Cookies

Setting and managing cookies

The Fintech Sandbox website uses cookies to track the preferences of visitors to its website and to optimally design the website based on this information. Google Analytics uses analytical tools for the same purposes; cookies may also be used here.

Guidelines for the use of cookies

Cookies are small files that a website stores on a user’s laptop, desktop or mobile device when they visit. From this, CzechInvest can detect, for example, whether there has been communication between the user’s device and the Fintech Sandbox website in the past or which language or settings the user prefers. Cookies may contain personal data.

The Fintech Sandbox website can be visited without consent to the use of cookies. The user can refuse their use and delete the cookies at any time by making the appropriate settings on their device. He can change the settings by activating “do not accept cookies” in his browser. In addition, existing cookies can be deleted at any time. The exact settings for this feature can be found in the instructions for the specific browser or in the device manufacturer’s instructions. The use of cookies, as well as the refusal or deletion of cookies, is linked to the device used and, in addition, to the respective browser. Cookies can be refused or. delete, for each device and, when using multiple browsers, also for each browser separately.

If the user chooses not to use cookies, he or she may not be able to use all the functions of the Fintech Sandbox website or may only have limited access to individual functions.

Evaluating user data and using analytical tools

CzechInvest tries to adjust its website to the needs of visitors to the website and to continuously improve its offer. It uses analysis tools to identify user preferences, in particular popular sections of the website, where data can be transferred to servers located in countries outside the European Union and processed there. If the user does not wish CzechInvest to collect and evaluate information about his/her visit to the Fintech Sandbox website from the above mentioned analytical tools, he/she may object to such a procedure at any time (so-called opt-out). In order to technically implement this objection, an opt-out cookie will be stored in his browser. This cookie is only used to match a specific user objection. The user should bear in mind that the opt-out cookie can only be used for the browser from which it was launched for technical reasons. If the user deletes the cookies or uses a different browser or a different terminal device, the opt-out must be repeated.

To evaluate this data, CzechInvest uses the analytical tool of Google Inc. Google Inc. is certified under the EU-U.S. Privacy Shield. If the user still does not agree to the data transfer and processing, he or she can prevent the transfer. More information can be found on Google’s website.

Processing of any personal data

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as GDPR) and in accordance with the relevant national data protection legislation. The CzechInvest Agency, as a personal data controller, is obliged by specific laws to protect the private and personal life of the subject when processing personal data.

On the basis of specific legal regulations, the controller processes personal data necessary to identify the subject and to fulfil the legal obligations set out in legal regulations within the areas falling within its competence, which are:

• support for small and medium-sized entrepreneurs according to Act No. 47/2002 Coll., on the support of small and medium-sized enterprises and on the amendment of Act No. 2/1969 Coll., on the establishment of ministries and other central bodies of state administration of the Czech Republic, as amended
• support for entrepreneurs on the basis of programmes approved by the Government of the Czech Republic under a special law (e.g. Act No. 218/2000 Coll. or the Programme for Support of Business Real Estate and Infrastructure, etc.)
• the functions of the designated organisation in the provision of investment incentives under Special Act No. 72/2000 Coll., on investment incentives and on amendments to certain acts (Act on investment incentives), as amended
• business support, such as the so-called. start-ups in their growth on the domestic and foreign market, support for domestic subcontractors, cooperation with domestic and foreign entities and connecting the private and public sectors, etc.

The controller primarily uses the legal titles to process personal data for the performance of a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority and for the performance of a task necessary for the performance of a contract. It may also use other legal titles, such as consent to the processing of personal data provided by the subject, to protect the vital interests of the subject and the legitimate interests of the Controller.

On the basis of the above, the personal data of the subject may only be transferred or disclosed to persons, authorities or institutions to whom such right derives from the above-mentioned regulation, law or public interest. There is no automated decision-making in the processing of personal data.

The controller processes data with the consent of the subject, except in cases provided for by law where the processing of personal data does not require the consent of the subject.

The rights of the subject are set out in particular in III. chapter of the GDPR and § 81 and subsequently Act no. 89/2012 Coll. These are the following rights:

• the right of access to personal data
• the right to rectification, completion or deletion
• the right to restriction
• the right to data portability
• the right to object
• the right not to be subject to automated individual decision-making with legal or similar effects, including profiling

The above rights can be exercised by the subject, for example, using the form provided here.

The completed form can be delivered in the following ways:

• in person or in writing to the Personal Data Protection Officer, CzechInvest Business and Investment Promotion Agency, Štěpánská 15, 120 00 Prague 2
• electronically signed with a valid qualified signature to poverenec@mpo.cz
• via data box – to ID: cyrj9gf

The subject also has the right to contact the supervisory authority, which is the Office for Personal Data Protection (pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice) at any time with his/her complaint.

In the event of a personal data breach, you may contact the Data Protection Officer of the Controller directly.

A request to exercise the rights of the subject can be submitted in the above manner or by directly contacting the Data Protection Officer: Mgr. Jarmila Marta Šmardová(poverenec@mpo.cz).