UOOU (Czech Republic): Difference between revisions

Latest revision as of 09:34, 17 September 2022

Úřad pro ochranu osobních údajů

Name:	Úřad pro ochranu osobních údajů
Abbreviation :	UOOU
Jurisdiction:	Czech Republic
Head:	Mgr. Jiří Kaucký
Deputy:	Mgr. Josef Prokeš Mgr. Petr Jäger, Ph.D.
Adress:	Pplk. Sochora 27 170 00 Prague 7 CZECH REPUBLIC
Webpage:	uoou.cz
Email:	posta@uoou.cz
Phone:	+420 234 665 111
Twitter:	@UOOUCR
Procedural Law:	n/a
Decision Database:	n/a
Translated Decisions:	Category:UOOU (Czech Republik)
Head Count:	n/a
Budget:	n/a

The Office for Personal Data Protection (Úřad pro ochranu osobních údajů) is the national Data Protection Authority for the Czech Republic. It resides in Prague and is in charge of enforcing GDPR in the Czech Republic.

Structure

https://www.uoou.cz/organizacni-struktura/ds-1063/archiv=0&p1=1059

Procedural Information

Applicable Procedural Law

Information about the law governing the DPA's activity can be found here.

Complaints Procedure under Art 77 GDPR

Complaints are governed by the Administrative Procedure Code.

Ex Officio Procedures under Art 57 GDPR

Information about investigations is available here.

Investigations are governed by the Investigation Procedure Code.

Appeals

As stated here, in accordance with Section 152 of the Administrative Procedure Code, a decision of the DPA may be internally appealed ("rozklad"). The appeal is decided by the Head of the DPA, who may uphold, overturn or amend the contested decision.

It is then not possible to appeal the decision by the Head of the DPA. This decision can then only be challenged by an action before an administrative court (judicial review - on a question of law). In that case, the governing law is the Judicial Administrative Procedure Code, and as a subsidiary act also the Civil Judicial Procedure Code. More information can be found here.

Practical Information

Filing with the DPA

Information about filing with the DPA can be found here (only in Czech).

The webpage states that a complaint must include:

name of the entity that allegedly violates the GDPR
description of the data processing activities that allegedly violate the GDPR
list of the personal data (or at least their categories) processed allegedly in violation of the GDPR
documents/other materials (or their copies) proving the relationship between the Complainant and the entity that allegedly unlawfully processes their data
documents/other materials (or their copies) relating to the allegedly unlawful processing
links/references to available sources (if applicable) that can prove the alleged violations
identification and contact information of the Complainant

The webpage contains a link to a complaint form. It is unclear from the webpage if the DPA requires that this form is always used or if it serves merely as one of the possibilities of filing a complaint.

Known Problems

Data Protection Officers and other Profesionals are registered and organized in association

Spolek pro ochranu osobních údajů, z.s.

www.ochranaudaju.cz

Filing an Appeal

You can help us by filling in this section!

Decision Database

The completed investigations can be found here.

Decisions by the DPA can be found here.

Decisions by the Head of the DPA can be found here.

Statistics

Funding

You can help us by filling in this section!

Personal

You can help us by filling in this section!

Caseload

You can help us by filling in this section!

Fines

You can help us by filling in this section!

Annual Reports

Annual reports of the DPA can be found here.

EU/EEA/UK Data Protection Authorities
Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · Andalusia)· Sweden
Iceland · Liechtenstein · Norway · United Kingdom	EDPS · EDPB

@@ Line 50: / Line 50: @@
 ===Applicable Procedural Law===
-''You can help us by filling in this section!''
+Information about the law governing the DPA's activity can be found [https://www.uoou.cz/o%2Dnas/ds-1059/p1=1059 here].
 ===Complaints Procedure under Art 77 GDPR===
-''You can help us by filling in this section!''
+Complaints are governed by the [https://www.zakonyprolidi.cz/cs/2004-500 Administrative Procedure Code].
 ===''Ex Officio'' Procedures under Art 57 GDPR===
-''You can help us by filling in this section!''
+Information about investigations is available [https://www.uoou.cz/informace%2Do%2Dkontrole/ds-1279/p1=1279 here].
+Investigations are governed by the [https://www.zakonyprolidi.cz/cs/2012-255 Investigation Procedure Code].
 ===Appeals===
-''You can help us by filling in this section!''
+As stated [https://www.uoou.cz/rozhodnuti%2Dpredsedy%2Duradu/ds-3815/p1=3815 here], in accordance with [https://www.zakonyprolidi.cz/cs/2004-500 Section 152 of the Administrative Procedure Code], a decision of the DPA may be internally appealed ("rozklad"). The appeal is decided by the Head of the DPA, who may uphold, overturn or amend the contested decision.
+It is then not possible to appeal the decision by the Head of the DPA. This decision can then only be challenged by an action before an administrative court (judicial review - on a question of law). In that case, the governing law is the [https://www.zakonyprolidi.cz/cs/2002-150 Judicial Administrative Procedure Code], and as a subsidiary act also the [https://www.zakonyprolidi.cz/cs/1963-99 Civil Judicial Procedure Code]. More information can be found [https://www.uoou.cz/o%2Dnas/ds-1059/p1=1059 here].
 ==Practical Information==
 ===Filing with the DPA===
-''You can help us by filling in this section!''
+Information about filing with the DPA can be found [https://www.uoou.cz/chci%2Dpodat%2Dstiznost%2Dna%2Dspravce%2Dnebo%2Dzpracovatele/ds-4454/archiv=0&p1=2611 here] (only in Czech).
+The webpage states that a complaint must include:
+* name of the entity that allegedly violates the GDPR
+* description of the data processing activities that allegedly violate the GDPR
+* list of the personal data (or at least their categories) processed allegedly in violation of the GDPR
+* documents/other materials (or their copies) proving the relationship between the Complainant and the entity that allegedly unlawfully processes their data
+* documents/other materials (or their copies) relating to the allegedly unlawful processing
+* links/references to available sources (if applicable) that can prove the alleged violations
+* identification and contact information of the Complainant
+The webpage contains a link to a [https://www.uoou.cz/assets/File.ashx?id_org=200144&id_dokumenty=44283 complaint form]. It is unclear from the webpage if the DPA requires that this form is always used or if it serves merely as one of the possibilities of filing a complaint.
 ===Known Problems===
@@ Line 77: / Line 93: @@
 ==Decision Database==
-''You can help us by filling in this section!''
+The completed investigations can be found [https://www.uoou.cz/ukoncene%2Dkontroly/ds-5649/p1=5649 here].
+Decisions by the DPA can be found [https://www.uoou.cz/z%2Drozhodovaci%2Dcinnosti%2Duradu/ds-1022/archiv=0&p1=1099 here].
+Decisions by the Head of the DPA can be found [https://www.uoou.cz/rozhodnuti%2Dpredsedy%2Duradu/ds-3815/p1=3815 here].
 ==Statistics==
@@ Line 94: / Line 114: @@
 ===Annual Reports===
-''You can help us by filling in this section!''
+Annual reports of the DPA can be found [https://www.uoou.cz/vyrocni%2Dzprava/ds-2089/archiv=0&p1=2087 here].
 {{DataProtectionAuthorities}}