Information on personal data controller
The personal data controller, i.e. Brno University of Technology with its registered office at Antonínská 548/1, 602 00 Brno, Czech Republic, Id. No.: 00216305, Tax Id. No.: CZ00216305, data box: yb9j9by, is a public higher education institution established through a law. In its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation). Brno University of Technology (hereinafter “BUT”) appointed Mgr. Lucie Schimmelová to be the data protection officer. You can contact the data protection officer at the registered office of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via e-mail: [email protected].
Information on the purposes of the personal data processing
The purposes of processing of personal data by BUT follow from the scope of activities of a public higher education institution specified by the Act on Higher Education Institutions. They include implementation of accredited study programmes and lifelong learning programmes, scientific, research, development and innovation, artistic or other creative work (hereinafter “creative work”), related administrative work and operation, additional activities and information and promotion activities.
Typical categories of individuals (data subjects) whose personal data are processed at BUT
Applicants for study, students, alumni, employees, external co-workers, customers etc.
Typical categories of processed personal data
BUT processes, for example, identification personal data, information about studies, information on qualifications and employment, information related to creative work, economic data, operational and location data and special categories of personal data (e.g. information on health status and trade union membership).
Legal grounds for personal data processing
The most common legal grounds for personal data processing by BUT are the fulfilment of legal obligations and performance of a contract. Other legal grounds for personal data processing consist in the data subject’s consent and BUT’s legitimate interest.
Transfers of personal data
In some cases, BUT may transfer personal data to a processor, recipient or a third party in accordance with the law, under a contract or on the basis of consent given by the data subject.
Duration of personal data processing
BUT processes personal data only for only for the necessary period of time related to the relevant purpose of processing. The period of time is specified by law or the BUT’s filing and shredding plan. After expiry of this period, the personal data are destroyed or archived.
Rights of data subjects and how to exercise them
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data, rectification and erasure of personal data and restriction of processing. A data subject further has the right to object to processing and the right to portability of personal data.
A data subject can deliver the requests to exercise the rights specified in the preceding sentence in person to the filing department of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via electronic mail to [email protected]. The aforementioned request will be assessed and dealt with in accordance with GDPR and other applicable legal regulations.
A data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, stating that the processing of his/her personal data violates GDPR. Contact details of the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, electronic filing: [email protected] .
Information on personal data controller
The personal data controller, i.e. Brno University of Technology with its registered office at Antonínská 548/1, 602 00 Brno, Czech Republic, Id. No.: 00216305, Tax Id. No.: CZ00216305, is a public higher-education institution established through a law. In its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation). In connection with the effect of the above specified regulation (hereinafter the “GDPR”), Brno University of Technology appointed Mgr. Lucie Schimmelová to be the data protection officer. You can contact the data protection officer at the registered office of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via e-mail: [email protected].
Information on personal data processed for the purpose of the admission procedure
For the purposes of the admission procedure, the data controller processes the following personal data of the data subjects, who are applicants for studies:
Identification and contact details:
Name(s) and surname(s), titles, birth number, address of permanent residence in the Czech Republic including postal code, address of residence outside the Czech Republic, or delivery address if provided by the subject in his/her interest, in the case of foreigners, date of birth, sex, residence in the Czech Republic and citizenship, or state of permanent residence, e-mail address, mobile phone number.
Details of previous education:
The departmental identifier of the school where the applicant obtained his/her secondary education with a matriculation examination, higher vocational education or higher vocational education in a conservatory, or, if applicable, the country of previous education if it is a foreign school, the field of education or accredited educational programme, the year of the matriculation examination or graduation, data on the study programme for which the applicant has applied, including its code and data on the result of the admission procedure and data on previous studies at the university(ies).
Other data:
Information on the fulfilment of other conditions for admission to study relating to certain knowledge, abilities or aptitudes or to the performance in secondary school or, where appropriate, higher vocational school or university, including, where applicable, information on the applicant's medical fitness or health and special needs, if so specified in the conditions for admission to study.
Lawfulness of personal data processing
The legal basis for the processing of personal data of applicants for studies is the law (Sections 50, 49(1) and (5), 87(1)(i) of Act No.111/1998 Coll., on Universities and on Amendments and Additions to Other Acts (Act on Universities), as amended) and the performance of tasks in the public interest (Section 21(1)(e) of the same Act).
Information on the duration of personal data processing
Personal data will be processed in paper form and in electronic information systems for the duration of the admission procedure and for 5 years after its completion. At the end of this period, the relevant documents will be sent for shredding and the data will be deleted from the electronic information systems.
The personal data of applicants who have been admitted and have started their studies will continue to be processed as personal data of students.
Transfers of personal data
Pursuant to Section 87 (1)(i) of the Act on Higher Education Institutions, personal data are transferred to the recipient, i.e. the Ministry of Education, Youth and Sports with its registered office at Karmelitská 529/5, 118 12 Praha 1, Czech Republic.
If the fulfilment of the conditions for admission to study is verified using the results of the National Comparative Examinations, the personal data of applicants for study are processed by www.scio.cz, s.r.o., on the basis of a processing contract with the BUT.
Rights of data subjects
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data (he/she can request information as to which personal data relating to him/her are being processed), rectification and erasure of personal data and restriction of processing. A data subject has the right to object to processing and the right to portability of personal data.
A data subject can deliver the requests to exercise the rights specified in the preceding sentence in person to the filing department of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via electronic mail to [email protected]. The aforementioned request will be assessed and dealt with in accordance with GDPR and other applicable legal regulations.
A data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, stating that the processing of his/her personal data violates GDPR. Contact details of the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, electronic filing: [email protected]
Information on personal data controller
The personal data controller, i.e. Brno University of Technology with its registered office at Antonínská 548/1, 602 00 Brno, Czech Republic, Id. No.: 00216305, Tax Id. No.: CZ00216305, is a public higher-education institution established through a law. In its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation). In connection with the effect of the above specified regulation (hereinafter the “GDPR”), Brno University of Technology appointed Mgr. Lucie Schimmelová to be the data protection officer. You can contact the data protection officer at the registered office of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via e-mail: [email protected].
Information on the processed personal data relating to the students
For the purposes of the admission procedure, the data controller processes the following personal data relating to the data subjects, i.e. the students:
For the purposes of keeping a register of students, the following personal data are also processed in accordance with the Act on Higher Education Institutions:
Information on the duration of personal data processing
Information regarding the students kept in the register of students are subject to archiving as specified in the Act on Higher Education Institutions, and they will therefore be stored permanently in the paper or electronic information systems of BUT; identification data specified in paragraphs (f) and (g) for the maximum of 1 year from termination of studies. Information on the student’s bank account number will be processed for the maximum of 10 years from the last payment by BUT to the relevant account.
Lawfulness of personal data processing
Personal data are processed on the basis of law (e.g. Sections 50, 57 and 80 of the Act on Higher Education Institutions and amending and supplementing other laws (Act on Higher Education Institutions), as amended), except for the data specified in paragraphs (f) and (g), where the legal ground for processing of personal data consists in the legitimate interest of the data controller following from the necessity to communicate with the students (for example to communicate the system access information). Further, the data controller has legitimate interest in an unambiguous internal identification of individuals (students and employees) both within BUT and with regards to external entities (place of birth, BUT identification number and the number of the student identity card), in particular when it is not possible to use a different identifier in accordance with law.
Transfers of personal data
Pursuant to Section 87 (1)(i) of the Act on Higher Education Institutions, personal data are transferred to the recipient, i.e. the Ministry of Education, Youth and Sports with its registered office at Karmelitská 529/5, 118 12 Praha 1, Czech Republic. If a student requests the issuance of an ISIC card, his/her personal data in the following scope: name, surname, date of birth, photography, validity, licence number, and the name of the education institution are processed by GTS ALIVE s.r.o., Id. No.: 26193272, with its registered office in Prague 1, at Letenská 118/1, Postal Code 11800, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 78560 under the terms and conditions available at http://www.isic.cz/o-nas/pravni-dokumenty/zasady-ochrany-osobnich-udaju/
Rights of data subjects
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data (he/she can request information as to which personal data relating to him/her are being processed), rectification and erasure of personal data and restriction of processing. A data subject has the right to object to processing and the right to portability of personal data. A data subject can deliver the requests to exercise the rights specified in the preceding sentence in person to the filing department of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via electronic mail to [email protected]. The aforementioned request will be assessed and dealt with in accordance with GDPR and other applicable legal regulations.
A data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, stating that the processing of his/her personal data violates GDPR. Contact details of the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, electronic filing: [email protected] .
Information on personal data controller
The personal data controller, i.e. Brno University of Technology with its registered office at Antonínská 548/1, 602 00 Brno, Czech Republic, Id. No.: 00216305, Tax Id. No.: CZ00216305, data box: yb9j9by, is a public higher education institution established through a law. In its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation). Brno University of Technology (hereinafter “BUT”) appointed Mgr. Lucie Schimmelová to be the data protection officer. You can contact the data protection officer at the registered office of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via e-mail: [email protected].
What personal data do we process and for what purpose?
In order to keep in touch with you, communicate with you and send you information about current events at the BUT, we process the following personal data: name, surname, degree(s), year of birth, faculty, programme, specialisation (formerly field of study), year of graduation, diploma number, BUT ID, private e-mail address.
Do we process your personal data in accordance with legal regulations?
Yes, we process all your personal data in accordance with the applicable legislation. The BUT has your personal data from the time of your studies and will continue to process it in accordance with Act No. 111/1998 Coll., on Higher Education Institutions and on Amendments and Supplements to Other Acts (Higher Education Act), as amended, for the purpose of maintaining the documents for the student register and for archiving purposes in the public interest. However, for communication with you, the BUT only needs to process the above-mentioned scope of personal data, and we only ask you to provide your private e-mail address; we may use personal data from the period of your studies to maintain the list of graduates (compatibility of purposes is ensured). The legal basis for such processing is the legitimate interest of the BUT to stay in contact with its alumni.
How long will we process your personal data?
We will process your personal data in the BUT's paper and electronic information systems indefinitely, but you will have the opportunity to refuse communication in each individual communication (opt-out principle). If you refuse communication, we will stop processing your personal data for the purpose of communicating with you.
Will we pass on your personal data to anyone?
We will not transfer your personal data processed for the purpose of communicating with you outside the BUT.
Rights of data subjects and how to exercise them
A data subject has the right to request from the personal data controller (hereinafter also the “data controller”) access to personal data, rectification and erasure of personal data and restriction of processing. A data subject further has the right to object to processing and the right to portability of personal data.
A data subject can deliver the requests to exercise the rights specified in the preceding sentence in person to the filing department of BUT at Antonínská 548/1, 602 00 Brno, Czech Republic, or via electronic mail to [email protected]. The aforementioned request will be assessed and dealt with in accordance with GDPR and other applicable legal regulations.
A data subject has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, stating that the processing of his/her personal data violates GDPR. Contact details of the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, electronic filing: [email protected].
Don't hesitate to contact us and we will be happy to answer them.
Copyright © 2026, US-MBA | Webdesign by H&H Solutions