Information provided pursuant to Articles 12 and 13 of Regulation No 2016/679 of the European Parliament and Council (EU), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation)

1  Who is your personal data controller?
The data controller for your personal data is the National Museum, a contributory organization with its seat at Václavské náměstí 68, 110 00 Praha 1-Nové Město (hereinafter referred to as "the National Museum" or "We").

2  Contact details of the National Museum’s Data Protection Officer
Telephone no.: +420 261 090 682; e-mail: gdpr.nm@nslegal.cz
Through our Data Protection Officer, You can exercise your rights. Since We may only disclose your personal data to You, You may be required to prove your identity.

3  Processing of personal data

3.1  Purposes of personal data processing
The personal data of our employees, visitors and other partners (hereinafter referred to as "You") is used to ensure our activities as a state-owned collecting institution that is based on the public interest and which provides services to the public. One of our main interests is the care of national cultural heritage, but the safety and comfort of our visitors is equally important. 

3.2  Legal basis for the processing of personal data
We process personal data on the following legal bases:

3.2.1  Consent to personal data processing
We will always need your consent to the processing of your personal data when We would wish to start sending You information about our activities or when We provide You with the services of our Loyalty Programme.

3.2.1.1  Cookies
A cookie is a short text file that a visited web page sends to a browser. It allows the site to record your visit information, such as your preferred language and other settings. Thus, the next visit to the site can be easier and more productive. Cookies are important. Without them, browsing the web would be much more complicated. Cookies serve a variety of purposes. For example, We use them to store your secure search settings, select relevant offers, track the number of visitors to the site, facilitate new registration of new services, and protect your data.

3.2.2  Contract conclusion and performance
We will process your personal data whenever a mutual contractual relationship is concluded. Therefore, We will need your personal data, for example when You sign a volunteer contract, a gift or purchase contract, contract of work, or an employment contract.

3.2.3  Compliance with the legal obligation of the data controller
We are obliged to process certain personal data in order to fulfil our legal obligations under the applicable legislation. In our case, in particular, this means:
– Act No. 122/2000 Coll., on the protection of museum collections and on amendments to some other acts, as amended, and implementing Decree No. 275/2000 Coll., as amended;
– Act No. 130/2002 Coll., on support for research and development from public funds and on amendments to some related acts (Act on Research and Development Support), as amended;
– Act No. 499/2004 Coll., on archiving and records service, as amended;
– Act No. 257/2001 Coll., on libraries and the operation of public library and information services (Library Act), as amended;
– and other applicable legislation on the protection of national cultural heritage.
However, We also meet other obligations, such as those set by Labour Law, the Public Procurement Act, the Accounting Act, the Financial Control Act and other regulations that concern us.

3.2.4  Fulfilment of a task performed in the public interest or in the exercise of official authority
The National Museum is an institution based on the public interest, which is embedded in its founding charter. In this field, the National Museum performs archiving and scientific and historical research tasks: it acquires, collects, maintains, records, professionally processes and makes accessible to the public museum collections; it conducts basic research, applied research and experimental development related to the collections and the environment from which the collection items are derived. It also disseminates research and development results through teaching, publishing, museum exhibitions, museum programmes, and methodology and technology transfer in the public interest.
The National Museum manages a historical book collection, chateau libraries, a professional public library, and an archive of special significance. We also provide public library services, exchanging publications with domestic and foreign institutions. We are a provider of standardized public services in the field of culture.
The National Museum is one of the organizations entitled to make decisions in accordance with Act No. 71/1994 Coll., on the sale and export of objects of cultural value, as amended.

3.2.5  Processing for the purposes of the legitimate interests of the National Museum or third parties
Our premises are guarded by CCTV for preventive reasons and for our legitimate interest in ensuring a secure environment for our visitors and for valuable collections. We make sure that the CCTV does not infringe upon the privacy of our employees and visitors.
Our legitimate interest is also direct communication with our clients and partners, whom We hold in great respect. Without this direct communication, We could not accomplish our mission or the duties that We fulfil in the public interest.

3.2.5.1  Photos and videos of National Museum events
The events We organize for the public are documented by means of photographs and sometimes videos. We then publish selected photos and videos on our website, social networking sites or photo galleries available on the Internet. Photographs are also made available to official media to a smaller extent.
This is the ordinary documenting of events, which, given the information published herein, can be performed without your explicit consent. We make sure that our visitors, whom We we hold in great respect, are not portrayed in disturbing or undignified situations, especially when it comes to children. However, if You find that a photo or video has been published that captures You in a way that does not suit You, please let us know and We will take appropriate action in accordance with your wishes. 
If your photo were published in connection with your name, for example, We would ask for your consent to such processing. 

3.3  Other conditions for the protection of personal data
It depends on the specific situation whether the provision of your personal data is a legal or contractual requirement and whether You have a duty to provide us with your personal data.  We will always inform You when such an obligation exists and what the consequences may be.
When processing your personal data, there is no automated decision-making, including profiling, from which you may suffer consequences. We use the anonymized and aggregated data to process traffic statistics that We collect to provide feedback on our services.

3.4  Personal data which is processed and their sources
In the vast majority of cases, the personal data that we process is obtained directly from You. A small proportion of contacts are obtained from public sources, and some of the information will be generated by the operation of our facilities or the operation of the website or information systems.

3.5  Recipients or categories of recipients of personal data
Recipients of the personal data that We process are our authorized employees and our contractual partners, who help us to operate and provide us with software. We may provide access to processed personal data to the Police of the Czech Republic or to other law enforcement authorities based on their written request. We do not share our databases with anyone; we do not pass them on or sell them.

3.6  The intent of the data controller to transfer personal data to a third country or international organization
The National Museum does not intend to transfer personal data to a third country or international organization.

3.7  The length of time for which personal data will be stored and the criteria used to determine this period
The time periods for which We store personal data are determined to be compatible with their processing, in particular the obligation to keep documents for inspection purposes or according to specific provisions of applicable legislation. One part of the National Museum is its Archive, which is responsible for archiving documents about our activities in the public interest. All mandatory erasure times for our documents are stipulated by our internal regulations.
We only keep camera recordings for the minimum time required.

4  The intention of the data controller to transmit personal data to a third country or international organization
The National Museum does not intend to transfer personal data to a third country or international organizations.

5  Right to demand from the data controller access to personal data relating to the data subject, their correction or deletion and, where appropriate, a limit to their processing, and the right to object to their processing and to data portability

5.1  Right of access to personal data
You have the right to obtain information from us about whether and how We process your personal data and You are entitled to receive a copy of this information.

5.2  Right to rectification
You have the right to have your data corrected if it is inaccurate. The accuracy of your data is our duty, but We cannot ensure it without your help. Therefore, We will be happy to receive it.

5.3  Right to erasure / be forgotten
You have the right to have your data deleted, if you wish.
However, if the processing of your data is necessary due to the exercise of the right to freedom of expression and information, in order to fulfil our legal obligations or to perform a task in the public interest, for archiving, scientific or historical research, or for the determination, exercise and defence of legal claims, it will not be possible to comply with your wishes.

5.4  Right to Restrict Processing
You have the right to limit the processing of your personal data if it is inaccurate or if You wish.

5.5  Right to data portability
If we process your information on the basis of your consent or contract, you have the right to have the data provided in a format that You can transfer to another data controller.

5.6  Right to object to data processing
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. If You object to the processing of your data for direct marketing purposes, your data will no longer be processed.

6  The existence of the right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on consent given before its withdrawal
If We process your personal data based on your consent, you have the right to revoke this consent at any time. However, this will not affect our right to process your data prior to this revocation.

7  Right to lodge a complaint with the supervisory authority
You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that the National Museum is violating the Regulation when processing personal data.