The Arnošt Lustig Foundation, ID No.: 095 49 609, with its registered office at Drtinova 557/10, Smíchov, 150 00 Prague 5, registered in the Foundation Register maintained by the Municipal Court in Prague, Section N, File 1851, as the administrator, is interested in strict compliance with legal regulations, which also include activities aimed at ensuring the fulfillment of obligations arising for the Foundation from Regulation (EU) No. 216/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

When processing personal data, the Foundation complies with applicable laws and internal guidelines that define when, to what extent, for how long, and under what conditions the Foundation will process personal data.

The Endowment Fund always processes personal data only to the extent necessary for the given purpose. The purpose of personal data processing is to fulfill legal obligations for the period specified by relevant legal regulations, if necessary to fulfill a contract concluded with the data subject, or if the Foundation has a legitimate interest in processing personal data (e.g., recording donations, providing information about the Foundation’s activities, audio-video or photo recordings of events organized by the Foundation for the purpose of recording the Foundation’s activities and communicating them to a wider audience, e.g., on social networks). The Foundation is entitled to process this data without the express consent of the data subject. In other cases, such as sending out a newsletter about the Foundation Fund program, the consent of the data subject is required.
If the consent of the data subject is required for the processing of personal data, the personal data will not be processed before the data subject gives their unambiguous consent to the processing of personal data and receives comprehensible information about the conditions of such processing, in particular the reason, duration, and method of processing. The data subject will also always be informed of their rights, including the right to (i) request the correction of personal data, (ii) their deletion, (iii) object to their processing, (iv) portability of personal data, (v) lodging a complaint with a supervisory authority, (vi) restriction of processing of personal data and rights (vii) obtain a copy of the personal data being processed. Such instructions are provided below.

In any case, however, any personal data is processed carefully, securely, only for the specified purpose and for the specified period of time, and only in the specified manner.

Every data subject has these basic rights:

• The right to request information from the Foundation Fund as to whether and, if so, what personal data the Foundation Fund processes.
• The right to request an explanation from the Foundation regarding the processing of personal data.
• The right to request access to this data and have it updated or corrected, or restricted, and the right to object to its processing.
• Under the conditions set out in the GDPR, the data subject has the right to data portability.
• The right to withdraw your consent at any time, for example by sending an email or letter to the contact details provided here. The withdrawal of consent by the data subject shall not affect the lawfulness of processing based on consent before its withdrawal.
• The right to request the Foundation to delete your personal data under the conditions set out in the GDPR
• The right to contact the Foundation or the Office for Persoal Data Protection in case of doubts about compliance with obligations related to the processing of personal data.