Applications according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (hereinafter referred to as GDPR) may be submitted only if they relate to the data subject. Data relating to other persons or deceased persons cannot be required. Requests for consulting archival records, including requests for searches, are subject to the procedures pursuant to the Act No. 499/2004 Coll. and Decree No. 645/2004 Coll. and in some cases are charged.
See: Written inquiries and searches
Archival records stored in the Archives are in accordance with point (d) of Article 17(3) excluded from the possibility of exercising the right to be forgotten and therefore no data may be removed (deleted) at the initiative of the data subject. Permanent storage for archival purposes is not contrary to the GDPR.
When submitting an application under the GDPR, the data subject shall provide data which will allow it to be unequivocally identified in order to prevent the data being provided to a wrong person. Since the GDPR does not regulate the identification of the applicant, the Archives requests this information in the usual structure, i.e. name, surname, date of birth, permanent address or place of residence, or delivery address if different from the permanent address or place of residence.
Replies under the GDPR (especially according to Articles 15 to 21) shall be sent by the Archives exclusively by data box, if the applicant has it set up, or through a postal service provider, to the applicant’s own hands.
Point (a) of Article 13(1) of the GDPR
Controller: Národní archiv, Archivní 2257/4, 149 00 Praha, e-mail: posta@nacr.cz, data box identifier: fe3aixh
Point (b) of Article 13(1) of the GDPR
Data protection officer: Ing. Vladimír Stáňa, Národní archiv, Archivní 2257/4, 149 00 Praha, e-mail: poverenec@nacr.cz, data box identifier: fe3aixh, phone: +420 974 847 316
Point (c) of Article 13(1) of the GDPR
Purposes of the processing and the legal basis for the processing – see Annex
Point (d) of Article 13(1) of the GDPR
The Archives does not process personal data under point (f) of Article 6(1) of the GDPR.
Point (e) of Article 13(1) of the GDPR
Recipients or categories of recipients – see Annex
Point (f) of Article 13(1) of the GDPR
The Archives does not pass and does not intend to transfer personal data to a third country or an international organization.
Point (a) of Article 13(2) of the GDPR
The period for which the personal data will be stored – see Annex. The period for which the documents (and the data on the documents) are stored, stems from the retention and disposition schedules of the Archives.
Point (b) of Article 13(2) of the GDPR
The data subject has the right according to Article 15 of the GDPR to obtain from the Archives confirmation as to whether or not personal data concerning him or her are being processed. According to Article 16 of the GDPR, the data subject has the right to obtain from the Archives the rectification of inaccurate personal data concerning him or her. According to Article 17 of the GDPR, the data subject has the right to obtain from the Archives the erasure of personal data concerning him or her. However, the right of erasure cannot be exercised regarding processing for archiving purposes. Pursuant to point (d) of Article 17(3) of the GDPR, the deletion of personal data shall not be carried out in archival records stored in the National Archives. The data subject has the right to obtain from the Archives restriction of processing of personal data of the data subject in the cases listed in Article 18 of the GDPR. The data subject has the right according to Article 20 of the GDPR to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where the processing is based on consent, contract and is carried out by automated means. Pursuant to Article 21, the data subject has the right to object to processing of personal data concerning him or her where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. However, the Archives points out that the Archives manages the data in most cases on the basis of a statutory authorization in the exercise of official authority and in the public interest. See Annex for details, where reference is made to records of processing activities pursuant to Article 30 of the GDPR.
Point (c) of Article 13(2) of the GDPR
Where the processing of personal data of the data subject is based on consent of the data subject to the processing of his or her personal data, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Point (d) of Article 13(2) of the GDPR
The data subject has the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection (Úřad na ochranu osobních údajů). Address: ÚOOÚ, Pplk. Sochora 27, 170 00 Praha, e-mail: posta@uoou.cz, data box identifier: qkbaa2n.
Point (e) of Article 13(2) of the GDPR
Whether the provision of personal data is a statutory or contractual requirement – see Annex.
Point (f) of Article 13(2) of the GDPR
There is no automated decision-making or profiling in the Archives.
With the exception of the acceptance of documents selected and registered as archival records by the procedures pursuant to Act No. 499/2004 Coll., on Archiving and Records Management, the Archives does not obtain personal data from third parties (personal data not obtained directly from the data subject by the controller). In accordance with point (b) of Article 14(5) of the GDPR, the Archives does not provide information to the data subject on the personal data of the data subject that are managed by the Archives, if they have not been obtained from the data subject and are kept in archival records. Archival records are exempt from the right to erasure pursuant to point (d) of Article 17(3) and other exceptions and guarantees in the processing of personal data pursuant to Article 89 of the GDPR may apply.
GDPR Annex (PDF – 196 kB)