On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and related legal provisions (hereinafter referred to only as the GDPR entered into application. These policies explain how the organization JCMM, z. s. p. o. (hereinafter "JCMM" or "controller") processes personal data during the operation of its websites, registration for and execution of events, courses, competitions, and projects, and in related communication. The processing of personal data takes place in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "GDPR").

Personal Data Controller

• Name: JCMM, z. s. p. o.
• Registered Office: Česká 166/11, 602 00 Brno, Czech Republic
• ID No. (IČO): 75064707
• Contact for GDPR Matters: info@jcmm.cz

The controller has not appointed a Data Protection Officer, as this obligation does not arise pursuant to Article 37 of the GDPR.

 

1. Categories of Processed Personal Data and Sources

JCMM processes exclusively data obtained directly from data subjects (upon registration in forms, for events, or in user profiles), or created as part of organizing activities. These include in particular:

• Identification data: first name, surname, title, date of birth / age category for specific projects.
• Address and contact data: e-mail address, telephone number, residential address, school/organization, job position or field of study.
• Visual recordings: photographs and video recordings from organized events.
• Operational and technical data: system logs, login logs for JCMM applications, course completion information, and website usage records.

 

2. Purposes of Processing, Legal Bases, and Retention Periods

	Purpose of Processing		Legal Basis (Title)		Retention Period
	Organization of events, courses, competitions, and projects (registration, communication, training execution, issuing certificates)		Performance of a contract (Art. 6(1)(b) GDPR)		For the duration of the event and subsequently for a period of 10 years after its completion as specified by legal regulations and grant rules.
	Fulfillment of accounting, grant, and legal obligations (accounting, proving participation to grant providers MŠMT, South Moravian Region, EU, and other supervisory bodies)		Compliance with a legal obligation (Art. 6(1)(c) GDPR)		For the period specified by legal regulations and grant rules (typically 10 years).
	Documentation and promotion of activities (illustrative photos and videos from events on the website, social media, and print materials)		Legitimate interest (Art. 6(1)(f) GDPR) in combination with § 84 et seq. of the Civil Code		For an indefinite period or until a legitimate objection or request for removal is raised.
	Offering similar events to existing participants (sending invitations to follow-up educational events)		Legitimate interest (customer exception pursuant to § 7(3) of Act No. 480/2004 Coll.)		Until an objection is raised or unsubscription occurs, otherwise for an indefinite period.
	General newsletter and marketing information (sending information about new projects and activities)		Consent of the data subject (Art. 6(1)(a) GDPR)		Until consent is withdrawn, otherwise for an indefinite period.
	Management of user accounts in applications (Start iD, PoMyDo, IS JCMM)		Performance of a contract (Art. 6(1)(b) GDPR)		For the duration of the profile.

 

3. Obligation to Provide Personal Data

Providing personal data for registration and event participation purposes is a contractual requirement. Without providing mandatory data, application forms cannot be processed and participation cannot be secured. Providing data for marketing purposes or general newsletters is entirely voluntary.

 

4. Personal Data Recipients and Processors

JCMM does not transfer or make personal data accessible to any third parties without prior consent, with the exception of supervisory or superior authorities and verified contractual processors:

• FRAMO, s.r.o. (Tovární 906/44, Olomouc, ID No.: 60793937) – management of the JCMM information system.
• ORWIN, s.r.o. (Mezírka 1, Brno, ID No.: 08442258) – management of the Start iD application.
• Josef Orlovský (Míčkova 935/14, 614 00 Brno, ID No.: 88868770) – management of the PoMyDo application.
• Cloud and analytics service providers (e.g., Google Ireland Ltd. / Google LLC) – e.g., for delivering certificates or analytical tools.

 

5. Transfer of Personal Data to Third Countries (Outside the EEA)

JCMM primarily does not transfer personal data to third countries. If transfer outside the EEA occurs within the use of cloud or analytical services (e.g., Google), it takes place exclusively on the basis of an European Commission adequacy decision (EU-US Data Privacy Framework) or Standard Contractual Clauses (SCCs).

 

6. Automated Decision-Making and Profiling

JCMM does not perform automated decision-making or profiling within the meaning of Art. 4(4) and Art. 22 of the GDPR.

 

7. Rights of Data Subjects and How to Exercise Them

Data subjects have the following rights pursuant to Articles 15 to 22 of the GDPR:

1. Right of access: Obtain confirmation of processing and a copy of processed personal data.
2. Right to rectification: Rectify inaccurate or complete incomplete data.
3. Right to erasure ("right to be forgotten"): Request deletion of data if it is no longer needed or if no other legal ground exists.
4. Right to restriction of processing: Restrict processing in cases specified in Art. 18 GDPR.
5. Right to data portability: Obtain data in a structured, commonly used, and machine-readable format.
6. Right to withdraw consent: Withdraw granted consent at any time free of charge (by e-mail to info@jcmm.cz or via an unsubscribe link).
7. Right to object (Art. 21 GDPR): Object to processing based on legitimate interest; for direct marketing, processing will cease immediately.

How to exercise your rights: In writing at the address of JCMM's registered office or by e-mail to info@jcmm.cz. Requests will be handled without undue delay, no later than within 1 month of receipt.

Protection of rights and complaints:

• Data subjects have the right to lodge a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz/.
• Pursuant to Art. 79 GDPR, data subjects have the right to an effective judicial remedy.

 

 

 

Web-site visit rate monitoring

The organization JCMM z. s. p. o. evaluates the visit rate of its domains:

• jcmm.cz
• vzdelavanivsem.cz
• vyberskoly.cz
• sockari.cz
• jsmenadani.cz
• startid.cz
• vyberpraxe.cz
• pythagoriada.cz
• ceipex.cz
• pomydo.cz

(hereinafter referred to only as “JCMM domains”) via the Google Analytics service of the company Google.

The processing includes data of the website visitor:

1. website from which the visitor visited the JCMM domain;
2. anonymized IP address;
3. date and duration of access;
4. any query made by the visitor;
5. http response code;
6. transferred data groups;
7. data concerning browser and computer operation system of the website’s visitor.

What are cookies?

These are small data files necessary for certain website functions, such as logging in. Cookies can also allow the website to remember various settings such as language, font and other options you have chosen yourself for displaying of the website. For that reason, we place cookies onto your computer. Most major websites and website providers do the same.

For what do we use cookies on our website?

Cookies can be divided into two basic groups according to their persistence:

• Short term (session cookie) – they stay in your browser until closing of the browser, are deleted afterwards.
• Long term (persistent cookie) – they are stored in your browser for a long time (depending on your browser and cookies settings) or until you delete them manually.

Cookies can be differentiated into two fundamental types according to their duration:

• Session cookies (short-term) remain in your browser until the closing of your browser, after which they are deleted.
• Persistent cookies (long-term) remained saved on your browser for a long period (depending upon your browser settings and the cookie settings) or until they are manually removed.

We use these cookies on our website:

• Technical (short-term) – are essential to provide basic functioning of the website (e.g. registration, logging in, filling in of the user profile, etc.).
• YouTube (short-term and-long term) – are used by YouTube video player. They are placed onto your computer at the time you start the player.
• Google Analytics (long-term) – to customize the website effectively, we use the Google Analytics tool to measure anonymous user behaviour data.

We never use cookies to identify you personally and we never place sensitive or personal data into cookies.

How to adjust cookie usage

You can delete any cookies that are already on your computer. Most browsers also offer the option to block cookies from being placed onto your computer, but in this case you will not be able to use all of our online services. You can find detailed information on the settings of cookies storage in your browser on the website of your specific browser provider. 

You can also find details on the website AboutCookies.org.

Using of Google Analytics

This website uses the Google Analytics service provided by the company Google, Inc. (hereinafter referred to only as “Google”). The Google Analytics service uses cookie files. Information on using of the website together with content of a cookie file will be transferred by Google and stored on servers in the United States. Google will utilize this information for purposes of evaluating the website’s usage and creating reports on its activities intended for its operator and for providing other services connected to website activities and use of the internet in general. Google may also provide such information to third parties if required by law or should these third parties process such information for Google.

To protect your privacy, we have set up the Google Analytics service so that it does not record your IP address.

The Google Analytics service is extended for relevant marketing functions provided by Google, which are:

• View reports in the Google ads network,
• Remarketing (displaying of advertisements in the display network upon the basis of products viewed),
• Extended demographic overview (reporting of anonymous demographic data).

More information on processing and using of data can be found in the Google Privacy & Terms.