Processors and recipients of personal data

In order to ensure the efficiency and professionalism of the processes, our company may disclose your personal data to its employees or contractual partners as processors of personal data (based on a contract for the processing of personal data or other legal act) or to contractual partners as joint controllers of personal data (based on a contract on the mutual rights and obligations of joint controllers or other legal act) or to another data controller as recipients of personal data in justified cases.

For our contractual processors of personal data, we require a similar organizational and technical standard of personal data protection as we have set uniformly for the entire CEZ Group, including compliance with the contractual terms and conditions relating to the processing of personal data (e.g. the obligation to use the personal data in question exclusively for the purposes for which it was transferred to them, the prohibition of sharing the transferred personal data with other processors of personal data without our prior consent, etc.).

We verify compliance with our requirements for the processing of the personal data transferred with the contractual processors concerned before entering into a contract for the processing of personal data (or other legal act), during the term of the contract, and after its termination (in particular as regards the deletion of the personal data transferred, etc.).

Personal data processors

CATEGORIES OF PROCESSORS	ACTIVITY
Security agencies	Ensuring the protection of life, health and property (through external security agencies).
Other CEZ Group companies	ČEZ Distribuce, a. s., is one of the companies of the ČEZ Group and to ensure quality services, it also uses cooperation with its parent company and other subsidiaries, which are listed in more detail on the website Skupina CEZ.
Suppliers or service providers	E.g. contractors of project documentation or implementation of energy structures including related measures, suppliers of CCTV systems, persons carrying out control of consumption points, companies providing management and archiving of contracts and related documents.
Holders of electricity trading licences	Exercise of the licensed activity of electricity trader.
Marketing and communication	Provision of public communication, including the implementation of promotional events, communication materials and marketing research.
Recruitment agencies	Providing recruitment and selection of suitable job applicants.
IT services and software suppliers	Development and maintenance of relevant IT systems, websites, etc.
Postal and courier services	Postal services including remittance delivery, as well as parcel post and courier services.
Legal services and consultancy	Provision of legal services and advice.
Experts and appraisers	Provision of expert and valuation services.
Authorised body	Acting on behalf of the principal (in this case ČEZ, a. s.) on the basis of a proxy or contract.

 

Recipients of personal data

Your personal data may be transferred to third parties who are entitled to receive such personal data. These include, for example, tax, administrative or regulatory authorities. In such cases, we transfer data on the initiative of the requesting institutions, which are entitled to request information about you and we only provide your data if we are obliged to do so by the relevant legislation. However, our company may also provide your personal data to these authorities at its own discretion if it suspects that a crime or offence has been committed (e.g. in the case of detected unauthorised consumption of electricity).

In particular, our company transfers personal data to the following recipients:

• Energy Regulatory Office
• Market operator OTE, a.s.
• Labour Office of the Czech Republic
• Law enforcement authorities (courts, prosecutors and the Police of the Czech Republic)
• Providers of occupational health services
• Companies providing insurance and claims handling services
• State Labour Inspection Office
• National Security Authority
• National Cyber and Security Information Agency