Regulations

Information on the Processing of Personal Data in Connection with the Provision of Library Services

Information about the Data Controller

The data controller, Brno University of Technology, Antonínská 548/1, 601 90 Brno, Company ID No.: 00216305, VAT ID No.: CZ00216305, is a public higher education institution established by law. In the course of its activities, Brno University of Technology processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and repealing Directive 95/46/EC (General Data Protection Regulation).

In connection with the entry into force of the above-mentioned Regulation (hereinafter referred to as the “GDPR”), Brno University of Technology (hereinafter also referred to as “BUT”) has appointed a Data Protection Officer, who can be contacted at the registered address of BUT, Antonínská 548/1, 601 90 Brno, or by email at poverenec@ro.vutbr.cz. Additional contact details for the Data Protection Officer are available at www.vutbr.cz in the Personal Data Protection section.

For the purpose of providing library services, the data controller processes the following personal data of data subjects (students, employees and external users of library services):

  • First name, surname and academic titles
  • Permanent residential address or, where provided voluntarily by the data subject, a correspondence address
  • Date of birth
  • Email address
  • In the case of foreign nationals, also gender, nationality and address in the Czech Republic

Personal data will be processed for the duration of studies, employment at BUT or registration as an external library user. After this period, personal data will be retained for a maximum of one year, provided that the data subject has no outstanding obligations to BUT in connection with the provision of library services. If such obligations exist, personal data will be retained until they have been settled.

The legal basis for the processing of personal data is the performance of a contract.

In connection with the operation of its library information systems, BUT uses the services of Ex Libris, which acts as a data processor on behalf of BUT as the data controller. For this reason, the personal data listed above may be processed both within the European Union and in third countries. The legal relationship between BUT and Ex Libris is governed by a contract, an addendum to which requires the data processor to comply with the provisions of the GDPR.

Rights of Data Subjects

Data subjects have the right to request access to their personal data from the data controller (including information about which of their personal data are being processed), the right to rectification or erasure of their personal data, and the right to restriction of processing. Data subjects also have the right to object to the processing of their personal data and the right to data portability.

Requests to exercise the above rights may be submitted in person to the Registry Office of BUT at Antonínská 548/1, 601 90 Brno, or by email to epodatelna@ro.vutbr.cz. Such requests will be assessed in accordance with the GDPR and other applicable legislation.

Data subjects also have the right to lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection, if they believe that the processing of their personal data violates the GDPR. The contact details of the supervisory authority are: Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz.

Information on the Processing of Personal Data in Connection with the Provision of Library Services

Laws and Regulations

Act No. 257/2001 Coll. on Libraries and the Conditions for the Provision of Public Library and Information Services (Library Act), dated 29 June 2001

Decree No. 88/2002 Coll. – Decree of the Ministry of Culture Implementing Act No. 257/2001 Coll. on Libraries and the Conditions for the Provision of Public Library and Information Services (Library Act), dated 21 February 2002

Act No. 121/2000 Coll. on Copyright, Rights Related to Copyright and on the Amendment of Certain Acts (Copyright Act), dated 7 April 2000

Act No. 81/2005 Coll. Amending Act No. 121/2000 Coll. on Copyright, Rights Related to Copyright and on the Amendment of Certain Acts (Copyright Act), dated 21 January 2005

Act No. 106/1999 Coll. on Free Access to Information, dated 11 May 1998

Act No. 110/2019 Coll. on the Processing of Personal Data, dated 12 March 2019

General Data Protection Regulation (GDPR)