If you are interested in becoming a member of the Tenants’ Initiative (Iniciativa nájemníků a nájemnic, z. S., INN), a subscriber to our newsletter, or a visitor to our website, you are entrusting us with your personal data. We are responsible for protecting and securing this data. Please familiarise yourself with our privacy policy, the relevant principles and your rights under the GDPR (General Data Protection Regulation).

1. General Provisions
1.1. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the ‘GDPR’): I am informed that the association Iniciativa nájemníků a nájemnic, z. s., company registration number (IČ) 17377200, with its registered office at Hartigova 1978/234, Žižkov, 130 00 Prague 3 (hereinafter referred to as the “Controller”) is authorised to process the personal data provided by me (hereinafter referred to as “Personal Data”) in accordance with Article 4(7) of the Regulation of the European Parliament and of the Council (EU). 

For the purposes of this Policy on the Processing and Protection of Personal Data, the Controller’s branch associations listed in Annex 1, which forms an integral part of this document, are also considered to be the Controller.

1.2. The Controller handles such data in accordance with national legislation and European Union regulations applicable to the protection of personal data.

1.3. The Controller collects, stores and uses personal data within the meaning of Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the ‘Act on the Processing of Personal Data’), or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). The specific purposes for which the Controller processes personal data are set out below.

1.4. The controller issues this policy so that you are fully informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data, and what rights you have. This policy applies to all personal data collected by the controller.

2. Legal basis and purpose of personal data processing
2.1 The controller processes personal data that you have provided to it or personal data that the controller has obtained in connection with fulfilling your request.

2.2 The controller processes your identification and contact details, as well as data necessary for the performance of a contract or for marketing purposes, i.e. first name, surname, place of residence (city only, not the exact address), email address and telephone number.

In specific cases – about which you will always be informed in advance and only if you provide us with your consent – the Controller may process additional identification and contact information about you that may constitute sensitive personal data, such as information regarding your health, political and religious views, union membership, racial or ethnic origin, sexual orientation, as well as information regarding your temporary or permanent address and other data related to the lease agreement.

2.3 The controller collects this personal data via:  

• online forms on its website at www.iniciativanajemniku.cz, where users can subscribe to the newsletter or register their interest in membership;
• paper forms at public events (public meetings organised by INN or other public events where INN is present);
• so-called door-to-door campaigns, during which members organise tenants in specific buildings;
• the Darujme.cz portal, where information is collected on donors making donations via this platform.

2.4 The controller does not carry out profiling (i.e. systematic evaluation of purchases, requests, etc.)

2.5 The legal basis for the processing of personal data is:

• the performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR,
• the granting of consent to the processing of personal data for specific processing purposes.

2.6 The purpose of processing personal data is:

● to send out the newsletter;

● to fulfil the purpose of open letters, appeals and petitions, your data may be provided to the authority responsible for verifying the validity and authenticity of the data and signatures in accordance with Act No. 85/1990 Coll., the Act on the Right to Petition; 

● for the purposes of membership of the organisation, including the organisation of prospective members and existing members, via telephone number or email address;

● for the purposes of donations, we process data comprising basic personal and contact details in accordance with the relevant donation agreement; the purpose of processing personal data is to fulfil the terms of the donation agreement, to communicate with donors regarding the use of their donations and the organisation’s activities, and to further develop the relationship with the donor;

● communication, and handling of enquiries and issues relating to rented accommodation;

● analytical work based on interviews and questionnaire responses; the purpose of this analysis is to better focus our efforts toward bringing about change in housing policy.

2.7 We process your personal data for as long as is strictly necessary to provide our services or until consent to the processing of personal data for the purpose of sending the newsletter is withdrawn. Once the retention period for personal data has expired, the data controller will delete the personal data.

2.8 Personal data is processed by the controller both manually and automatically.

2.9 The controller does not carry out automated individual decision-making within the meaning of Article 22 of the GDPR.

3. Rights of the data subject
3.1. Subject to the conditions set out in the GDPR, you have:
● the right of access to your personal data under Article 15 of the GDPR;
● the right to rectification of your personal data under Article 16 of the GDPR, or to restriction of processing under Article 18 of the GDPR;
● the right to erasure of your personal data in accordance with Article 17 of the GDPR;
● the right to object to processing under Article 21 of the GDPR;
● the right to data portability under Article 20 of the GDPR
● the right to withdraw consent to processing by sending a written request to Podohradská 1673/9, 155 00 Prague 13 or electronically to the controller’s email address ahoj@iniciativanajemniku.cz
3.2. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been infringed.

4. Terms of personal data security
4.1. The administrator declares that he has taken all appropriate technical and organizational measures to secure personal data.

4.2. The administrator has taken technical measures to secure data stores.

4.3. The administrator declares that only authorized persons have access to personal data.

5. Cookies and other data we collect automatically when you browse our website
5.1 These are:
● preference cookies (cookies that determine your language preference);
● details of the website from which you arrived at our website;
● IP address;
● date and time of access;
● HTTP and HTTPS response codes;
● information about your browser and computer’s operating system.

5.2. Preference cookies, which are used to remember your chosen website language, may be stored for up to 1 year, unless you delete them from your browser beforehand.

5.3. Other data is processed only to the extent necessary to ensure the security and proper functioning of the website. Data contained in operational logs is retained for a maximum of 30 days. 

5.4. We do not use third-party cookies for the purpose of tracking website usage.

6. Transfer to third countries
6.1. Your personal data will not be transferred to countries outside the EU.

7. Final provisions

7.1. The data controller is entitled to amend these terms and conditions. The data controller will publish the new version of the privacy policy on its website or, where applicable, send the new version of these terms and conditions to the email address you have provided to the data controller.
7.2. Data subjects may obtain further information on their rights and obligations regarding the protection of personal data by emailing ahoj@iniciativanajemniku.cz

---

Appendix No. 1

The Controller’s affiliated associations are:

Iniciativa nájemníků a nájemnic Moravskoslezsko, z. s.

Company registration number (IČ): 21002916

Registered office: S. K. Neumanna 532/3, Moravská Ostrava, 702 00 Ostrava

Iniciativa nájemníků a nájemnic Brno, z. s.

Company registration number: 21454558

Registered office: Zemědělská 1674/14, Černá Pole, 613 00 Brno

Iniciativa nájemníků a nájemnic Praha, z. s.

Company registration number: 19868111

Registered office: Hartigova 1978/234, 130 00 Prague-Žižkov