Processing of personal data

According to the General Data Protection Regulation (GDPR) Proper processing of personal data is very important for our company. That is why we place great emphasis on their protection. Hereby, we would like to provide you with detailed information about why and for what purposes we process personal data, about the rights you have in connection with their processing, as well as other information that may be important in connection with the processing of personal data.

We would like to assure you that in the PREVENT group we follow strict rules determining which employees have access to your personal data and which personal data can be processed.

Please familiarize yourself with the information below that we have prepared for you in connection with the processing of personal data.

Administrator and processor of personal data

A personal data controller is an entity that alone or jointly with another determines the purposes and means of personal data processing. In the case of PREVENT online applications and services, the administrator of personal data is the employer/organization that manages personal data in order to ensure the safety and health protection and occupational health services of data subjects. PREVENT is a processor of personal data that it processes when providing professional consulting services and online applications based on a contract with the administrator.

Personal data protection officer

PREVENT has appointed a data protection officer who oversees the proper processing of personal data (the so‑called DPO). Depending on your preferences and possibilities, you can contact us in different ways:

by e‑mail gdpr@prevent.cz
in writing at the address PREVENT s.r.o., Březiněveská 3, 182 00 Prague 8

You can contact the DPO with questions related to the processing of your data and exercise your rights to the protection of your personal data.

Purpose of personal data processing

The purpose of processing personal data when providing PREVENT services is:

ensuring training of employees and other persons as determined by the administrator;
providing advice and supervision in the field of safety and health protection at work and in the provision of occupational health services;
ensuring the investigation of the causes and reporting of occupational accidents to authorities and institutions according to the relevant legal regulations;
providing occupational medical examinations for the purpose of assessing health fitness to work as part of occupational medical services;

If special categories of your personal data (usually health‑related data) will be processed, their content will always be minimal to fulfill the purpose required by law. Processing may be carried out on the basis of the following legal titles:

processing is necessary for the fulfillment of obligations in the field of labor law;
processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the employee's working abilities, medical diagnostics, provision of health or social care, etc.;
processing is necessary for reasons of public interest in the field of public health, such as protection against serious cross‑border health threats or ensuring the safety of healthcare, medicinal products or medical devices,
processing is necessary for the determination, exercise or defense of legal claims;
processing is necessary for statistical purposes;
processing is necessary to protect the vital interests of the data subject;
consent you may give us.

Category of personal data

This section describes the categories of personal data processed by PREVENT, including examples and purposes of processing:

Basic identification and contact information
Within educational online applications (INSTRUCTOR, EDUNIO) we use first name, last name and e‑mail address for user identification purposes.
When providing occupational health services, we also process date of birth, social security number and residential address for the purposes of records required by the relevant legal regulations.
Special categories of personal data
When providing occupational health services and when reporting occupational accidents, we also process special personal data required by relevant legal regulations (data on health status).

Period of storage of personal data

We keep your personal data only for the duration of the contractual relationship with the administrator or for the time required by law.

Other processors and recipients

Personal data processed by PREVENT may be provided for further processing to external providers of accounting services, legal services, occupational health services, the specific categories of which will be communicated to the data subjects upon request. Due to legitimate interest, PREVENT may make personal data available to authorized contractual partners in the field of IT services and technologies, marketing services, consulting services, certification services, the specific categories of which will be communicated to data subjects upon request. Due to the necessary transmission, backup and archiving of electronic data, personal data may be provided outside the EU (verified cloud services with servers outside the EU guaranteeing a high level of security). PREVENT provides personal data to relevant public administration bodies or other entities authorized to process personal data for the purpose of state supervision, prevention, investigation, detection or prosecution of criminal offenses or execution of sentences, including protection against threats to public safety and their prevention.< /p>

Automated processing of personal data

As part of the evaluation of knowledge in PREVENT educational online applications, the results are automatically communicated.

Who has access to data

Access to your personal data is only available to persons who need it to achieve the purpose for which the personal data is processed. These persons are properly trained in their protection and are required to observe confidentiality.

Exercise of subjects' rights

In case of need to exercise the rights of data subjects in the sense of GDPR, questions or other suggestions, contact us at gdpr@prevent.cz