Information on the processing of personal data


The University Center for Energy Efficient Buildings (hereinafter referred to as UCEEB) processes personal data of employees, students, business and project partners and guests of UCEEB as part of its activities. UCEEB only processes accurate personal data obtained in accordance with Regulation of the European Parliament No. 2016/679 (hereinafter referred to as GDPR), while collecting and processing such personal data only for the specified purpose, to the extent and for the time necessary to fulfill this specified purpose. UCEEB obtains personal data directly from the data subject, from CTU databases, from third parties and from public records.

Availability of information

Basic information about personal data protection is stored in electronic form on these pages. Information on the purposes and scope of personal data processing in paper form is stored (as of 25/05/2018) at the UCEEB reception, Třinecká 1024, Buštěhrad.

Scope of personal data processing

1) Personnel area

  • Purposes: Recruitment of new employees, Establishment of employment relationship, Adaptation process, Agendas connected with the employment relationship, Termination of the employment relationship
  • Maximum range of personal data*1: name, surname, date of birth, social security number, permanent address or temporary residence, gender, health insurance information, highest education, creditable experience, email, telephone, criminal integrity, bank account number, internal username and personal number
  • Recipients and processors: state authorities based on legal obligation, CTU information systems operators.

2) Labor-legal area

  • Purposes: Medical examination, OHS and PO, Payroll agenda, Occupational injury and disease, Promotion of UCEEB, Teaching activities and seminars, Public contracts-orders-invoicing, Depreciation, Archiving and shredding, Submission and resolution of projects, Car transport, Use of own vehicle
  • Maximum range of personal data*1: name, surname, date of birth, social security number, medical qualification, permanent address or of temporary residence, gender, photo, information on health insurance, highest education achieved, creditable experience, email, telephone, criminal integrity, bank account number, additional data required for tax returns, internal username, license plate number of own car, location data on work trips
  • Recipients and processors: state authorities based on legal obligation, contractual insurance company, bank, provider of occupational medical services, external trainers, grant agencies, contractual project partners, CTU information system operators.

3) ICT area

  • Purposes: Operation of the camera system, Operation of the ACS system, Monitoring of basic services, Logging of access to shared services, LDAP-services
  • Maximum range of personal data*: name, surname, MAC, IP or IPv6, photos from security cameras, registered ACS-card/chip number, username, email, affiliation to research group
  • Recipients and processors: public administration authorities based on their legitimate request, service company for camera system and ACS system

* ... The above list is the maximum possible, the normal scope is limited only to the processing of the necessary personal data for the given purpose and specific data subject

Rights of personal data subjects

The subject of personal data has the right to information about the scope and purpose of the processing of his personal data, he has the right to object to processing, the right to limited processing and the right to delete personal data (if their further processing is not required by another superior regulation). He can exercise these rights by submitting an application in person (UCEEB reception, Třinecká 1024, 273 43 Buštěhrad, on working days between 8:00 a.m. and 4:00 p.m.).