Personal data is processed for the purpose of detecting illegal or other unfair practices and ensuring an appropriate response to such practices. The legal basis for such processing is the protection of the legitimate interests of České dráhy, a.s. (in particular, defence against financial loss, damage to reputation or criminal-law liability) and protection of the life, health and dignity of those against whom the unlawful or other unfair practices are directed.

The personal data provided is rigorously protected by means of organisational and technical measures. Access to personal data is restricted to designated persons of České dráhy, a.s. only.

The personal data collected is processed and stored only in the territory of the Czech Republic. Personal data is stored for the necessary period of time resulting from applicable legal regulations.

In accordance with the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) and related legal regulations, České dráhy, a.s. ensures protection of the personal data provided by you in connection with the application of your notification through the individual lines of the notification system. The information on how to exercise your rights in the field of personal data can be found at this link under the heading “Customer Privacy Policy”.