treats your personal data responsibly and therefore in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR") and Act No.18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts (hereinafter referred to as "the Act"), makes available to you as a data subject (a natural person whose personal data is processed) on its website, in addition to its identification and contact details and the contact details of the responsible person, other necessary information, which can be found in the tabs on the left.
In accordance with Article 24 of the GDPR and Section 31 of the Act, the controller has taken appropriate technical, organisational, personal and security measures and safeguards, which take into account in particular:
o the principles of the processing of personal data, which are lawfulness, fairness and transparency, the limitation and compatibility of the purposes for which personal data are processed, the minimisation of personal data, their pseudonymisation and encryption, as well as integrity, confidentiality and availability;
o the principles of necessity and proportionality (including the scope and amount of the personal data processed, the storage period and access to the data subject's personal data) of the processing of personal data with regard to the purpose of the processing operation;
o the nature, scope, context and purpose of the processing operation;
o the resilience and recovery of personal data processing systems;
o instructions to authorised persons of the controller;
o taking measures to promptly determine whether a personal data breach has occurred and promptly informing the supervisory authority and the responsible person;
o taking measures to ensure the rectification or erasure of inaccurate data or the exercise of other rights of the data subject;
o risks of varying likelihood and severity to the rights and freedoms of natural persons (in particular accidental or unlawful destruction of personal data, loss or alteration of personal data, misuse of personal data - unauthorised access or unauthorised disclosure, assessment of the risks taking into account the origin, nature, likelihood and severity of the risk in relation to the processing and to identify best practices to mitigate the risk).