In relation to the General Data Protection Regulation (“GDPR”) entering into force, we
hereby provide you with the information on how personal data is processed in CRS.

I. Personal data controller
The personal data controller is Christian Refugee Service, z. s., identification No. 08634823,
registered office at Nádražní 42/4, 737 01 Český Těšín (hereinafter “CRS”).
In CRS, personal data may be processed by any employee, as well as a volunteer.

II. Personal data processed by CRS
– Name and surname
– Contact details (telephone number, e-mail, etc.)
– Date of birth
– Sex
– Address of residence
– Type of residence
– Travel document number, other related numbers, e.g. visa or residence permit card
number, number of another identity document for foreign nationals
– The client’s registration number, case number in administrative or judicial proceedings
– Data on employment and education (including other related data)
– Data on marital status and the number of persons living in a common household

II. 2 A special personal data category comprises of data that is absolutely necessary in
special cases, in particular, while providing legal services, for which this data is essential
– Data on origin (racial, ethnic)
– Data on political opinion
– Data on religion
– Data on sexual orientation
– Other substantial data that may be essential for legal appraisal of the personal situation

III. Purpose of personal data processing and retention
CRS, as a controller, will receive, process and retain personal data for following purposes:
– Entering into a contract for the provision of services
– Legitimate interests of the organisation
– Compliance with a legal obligation
– Consent given by the subject
– Disclosure to third parties, who are mainly cooperating entities and institutions, which
require information in relation with their support provided for CRS activities, under
conditions set down in advance.

IV. Consent to providing personal data
The personal data subject’s consent to personal data processing and retention is given if:
 The subject requests CRS to provide some of its services, regarding processing of the
data given to CRS by the client himself/herself or, alternatively, data obtained by CRS
in a legitimate way while providing services (typically, when consulting relevant files,
requesting further information from state authorities etc.)
 The subject establishes cooperation with CRS (cooperating organisations, individuals,
volunteers, supporters, donors etc.), applying the consent especially to providing
contact details and identification data and other necessary information
 The subject requests CRS to send regular e-mail information

V. Term of retention
The controller will retain personal data for as long as necessary, always in connection with
the services being provided. At longest, the data will be retained for 10 years or for a term
relevant to another CRS’s obligation.

VI. Manner of retention
Personal data will be processed and retained:
– In electronic form (via computer devices, applications etc.)
– In written form

VII. Rights of the data subject (i.e. particularly clients, applicants for a job or volunteering
in CRS, CRS’s employees, CRS’s co-workers and volunteers, CRS’s regular e-mail
subscribers, donors and regular supporters of CRS) to information and access to personal

Every personal data subject is entitled to:
 access to his/her personal data, rectification or erasure of the data, or restriction of
the data processing,
 request information on what personal data is being processed about himself/herself,
 right to request an explanation regarding processing of his/her personal data,
 object to processing, as well as the right to data portability (i.e. the right to receive
his/her personal data from the controller in a commonly used format, in electronic or
paper form depending on their request),
 informally request information on processing of their own personal data and to
receive this information without undue delay,
 revoke his/her consent to processing of their personal data at any time, also in an
informal manner (via e-mail, telephone, in person), without having to give any reason
(This right does not apply to circumstances implying a legal obligation to process the
data on the part of CRS.),
 in case of doubt about compliance with the obligations relating to personal data
processing, the right to address CRS or the Office for Personal Data Protection.

VII. Concluding information
CRS declares that while processing personal data, no personal data is processed for purposes
different from providing services for clients, maintaining active relationships with donors
and supporters and purposes CRS was established for (i.e., for example, cooperation with
church communities, experts, volunteers, education and raising awareness etc.), in each case
in a manner protecting the rights of the data subjects as much as possible. Any other interest
of CRS for personal data processing always involves an explicit consent of the data subjects.
Personal data processing is neither automated nor includes profiling.

In Český Těšín, on 2 May 2021
On behalf of CRS: Mgr. Ilona Machandrová, chairman