Information on processing of personal data by organization Dům Ronalda McDonalda Česko, nadační fond
Gdpr donor notice en · MD
Information on the Processing of Personal Data – Donors
Nadační fond Dům Ronalda McDonalda Česko, nadační fond (Ronald McDonald House Czech Republic Foundation Fund), Company ID (IČO): 26730731, with registered office at Radlická 354/107b, Radlice, 158 00 Praha 5, file no. N 1345 kept at the Municipal Court in Prague (hereinafter the "Foundation Fund" or "Controller") informs the donor, as the data subject (hereinafter the "donor" or "data subject"), in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR"), about the processing of their personal data:
Purpose of the processing of personal data
Personal data is obtained directly from the donor at the moment a donation agreement is concluded (i.e., when the gift is made). The Controller undertakes to process accurate personal data only for the purpose of:
The Controller undertakes to process accurate personal data only for the purpose of:
- fulfilling the contract (the donation agreement) and, where applicable, issuing a confirmation of the gift for use in a tax return for the purpose of a tax deduction [in accordance with Article 6(1)(b) of the GDPR], and its subsequent performance. The Controller is obliged to comply with legal obligations arising from legislation governing accounting rights and duties. The reason the donor provides personal data to the Controller is the identification of the contracting parties necessary for concluding and performing the contract (a contractual requirement), without which this would not be possible.
- sending a thank-you for the gift, sending information on how the donated funds were used, and sending commercial communications (direct marketing) [in accordance with Recitals 47 and 70 and Article 6(1)(f) of the GDPR]. In this case, the Controller has a legitimate interest in the processing of personal data for the promotion of the services it provides.
The Controller undertakes not to process personal data in a manner incompatible with the purposes stated above.
Scope of personal data
The Controller undertakes to process personal data only to the extent necessary in relation to the purpose for which it is processed. The scope of personal data provided is as follows:
- first and last name,
- email address,
- telephone number,
- home address (if provided),
(hereinafter "personal data").
Duration of processing of personal data
The Controller undertakes to process personal data processed for the purpose of fulfilling the contract for a period of 5 years from the date the personal data was obtained from the donor. The Controller is obliged to retain the personal data in accordance with generally binding legal regulations, specifically Act No. 235/2004 Coll., on Value Added Tax. After this period expires, the Controller is obliged to dispose of the personal data.
The Controller undertakes to process personal data processed for the purpose of sending commercial communications (direct marketing) for a period of 5 years from the date the personal data was obtained from the donor. After this period expires, the Controller is obliged to dispose of the personal data.
Categories of recipients of personal data and transfer of personal data
The Controller declares that personal data will be made accessible to relevant employees of the Controller, who are obliged to maintain confidentiality regarding this data, as well as regarding the security measures whose disclosure would jeopardize the security of this personal data.
The Controller declares that personal data will be transferred for the above purposes to:
- Nadace Via, with registered office at Dejvická 306/9, Dejvice, 160 00 Praha, Company ID: 67360114, registered in the Commercial Register kept at the Municipal Court in Prague, Section N, Insert 395, as this company (Darujme.cz) acts as an intermediary of the donation process on the Darujme.cz portal.
- Intuit Mailchimp, with registered office at 675 Ponce De Leon Ave. NE 5000, Atlanta, GA 30308, USA, as this company handles the sending of bulk newsletter-type emails and similar communications on behalf of the Controller.
- Bit Carvers s.r.o., with registered office at Neklanova 112/9, Vyšehrad, 128 00 Praha 2, Company ID: 04507517, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 248479, as this company handles the sending of automated and bulk emails on behalf of the Controller. The obligation to maintain confidentiality of personal data also applies to the relevant employees of Bit Carvers.
- DDB a.s., with registered office at Lomnického 1705/9, 140 00 Praha 4 - Nusle, Company ID: 00293911, registered in the Commercial Register kept at the Municipal Court in Prague, Section B, Insert 425, as it provides website administration.
- McDonald's ČR spol. s r.o., with registered office at Radlická 740/113c, 158 00 Praha 5, Company ID: 16191129, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 1421, as it provides IT administration.
- Follow Bubble s.r.o., with registered office at Františka Křížka 362/1, Holešovice, 170 00 Praha, Company ID: 27721876, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 290104, as this company handles administration of the email client and social media.
The Controller further declares that it will not transfer personal data to third countries or to any international organization.
Automated decision-making and profiling
No automated decision-making or profiling will take place in the processing of your personal data.
Rights of the data subject
The Controller informs the data subject of the rights arising from the GDPR, in particular:
- the right of access to personal data (the data subject has the right to obtain confirmation from the Controller as to whether or not personal data concerning them is being processed – Art. 15 GDPR);
- the right to rectification (the data subject has the right to have the Controller correct inaccurate personal data concerning them without undue delay, and also the right to have incomplete personal data completed – Art. 16 GDPR);
- the right to erasure (the data subject has the right to have the Controller erase personal data concerning the data subject without undue delay, if one of the grounds set out in Art. 17 GDPR applies);
- the right to restriction of processing (the data subject has the right to have the Controller restrict processing in the cases set out in Art. 18 GDPR);
- the right to data portability (the data subject has the right to receive the personal data concerning them, which they have provided to the Controller, in a structured, commonly used, and machine-readable format, and has the right to transmit that data to another controller without hindrance from the Controller to whom the personal data was provided, in the cases set out in Art. 20 GDPR);
- the right to object (the data subject has the right to object to the processing of personal data for marketing purposes (sending commercial communications), on the basis of Art. 6(1)(e) or (f) GDPR, including profiling based on these provisions, pursuant to Art. 21 GDPR). Where the data subject objects to the processing of personal data, the Controller shall no longer process the personal data for that purpose unless it demonstrates compelling legitimate grounds;
- the right not to be subject to a decision based solely on automated processing (the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, pursuant to Art. 22 GDPR);
- the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), with registered office at Pplk. Sochora 727/27, 170 00 Praha 7.
Contact details
If you would like to exercise any of your rights in connection with the processing of your personal data, or if you have any other question or complaint regarding such processing, please contact us by post or by email at the contact details below.
Dům Ronalda McDonalda Česko, nadační fond Address: Radlická 354/107b, Radlice, 158 00 Praha 5 Email: info@dumronaldamcdonalda.cz