Information about processing the personal data of participants in competitive hiring procedure for position of the Bursar of the Faculty according to the internal regulation at the First Faculty of Medicine of Charles University

In compliance with Article 13 of the Regulation of the European Parliament and Council (EU) 2016/679 of 27^th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive) (thereinafter “GDPR”), we inform participants in competitive hiring procedure, as data subjects (thereinafter “Participant”) about processing of their personal data.

Personal data controller

The controller of the personal details obtained by First Faculty of Medicine of Charles University (thereinafter “Faculty”) is Charles University, with the domicile at Ovocný trh 560/5, 116 36 Praha 1, organization ID: 00216208.

Purpose of processing the personal data

The Faculty processes personal data for the purpose of its use for the choice of prospective or current employees for vacancy at the position of the Bursar of the Faculty – working (executive) position according to its internal regulation, in particular to judge the applicant’s eligibility for this position contacting him/her, for preparation and performance of the competitive hiring procedure, and after its completion – not later than for six months – for the purposes of record keeping and a possible Participant’s interest in another competitive hiring procedure. After expiration of the said period, the personal data collected will be shredded or safely disposed of.

At the Participant’s request, the authenticated copies of documents with personal data will be returned to the applicant while their copies will be kept at the Faculty for the above period of time.

Legal title

The legal title of the processing of personal data is the justified interest of the Faculty and/or possible third party in learning about the Participants personal details and making a responsible choice for the respective work position (in compliance with Article 6 Subsection 1 Inset (f) of the GDPR).

Extent of the personal data

For the above mentioned purpose, the Faculty processes such categories of personal data that may include in particular (most in the form of the CV sent in by the applicant):

· first name and surname, title

· address of permanent residence

· date of birth

· mailing address

· telephone number

· e-mail address

· achieved education and further education

· previous occupations (employer, position, FROM – TO)

· relevant experience, skills, knowledge in relation to the work position (thereinafter “personal data”)

· criminal conviction certificate – in case of Heads etc.
· certificate according to Act 451/1991 Coll. Together with the respective affidavit – in case of Heads etc.

Time of processing of personal data

The Faculty processes the personal data for the duration of the competitive hiring procedure and not longer than 6 months after its completion for the purposes of record keeping and possible Participant’s interest in a position.

Categories of recipients of personal data

The Faculty represents that access to the personal data will only by given to the relevant employees of the Faculty, members of competition boards and possibly authorized representatives of the third parties (e.g. director of the hospital, consulting company for hiring procedure for announced position) who are under obligation of non-disclosure concerning this data – these will mainly include the authorized staff of the Dean Office of the Faculty.

The name of the consulting company is published in the text of the relevantadvertisement for the position of the Bursar of the Faculty, ie on the official notice board and in the public part of the website of the Faculty. The consulting company also processes the personal data of the participants.

Rights of a data subject

The applicant, as a data subject, has particularly the following rights ensuing from the GDPR:

· right of information about data processing

· right of access to personal data
· right of correction and supplementing of personal data
· right of erasure of personal data
· right of limitation on processing personal data
· right of transfer of personal data
· right to object to processing of personal data
· right to contest any automated decision-making
· right of complain and/or seek protection: The applicant has the right to complain about processing of his/her personal data at the supervising authority (Personal Data Protection Authority) and/or claim judicial protection against the supervising authority, data controller and/or personal data processor.)

Data protection officer

The data protection officer at Charles University is Mr. Jan Jindra, gdpr@cuni.cz, telephone: +420 224 491 740.