1. BASIC PROVISIONS

The administrator of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") is Martin Kočařík, ID 02521300, with registered office at nám. B. Martinů 2804/13, 695 01 Hodonín (hereinafter referred to as the " Administrator").
In this document, we inform you about what personal data we process about you, for what purpose we do so, the period for which we process personal data and the way we process it.

2. WHAT PERSONAL DATA DO WE PROCESS?

Processing of personal data for the purpose of Czech dual citizenship

• The administrator processes only the strictly necessary basic data about clients, namely:
• identification data of the client and his/her relatives (name and surname, residential address, possibly delivery address, date of birth, place of birth, nationality, birth number)

contact details (e-mail, telephone number).
We obtain all personal data directly from you.

3. PURPOSE OF THE PROCESSING OF PERSONAL DATA

The administrator processes personal data for the following purposes:

• genealogical research
• representation before public administration authorities in processing the citizenship of the Czech Republic
• compliance with legal obligations (e.g. compliance with obligations in terms of accounting and tax legislation, transmission of personal data to financial administration authorities or other public authorities according to legal regulations)
• protection of the legitimate interest of the Administrator (protection of the Administrator's rights and legally protected interests in order to prove our rights and legal claims, in particular those arising from concluded contracts or damage caused).

4. STORING PERIOD OF YOUR PERSONAL DATA

The administrator stores your personal data for the time necessary to fulfill the rights and obligations arising from the contractual relationship, but no longer than 10 years after the end of the proceedings, or for the time necessary to fulfil legal obligations under other legal regulations (Accounting Act, Archives and Records Act, VAT Act).
After the expiry of the retention period, we will delete your personal data.

5. TO WHOM DO WE TRANSFER YOUR PERSONAL DATA?

The administrator transfers personal data to public authorities (registry offices, state archives) and certified translators.
We do not transfer your personal data to a country outside of European Union. Personal data is processed manually.

6. WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROTECTION OF PERSONAL DATA UNDER THE GDPR?

THE RIGHT OF ACCESS TO PERSONAL DATA (article 15 GDPR)

You have the right to request access to the personal data processed and the right to know:

• the purpose of processing personal data;
• the categories of recipients to whom the personal data have been or will be disclosed;
• the categories of recipients to whom the personal data have been or will be disclosed;
• the period of processing and storage of the personal data;
• any available information about the source of the personal data, unless it is obtained from you;
• whether automated decision-making, including profiling, is used.

THE RIGHT OF RECTIFICATION OF INACCURATE AND INCOMPLETE PERSONAL DATA (ARTICLE 16 GDPR)

You can ask us to correct your personal data if the information we hold about you is inaccurate or incomplete. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an additional declaration.

THE RIGHT OF DELETION OF PERSONAL DATA - "RIGHT TO BE FORGOTTEN" (Article 17 GDPR)
You can request the deletion of your personal data if:

• the personal data is not necessary for the purpose for which it was collected or otherwise processed,
• if you have withdrawn your consent to the processing of personal data,
• the personal data have been unlawfully processed,
• the personal data must be erased to comply with a legal obligation under EU or Member State law to which the Administrator is subject; or
• if you have objected to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Article 21(2) GDPR.

THE RIGHT TO LIMIT THE PROCESSING OF PERSONAL DATA (Article 18 GDPR)
You have the right to restrict the processing of personal data if:

• you deny the accuracy of the personal data for the time necessary for us to verify the accuracy of the personal data,
• the processing is unlawful, and you refuse to erase the personal data and instead request a restriction on its use,
• we no longer need the personal data for the purposes of the processing but you require it for the establishment, exercise or defence of legal claims,
• you have objected to the processing pursuant to Article 21(1) of the GPDR, pending verification that our legitimate grounds outweigh your legitimate grounds.

THE RIGHT OF PORTABILITY OF PERSONAL DATA (Article 20 GDPR)
This right is essentially an extended right of access (paragraph 7.1). You can ask us to provide your personal data in a structured, commonly used and machine-readable format or to transfer it directly to another Administrator if:
a) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
b) processing is automated.

THE RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA AT ANY TIME
If you have given your consent to the processing of your personal data, you can withdraw it at any time.

THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA (Article 21 GDPR)
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f), including profiling based on these provisions. We will no longer process personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

THE RIGHT TO FILE A COMPLAINT
If you believe that we process your personal data in violation of the GDPR, you have the right to file a complaint with the supervisory authority in the Czech Republic, which is:
The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
ID DS: qkbaa2n,
e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it., telephone: +420 234 665 111 (switchboard), fax: +420 234 665 444.

In case of repeated or manifestly unfounded requests to exercise the above rights, the Administrator is entitled to charge a reasonable fee for the exercise of the right in question, or to refuse your request.

7. DATA PROTECTION OFFICER

The Administrator does not have a person called a data protection officer. If you have any questions about the processing of your personal data, you can contact us directly:
Delivery address: Martin Kočařík, nám. B. Martinů 2804/13, 695 01 Hodonín
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telefon: +420 736 613 528
All contact details can also be found on our website: www.myczechroots.com

This document is effective from 1 October 2022 and will be updated on an ongoing basis. The current version can always be found here.