Processing and protection of personal data in the MUNI HELPS application
In accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Masaryk University informs data subjects about the conditions under which their personal data is processed in the mobile and web application „MUNI HELPS“ (hereinafter referred to as „application“).
Personal data controller
The controller of the personal data of the data subjects, in other words, the one who determines the purpose and means of processing personal data, carries out the processing and is responsible for it, is
Masaryk University, Žerotínovo nám. 617/9, 601 77 Brno,
IČO: 00216224, DIČ: CZ00216224,
Data box ID: 9tmj9e4.
Masaryk University (hereinafter referred to as MU, the controller) is a public university-type higher education institution in accordance with Act No. 111/1998 Sb., to regulate higher education institutions and to change and amend other laws („the Higher Education Act“). Within the context of its main mission, it freely and independently carries out educational and related scientific and research, development and innovation, artistic or other creative activities and related activities.
Data protection officer
The data protection officer of Masaryk University is Iva Zlatušková, e-mail adress poverenec@muni.cz, telephone number +420 549 49 1030, +420 603 289 580, personal website https://www.muni.cz/lide/2351-iva-zlatuskova.
You can contact data protection office, if you have any questions or requests regarding the processing and protection of personal data within the application or to exercise your rights.
Personal data processing policy
Masaryk University processes personal data only to extent necessary for the funcionality of the application. Personal data is protected and secured to the maximum extent possible according to the standard of the controller and in accordance with applicable law.
In processing, the controller complies with all the principles for processing personal data according to the General Regulation. The principles and rules for processing personal data at Masaryk University are regulated by MU Directive No. 1/2018 Personal Data Processing and Protection.
Purpose of processing personal data
The purpose of the processing is to mediate contact between the volunteer and the person receiving help, which may be a natural or legal person, and to ensure communication between the volunteer, the person receiving help and the volunteer centre.
Categories of persons whose personal data are processed
Masaryk University processes personal data of the following categories of persons – data subject in the application:
in the mobile application personal data of volunteers, which are
- Employees. i.e. persons in the employment relationship with MU,
- Students, i.e. persons participating in all forms of education at MU,
- Natural persons with no employment or other relationship with MU,
On the web application personal data of natural persons – persons receiving help. Masaryk University processes on the web application personal data of natural persons – persons receiving help.
Categories of personal data processed
Masaryk University processes the following personal data provided in the mobile application by individual volunteers:
First name, surname, telephone number, primary electronic address, secondary electronic address if any, residential address, or temporary residential address if any, as well as school(s), faculty(ies) and field(s) of study if the volunteer is a student.
Masaryk University processes the following personal data provided by individuals – persons receiving help – via the web application:
Name, surname, residential address, telephone number, electronic address.
Legal grounds for processing personal data
The processing of personal data in the application is based on the consent of the data subjects.
Transfer of personal data
In order to fulfil the purpose of the application, i.e. to provide volunteer assistance, MU transfers the personal data of volunteers (data subjects) provided in the application to third parties – persons receiving help - i.e. mainly to health care institutions and social service institutions.
In the context of cooperation with central state authorities or self-governing territorial units (regions), or their supplier or service organisations or subcontracting companies, the use of the application may be extended to the regional or national level on a contractual basis.
The transmission of volunteer data to persons receiving help is also done via SMS messages. During the sending of the messages, the volunteer's personal data in the scope of: name, surname, telephone number and the personal data of the person receiving help in the scope of: telephone number, are shared with KONZULTA BRNO. MU has a processing contract with KONZULTA BRNO which adequately covers the requirements for the security of personal data processing under the General Regulation.
In order to increase the security of the app and verify the volunteer's identity, the app includes verification of the volunteer's phone number. For the verification, the volunteer's personal data in the following scope: telephone number, is shared with KONZULTA BRNO. MU has a processing contract with KONZULTA BRNO that adequately covers the requirements for the security of personal data processing under the General Regulation.
In order to record the addresses of volunteers and persons receiving help, to enable their filtering by city districts, postcodes, municipalities and regions and to display them on maps (anonymised for the public), the application uses the automatic address whisperer ARCDATA from the company ESRI. Personal data is shared with this company in the following scope: residential, or temporary residential address if any, of volunteers and persons receiving help.
In the case of volunteer coordinators, the following: IP address, type of device and/or browser. MU has a processing contract with ESRI which adequately covers the requirements imposed by the General Regulation on the security of the processing of personal data.
Retention period of personal data
Personal data is only retained for the duration of the purpose for which consent to processing was given:
- volunteer: for three years from the last activity of the volunteer within the MUNI HELPS volunteer centre, i.e. from the last login to the application,
- person receiving help: for three years from the date of the last request for help.
Rights of the data subject
The data subject has the right under the General Data Protection Regulation:
- to withdraw consent to the processing of personal data,
- to request access to their personal data,
- to request their correction or erasure,
- to request restriction of processing, and
- to object to the processing of personal data concerning him or her.
Exercising the rights of the data subject
The data subject is entitled to exercise his or her rights under the General Data Protection Regulation against the controller, either
(a) by written request with a certified signature sent to Masaryk University, Data Protection Officer, Žerotínovo nám. 9, 601 77 Brno, or
(b) by sending the request to the Masaryk University data box: 9tmj9e4, or
(c) by sending the request in the form of an e-mail message from the MU institutional e-mail address to: poverenec@muni.cz.
The data subject is entitled to exercise his/her right to withdraw consent to the processing of personal data by sending a message to the electronic address pomoc@muni.cz or by clicking the "Delete my account (revoke consent)" option in the application.
Right to lodge a complaint with the supervisory authority
The data subject has the right to submit a request, complaint or suggestion concerning the processing of personal data to the supervisory authority, which is
The Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7,
Data box ID: qkbaa2n,
telephone number +420 234 665 111, website www.uoou.cz, electronic address posta@uoou.cz.
Brno, 1 November 2021