Přístupnostní navigace
E-application
Search Search Close
Information on personal data controller
The personal data controller, i.e. Brno University of Technology with its registered office at Antonínská 548/1, 602 00 Brno, Id. No.: 00216305, Tax Id. No.: CZ00216305, data box: yb9j9by, is a public higher education institution established through a law. In its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation) and other legal regulations. Brno University of Technology (hereinafter “BUT”) appointed Mgr. Lucie Schimmelová to be the data protection officer. You can contact the data protection officer at the registered office at Brno University of Technology, Gorkého 62/13, 602 00 Brno, Czech Republic, or via e-mail: poverenec@vut.cz.
Information on the purposes of the personal data processing
The purposes of processing of personal data by BUT follow from the scope of activities of a public higher education institution specified by the Act on Higher Education Institutions. They include implementation of accredited study programmes and lifelong learning programmes, scientific, research, development and innovation, artistic or other creative work (hereinafter “creative work”), related administrative work and operation, additional activities and information and promotion activities.
Typical categories of individuals (data subjects) whose personal data are processed at BUT
Applicants for study, students, alumni, employees, external co-workers, contractors, customers etc.
Typical categories of processed personal data
BUT processes, for example, identification personal data, contact details, information about studies, information on qualifications and employment, information related to creative work, economic data, operational and location data and special categories of personal data (e.g. information on health status and trade union membership).
Legal grounds for personal data processing
The most common legal grounds for personal data processing by BUT are the performance of public higher education tasks in the public interest, the fulfilment of legal obligations and performance of a contract. Other legal grounds for personal data processing consist in the data subject’s consent and BUT’s legitimate interest.
Transfers of personal data
In some cases, BUT may transfer personal data to a processor, recipient or a third party in accordance with the law, under a contract or on the basis of consent given by the data subject.
Information on the processed personal data relating to the students and information on purposes of the processing
The data controller processes the following personal data relating to the data subjects, i.e. the students, for the purpose of administration of the study agenda, keeping a student register and performing other duties of a public higher education institution in relation to students:
Name (names, if applicable) and surname, name at birth, academic titles, birth identification number, place of birth, address of the place of residence in the Czech Republic, address of the place of residence outside the Czech Republic, mailing address in the Czech Republic if provided by the data subject, date of birth, sex, residence in the Czech Republic and nationality for foreigners, marital status, e-mail address (if the student provides it), photograph for the purposes of issuing a student identity card, number of the student identity card, BUT personal number, BUT e-mail address, bank account number, if the student provides it for the purposes of scholarship payments.
The following personal data related to students are also processed:
Information on enrolment in studies, attained education, the study programme and form of study, enrolment into the next year or next block, state examination passed and academic title awarded, interruption of studies, termination of studies, number of the diploma and diploma supplement, if issued
Lawfulness of personal data processing
Personal data are processed on the basis of law (e.g. Sections 57 and 88 and other of the Act No. 111/1998 Coll., on higher education institutions and amending and supplementing other laws (Act on Higher Education Institutions), as amended), from which the scope of personal data processed can be inferred.
Information on the duration of personal data processing
Information regarding the students kept in the register of students are subject to archiving as specified in the Act on Higher Education Institutions, and they will therefore be stored permanently in the paper or electronic information systems of BUT. Information on the student’s bank account number will be processed for the maximum of 10 years from the last payment by BUT to the relevant account.
Pursuant to Section 87 (1)(i) of the Act on Higher Education Institutions, personal data are transferred to the recipient, i.e. the Ministry of Education, Youth and Sports with its registered office at Karmelitská 529/5118 12 Praha 1. If a student requests the issuance of an ISIC card, his/her personal data in the following scope: name, surname, date of birth, photography, validity, licence number, and the name of the education institution are processed by GTS ALIVE s.r.o., Id. No.: 26193272, with its registered office in Prague 1, at Letenská 118/1, Postal Code 11800, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 78560 under the terms and conditions available at http://www.isic.cz/o-nas/pravni-dokumenty/zasady-ochrany-osobnich-udaju/ . Students' personal data may also be transferred to other public authorities, such as municipalities, to identify taxpayers obliged to pay a local fee for the operation of the municipal waste collection, transport, sorting, recovery and disposal system.
Rights of data subjects
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data (he/she can request information as to which personal data relating to him/her are being processed), rectification and erasure of personal data and restriction of processing. A data subject has the right to object to processing and the right to portability of personal data.
A data subject can deliver the requests to exercise the rights specified in the preceding sentence in person to the filing department of BUT at Antonínská 548/1, 602 00 Brno, or via electronic mail to vut@vutbr.cz. The aforementioned request will be assessed and dealt with in accordance with GDPR and other applicable legal regulations.
A data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, stating that the processing of his/her personal data violates GDPR. Contact details of the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, electronic filing: posta@uoou.cz .
Information on personal data processed for the purposes of admission procedure
For the purposes of the admission procedure, the data controller processes the following personal data relating to the data subjects, i.e. the applicants for study:
Identification and contact details:
Name (names, if applicable) and surname, academic titles, birth identification number, address of the place of residence in the Czech Republic, including postal code, address of the place of residence outside the Czech Republic, mailing address in the Czech Republic if provided by the data subject, date of birth, sex, residence in the Czech Republic and nationality for foreigners, country of residence, e-mail address, mobile phone number, if applicable.
Details on attained education:
Identifier of the education institution where the applicant obtained his/her secondary education with a school-leaving examination, higher vocational education, higher vocational education at a conservatory, foreign country where the applicant completed education (if applicable), field of study or accredited study programme, year of passing the school-leaving examination (maturita or absolutorium), information on the study programme which the applicant applied for (including its code), results of the admission procedure and information on previous studies at higher-education institution(s).
Further details:
Information on fulfilment of other conditions for admission concerning special knowledge, skills or aptitude or secondary school results, higher vocational or higher education results (if applicable), information on medical fitness or medical condition and special needs of applicants, if stipulated in the admission conditions.
Information will be processed in the paper and electronic information systems during the admission procedure and for 5 years after its conclusion. After expiry of this deadline, the relevant paper files will be shredded and the data contained in electronic information systems will be deleted. The personal data of applicants for study who have been admitted and enrolled will be processed as student’s personal data.
Personal data are processed on the basis of law (e.g. Sections 50, 49 (1) and (5) and 87 (1)(i) of Act No. 111/1998 Coll., on higher-education institutions and amending and supplementing other laws (Act on Higher Education Institutions), as amended) and carrying out tasks in the public interest (Section 21 (1)(e) of the same Act).
Pursuant to Section 87 (1)(i) of the Act on Higher Education Institutions, personal data are transferred to the recipient, i.e. the Ministry of Education, Youth and Sports, with its registered office at Karmelitská 529/5, 118 12 Prague 1. If the fulfilment of conditions for admission is verified based on results achieved in National Comparative Exams, www.scio.cz, s. r. o., processes the personal data of applicants on the basis of a processing contract concluded with BUT.
Rights of data subjects and how to exercise them
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data, rectification and erasure of personal data and restriction of processing. A data subject further has the right to object to processing and the right to portability of personal data.
Responsibility: Mgr. Lucie Schimmelová