Information on the processing and protection of personal data – for users of the As ****************************************************************************************** * ****************************************************************************************** In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council 2016 on the protection of natural persons with regard to the processing of personal data a movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulatio Institute of Language and Preparatory Studies of Charles University (ILPS CU) hereby infor about the conditions under which personal data are processed.   1.By completing and submitting the form in the ASTRA app, the user, as the data subject, c she understands these terms and conditions for the processing and protection of personal she expresses his/her consent to their wording and that he/she accepts them in their ent 2.The provision of personal data by the user is not mandatory, but it is not possible to a app without providing personal data. 3.The controller of personal data is Charles University, Ovocný trh 560/5, 116 36 Prague 1 00216208, VAT no.: CZ00216208, data box ID: piyj9b4 (the " Data Controller") 4.The service provider for the ASTRA app is the Institute of Language and Preparatory Stud University, Vratislavova 29/10, 128 00 Prague 2, ID no.: 00216208, VAT no.: CZ00216208, piyj9b4 ("ILPS CU" or the "Provider"). ILPS CU is a unit of Charles University. 5.Contact details for the Data Protection Officer of Charles University: gdpr@cuni.cz [ UR "mailto:gdpr@cuni.cz"] , phone: +420 771 232 578. 6.The Data Controller processes the following personal data: e-mail address, gender, age c for test, language skills,for the purpose of providing a placement test using the ASTRA for the purpose of sending commercial messages and other marketing activities. 7.The legal basis for the processing of the data referred to in point 6 is a legitimate in Art. 6 1 f) GDPR. The legitimate interest of the Data Controller is the processing of da purposes of the further progress of the examination and research, which, among other thi the continuous quality of the examination and its corresponding content in relation to t examination candidates. The legitimate interest of the Data Controller also includes the personal data for direct marketing purposes. 8.For the performance of the contract, the Data Controller may utilise the services of sub in particular providers of mailing services and webhosting, and transfer the processed p them for this purpose. Subcontractors are bound by the obligation of confidentiality and personal data for any other purpose. 9.Personal data is not transferred outside the EU during processing. 10The Data Controller processes and stores personal data for the period necessary to exerc and obligations arising from the contractual relationship between the Provider and the u exercise of claims under these contractual relationships (for a period of fifteen years termination of the contractual relationship). Data are deleted once this period has expi 11The Data Controller makes automatic individual decisions in connection with the processi data within the meaning of Art. 22 GDPR. 12By filling in the order form, applicants interested in using the Provider's services: 1.consent to the use of their personal data for the purpose of sending online commercial advertising materials, direct sales, market research and direct product offers by the third parties, but not more than once per week, and 2.declare that they do not consider the sending of information under point 12.1 to be un advertising within the meaning of Act. no. 40/1995 Coll., as amended, as the User expl receipt of such information under point 12.1 in conjunction with §7 of Act. no. 480/20 3.The consent granted under this paragraph may be revoked by the user at any time in wri testy@ujop.cuni.cz [ URL "astra-testy@ujop.cuni.cz"] . 13The User has the right to request from the Administrator access to their personal data u GDPR, their correction under Art. 16 GDPR, or the restriction of their processing under The User has the right to have their personal data deleted under Art. 17 1 a), and c) to their portability under Art. 20 GDPR. The User further has the right to object to the pr their personal data under Art. 21 GDPR. 14The User also has the right to file a complaint with the Office for Personal Data Protec event that he/she believes that his/her right to privacy has been violated. 15General information on the processing and protection of personal data at Charles Univers at Personal Data Protection (GDPR) [ URL "https://cuni.cz/UK-9056.html"] . These terms and conditions take effect from 1 December 2023.