Skip to Content
CEZ Distribuce

Transfers of personal data to third countries

Our company processes your personal data, either directly or through its contractual processors, primarily in Czechia or in the European Union (hereinafter referred to as the “EU”), where the same conditions of protection and security of personal data processing are set through the GDPR Regulation valid and effective for the entire European Union or the European Economic Area (hereinafter referred to as the “EEA”).

Exceptionally, personal data is transferred to third countries or international organizations. In these cases, prior to the transfer of personal data, we assess whether the selected controller or processor provides appropriate guarantees and conditions, including the enforceability of your rights as a data subject, while assessing the effective legal protection of personal data in that country. Therefore, the transfer of your personal data to third countries or international organizations may only occur if the following conditions are met:

  • The selected third country / international organization has been subject to a decision of the European Commission which has found that the third country / international organization ensures an adequate level of protection of personal data;
  • The selected processor or sub-processor is able to provide appropriate organizational and technical guarantees and in the country of the processor or sub-processor, enforceability of data subjects' rights and effective legal protection of data subjects is ensured.

SUITABLE GUARANTEES INCLUDE THE FOLLOWING:

  1. Legally binding and enforceable instruments between public authorities or public entities;
  2. Binding corporate rules;
  3. Standard data protection clauses adopted by the European Commission;
  4. Standard data protection clauses adopted by the relevant supervisory authority and approved by the European Commission;
  5. Approved code of conduct with binding and enforceable obligations for the processor in the third country to apply appropriate guarantees, including with regard to the rights of data subjects;
  6. Approved certification mechanism with binding and enforceable obligations for the processor in the third country to apply appropriate guarantees, including with regard to the rights of data subjects.