided)

  • Phone number (if provided)

  • Date of birth (if provided)

  • Company ID and VAT ID (if provided)

  • Bank account number (if provided)

  • How your data was obtained

  • Providing your personal data is voluntary. However, under other legislation we must in some cases retain your personal data. For example, if you give us a financial gift, we are obliged to keep a record of this fact in our accounting records for ten years. We keep other personal data only for as long as necessary to fulfill the purposes listed below; after that, we erase or anonymize it.

How is your personal data handled?

Dogpoint o.p.s. uses your personal data for the following purposes:

  • To process gifts

  • To communicate with donors

  • To inform you about our projects and their results

  • To handle your requests or questions

  • To obtain feedback

  • To update your personal data and exercise your rights in accordance with personal-data protection rules — for example, to give you access to your personal data.

  • To fulfill obligations arising from applicable legal standards

We process personal data on the following legal bases: compliance with a legal obligation (e.g. keeping accounting records of donations), performance of a contract (e.g. an adoption contract or an animal loan agreement), our legitimate interest (communicating with donors and informing you about our work), and your consent (where we have asked for it).

Who has access to your personal data?

We share your personal data with a small number of third parties. Those third parties are:

  • service providers who need access to your personal data in order to provide services (including providers who process personal data on our behalf for the purposes of informing donors, storing and editing data, providing IT and marketing services, and data analytics)

  • public administration authorities

  • professional advisers (accountants, auditors, lawyers and other business contacts)

These third parties may be located in the Czech Republic or in other countries within the European Economic Area (EEA). The wording of applicable data-protection laws may differ in these countries. We enter into contractual relationships only with third parties we believe maintain an adequate level of data protection in order to protect all personal data held in the given country, and that these third parties will always act in accordance with applicable data-protection laws.

Your rights regarding your personal data

You have the right to ask us for a copy of the personal data we hold in our database and to obtain a description of the purposes for which it has been used. If you find that the data we hold about you is inaccurate, or that the purpose for which it was obtained is no longer necessary, please contact us. Contacts are listed below.

You also have the following rights:

  • The right to restriction of processing — if you want to stop supporting us temporarily, if you contest the accuracy of the data (until we make a correction), or if you object to the processing of the data (until we review the complaint).

  • The right to erasure — you also have the right to require us to remove or erase your personal data from the database (including consent to direct marketing; this does not apply, however, where we have another legal basis to continue processing your data or where its processing is in our legitimate interest).

  • The right to object to processing based on legitimate interest — to the extent that your personal data is being processed on that basis.

  • The right to data portability — you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller.

  • The right to withdraw consent at any time — where processing is based on your consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Contacts

Your personal data and how it is used can be viewed in the GDPR app.

You can contact us at:
Lhotky 60, Malotice (Kostelec nad Černými lesy), 281 63
E-mail: darce@dog-point.cz
Or call us at: +420 296 330 541

If you wish to file a complaint about the way your personal data has been handled, contact us and your complaint will be investigated. You also have the right to lodge a complaint with the supervisory authority (i.e. the Office for Personal Data Protection of the Czech Republic, Pplk. Sochora 27, 170 00 Prague 7).

Changes to this statement

Dogpoint o.p.s. reserves the right to amend this statement in light of developments in the implementation and interpretation of the General Data Protection Regulation (GDPR).

List of third parties cooperating with Dogpoint o.p.s.

  • BlueDRM GmbH

  • Česká pošta, s.p.

  • fundraising s.r.o.