By this document, we as the controller of personal data – company Škoda Auto a.s., tř. Václava Klementa 869, 293 01, Mladá Boleslav, Identification No.: 00177041, registered in the Register of companies kept by the Municipal Court of Prague under section B file No. 332 (hereafter referred to as “Škoda Auto“) – provide information on the personal data processing and your rights related to this processing.
The processing of personal data includes following activities:
If you come or arrive in our premises, we will work with the information about you (your personal data). We will put down the information about you and your car in the register of visitors. The overview of the visitors and their movement on the premises is necessary for us to ensure both your safety and ours. Thus, we do not have to ask you for an explicit consent with such a procedure (we have a legitimate interest). We prepared this document to give you a better idea about specific situations and reasons why we need to work with your data (data processing purposes).
We will use the information about you for:
• Provision of asset security and protection (monitoring of site)
If it is an occasional visitor:
• Provision of asset security and protection (records on one-off entries of persons)
Or if you visit the premises more than once or for a long time:
• Provision of asset security and protection (records on short-term and long-terms entries of persons)
We will use the information about you for:
• Provision of asset security and protection (Resolution of security incidents)
• Provision of fire protection
If you have any questions regarding our handling of your personal data, please contact the DP Office of ŠKODA AUTO or you can read the Personal Data Protection Principles on our website – the contact information and link are given on the last page.
Purpose of the processing:
Provision of asset security and protection (records on one-off entries of persons)
Description of the purpose of processing:
Your personal data is recorded in the visitor log, which includes entries, arrivals, departures, and exits. Entries of individuals into security-restricted areas are also recorded, and your personal data is used to authorize the creation of records. As part of the entry log, the personal data of vehicle drivers is also recorded.
Legal basis of the processing:
We have a legitimate interest to perform this processing. We want to ensure that only authorized persons enter Škoda Auto site and premises.
Categories of personal data we process:
Identification data
Product Specifications (SPZ)
Contact information
Records from Input Devices
Data about people in the perimeter
Processing and archiving period:
1 year from recording.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
We receive the personal data directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.
Automated decision-making based on personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be subject to processing in the public interest and used for scientific, historical, or statistical research purposes. Personal data may also be subject to processing for the purposes of resolving legal matters related to obligations to public administration authorities and monitoring and evaluating legal risks.
Purpose of the processing:
Provision of asset security and protection (records on short-term and long-terms entries of persons)
Description of the purpose of processing:
As part of short-term and long-term access/entry, your data is entered in the records of persons entering and leaving on foot and by car, including the entry of natural persons into secure premises, with your personal data used for the permission to maintain records. In recording entries by car, the personal data of the drivers are also recorded.
Legal basis of the processing:
We have a legitimate interest to perform this processing. We want to ensure that only authorized persons enter Škoda Auto site and premises.
Categories of personal data we process:
Identification data
Product Specifications (SPZ)
Contact information
Other identification and contact detail of the employee
Records from Input Devices
Data about people in the perimeter
Photo / video
Processing and archiving period:
5 years from the event.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
We receive the personal data directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.
Automated decision-making based on personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be subject to processing in the public interest and used for scientific, historical, or statistical research purposes. Personal data may also be subject to processing for the purposes of resolving legal matters related to obligations to public administration authorities and monitoring and evaluating legal risks.
Purpose of the processing:
Provision of asset security and protection (Resolution of security incidents)
Description of the purpose of processing:
Your personal data will be used in addressing security incidents, specifically in identifying and preparing reports, maintaining records on security incidents and performing breath tests. If you cause a security incident, you will be recorded in security incident records and, for a definite period of time, you will be denied access to the site of Škoda Auto or prevented from cooperating with Škoda Auto.
Legal basis of the processing:
We have a legitimate interest to perform this processing. We want to ensure safety of all our employees as well as other persons moving around the site.
Categories of personal data we process:
Identification data
Physical characteristics
Work performance data
Other identification and contact details of the employee
Records from Input Devices
Data about people in the perimeter
Photo / video
Product Specifications
Processing and archiving period:
20 year from recording.
Categories of data processors or recipients to whom we may provide the personal data:
Hospitals
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
We receive the personal data directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.
Automated decision-making based on personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be subject to processing in the public interest and used for scientific, historical, or statistical research purposes. Personal data may also be subject to processing for the purposes of resolving legal matters related to obligations to public administration authorities and monitoring and evaluating legal risks.
Purpose of the processing:
Ensuring security and protection of property (monitoring company premises and objects).
Description of the purpose of processing:
Processing and evaluation of records from camera systems in the premises and objects of Škoda Auto company, where you may be present.
Legal basis of the processing:
We have a legitimate interest to perform this processing. We have interest to ensure the security of our premises, objects, and the people within them.
Categories of personal data we process:
Recordings from the CCTV systems.
Processing and archiving period:
14 days from recording.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
Directly from you, or from the company's CCTV camera records.
Transfers of personal data to third countries or supranational organisations:
As part of the stated processing, your personal data will not be transferred to third countries or international organizations.
Automated decision-making based on personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be subject to processing in the public interest and used for scientific, historical, or statistical research purposes. Personal data may also be subject to processing for the purposes of resolving legal matters related to obligations to public administration authorities and monitoring and evaluating legal risks.
Purpose of the processing:
Provision of fire protection
Description of the purpose of processing:
We will process your personal data should an event transpire where their processing is necessary for ensuring fire protection in compliance with the applicable legislation.
Legal basis of the processing:
Fulfilling an important public interest under Union or Member State law.
Categories of personal data we process:
Identification data
Health condition data
Product Specifications
Processing and archiving period:
10 years from the event.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
We receive the personal data directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or multinational company.
Automated decision-making based on personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be subject to processing in the public interest and used for scientific, historical, or statistical research purposes. Personal data may also be subject to processing for the purposes of resolving legal matters related to obligations to public administration authorities and monitoring and evaluating legal risks.