Information on the processing of personal data of applicants for study.

Palacký University Olomouc, with its registered office at Křížkovského 8, 779 00 Olomouc (hereinafter referred to as "UP"), processes the personal data of applicants for study at UP (hereinafter referred to as "applicants") in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General GDPR on the protection of personal data – hereinafter referred to as "GDPR") and in accordance with Act No. 110/2019 Coll., on the processing of personal data, as the controller of personal data.

In accordance with Articles 5 and 6 of the GDPR, all personal data provided in any form by the applicant will be processed solely for the purpose of:

· Administration of the admission procedure

· Archiving of documents and data related to the applicant's admission procedure at UP

· Transfer of information about the applicant's admission procedure to public authorities and administrations – Ministry of Education, Youth and Sports of the Czech Republic, Ministry of the Interior of the Czech Republic (Czech Police), Ministry of Foreign Affairs of the Czech Republic (Czech Embassies), Customs Administration

UP will process the applicant's personal data primarily by collecting, recording, organising, structuring, storing, adapting or altering, retrieving, using, arranging and combining, restricting, transferring, disclosing, erasing or destroying it, always within the scope of the above-mentioned purpose.

UP processes the personal data of applicants on the basis of:

· Article 6(1)(c) of the GDPR, i.e. processing of personal data is necessary for compliance with a legal obligation to which the controller is subject (e.g. Section 10 of Act No. 89/1995 Coll., on the State Statistical Service, as amended);

· Article 6(1)(e) of the GDPR, i.e. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (e.g. proceedings concerning admission to study)

The provision of personal data by the applicant is voluntary; in the event of refusal to provide the data necessary for the proper conduct of the admission procedure at UP, UP will not be able to properly identify the applicant and administer their admission procedure, including the fulfilment of obligations in relation to other public authorities of the Czech Republic.

UP does not provide applicants' personal data to third parties, unless required by law, at the request of an authorised public authority, or under a contract concluded by UP with companies that evaluate the results of entrance examinations on its behalf.

UP informs applicants that the university's data protection officer can be contacted at the email address dpo@upol.cz or in writing at the address of the Rector's Office of Palacký University Olomouc, Křížkovského 8, 779 00 Olomouc.

UP will store the applicant's personal data for the duration of the purpose of processing the applicant's personal data, but for no longer than 12 months from the end of the admission procedure for the given academic year.

UP also informs applicants of their rights in accordance with Article 13 of the GDPR, or Articles 15 to 22 and 77 of the GDPR, as follows:

Pursuant to Article 15 of the GDPR, the applicant has the right to obtain confirmation from UP as to whether or not personal data concerning him or her are being processed and, if so, the applicant has the right to access such personal data and related information as defined in Article 15(1)(a) to (h) of the GDPR. Under the conditions of Article 15 of the GDPR, the applicant has the right to receive one copy of the personal data being processed free of charge.

Under Article 16 of the GDPR, the applicant has the right to have inaccurate personal data concerning him or her corrected or, where appropriate, to have incomplete personal data completed. Under Article 17 of the GDPR, the applicant has the right to have UP erase personal data concerning him or her without undue delay, under the conditions set out in Article 17. Under the specific conditions set out in Article 18 of the GDPR, the applicant has the right to request that UP restrict the processing of personal data.

In accordance with Article 77 of the GDPR, the applicant has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the applicant considers that the processing of his or her personal data infringes the GDPR (as a rule, this supervisory authority will be the Office for Personal Data Protection).

Further information on the rights of applicants in the area of personal data processing can be found in Articles 15 to 22 of the GDPR and on the UP website (https://www.upol.cz/univerzita/ochrana-osobnich-udaju/).