Web application E-ZAK which is running on the https://zakazky.bvk.cz domain is an electronic tool within the meaning of Act No. 134/2016 Coll. on public procurement, as amended (hereinafter referred to as "PPA"). All personal data are processed solely for the purpose of preparing and processing the procurement procedures and the resulting performance in accordance to PPA and the internal directives of the contracting authority, in accordance with regulation No. 2016/679 of the European Parliament and of the Council (EU) on the protection of natural persons with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (General regulation on the protection of personal data) (hereinafter referred to as "GDPR").
Brněnské vodárny a kanalizace, a.s.
603 00 Brno
639 00 Brno
In the E-ZAK electronic tool, personal data is processed for purposes of
No sensitive personal data is processed within the meaning of GDPR Article 9.
There is no automated decision making, including profiling within the meaning of GDPR Article 22.
Personal data is retained in E-ZAK system
The primary source of personal data is the data subject under the registration or activating a user account, within managing subject user profile, or by using an electronic signature.
Other sources of personal data can be:
Personal data may also be processed by other processors for the purposes described above, but only with the consent and on request of the Controller.
Personal data may also be transmitted upon a legal request to third parties, which have the legal authority to request the transmission of the personal data.
Personal data are not transmitted to third countries or international organizations by the E-ZAK system.
Right of correction is primarily provided by the user account administration - each user can modify or add personal data within his or her user profile. In the case of incomplete pre-registration, it is possible to contact the Controller or the Processor by e-mail (contact is provided at the beginning of this document).
Right to erasure ("right to be forgotten") is primarily provided by the user account administration - each user can use the account deletion functionality within his or her user profile after signing in (users with company administrator permissions can also delete other user accounts within their organization). In case that there is another legal reason for processing (a record of an electronic act performed by this user in the procurement process, where the law requires an unambigous identification of the person who performed the electronic act), personal data will be erased after a specified period of time. Otherwise, the user's personal data will be erased immediately. The right to withdrawal of previously given consent for processing personal data is realized in the same way.
Right to have the processing restricted is primarily provided by the user account administration - each user can delete the selected personal data within his or her user profile after signing in. In the case of incomplete pre-registration, it is possible to contact the Controller or the Processor by e-mail (contact is provided at the beginning of this document).
Right to data portability is primarily provided by the administration of user accounts - each user can use the export functionality in his user profile after signing in.
Right to object against the processing of personal data relating to subject, to the address of the Controller (contact is provided at the beginning of this document).
Right of data subject to have access to personal data is ensured by this document and the above mentioned procedures and functionalities.
Right to lodge a complaint with a supervisory authority, which is The Office for personal data protection.
Information is provided in a separate article Cookies.