The legal basis for personal data processing

 

Each piece of data can be processed based on several legal bases for the processing (similarly as with the purposes). Provided that all legal bases cease to exist, the CZSO will stop processing your personal data. Permissible legal bases for the processing are enumerated in the Article 6 of the GDPR.

The CZSO is allowed to process your personal data only for the purposes for which it has relevant legal basis. With regard to the position of the CZSO as a public authority and as an employer at the same time, and with regard to the purposes for which we process personal data in this context, the following legal bases of personal data processing are relevant:

  • if it is necessary for the fulfilment of our legal obligation;
  • if it is necessary for the performance of a contract concluded with you or to carry out measures before the conclusion of the contract based on your request;
  • if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
  • if it is necessary for the purposes of our legitimate interests;
  • on the basis of your consent.

To process personal data, your consent is needed in the case the CZSO does not have another legal basis for the given purpose of processing. Provided that the CZSO will, exceptionally, process your personal data on the basis of your consent, you can withdraw the consent at any time (to do so, please, contact us in the way as mentioned below). Withdrawing your consent does not affect the lawfulness of the processing based on the consent given before its withdrawal.