Privacy Policy
Our organization respects individual privacy and upholds the protection of personal data.
Organization Name:
PONNY KIDS kindergarten s.r.o.
Information provided by the controller
I. Purpose of the document
he purpose of this document is to establish procedures for the collection, storage, and protection of personal data, as well as access to and handling of such data, in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of natural persons concerning the processing of personal data and the free movement of such data, as well as applicable legal regulations.
II. Identity and contact details of the personal data controller
Name: PONNY KIDS kindergarten s.r.o.
Postal address: Krondlova 913/1, 616 00 Brno
Phone number: +420 608 417 232
Email address: info@ponny-brno.cz
Data box ID: inghjf3
Company registration number (IČ): 26259451
III. Contact details of the Data Protection Officer
Our organization (see point II.) has appointed a Data Protection Officer in accordance with personal data protection legislation.
Data Protection Officer:
Mgr. Martina Drtílková MBA, Kindergarten Director
Email: martina@ponny-brno.cz
Phone: +420 608 417 232
IV. Principles of personal data processing
We process personal data according to the following principles:
- Lawfulness, fairness, transparency
- Purpose limitation – personal data is processed solely for the purpose for which it was obtained from you
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability and proof of compliance
- Rights and responsibilities
V. Lawfulness of personal data processing
Any personal data processed by the organization is processed lawfully, either based on legal requirements (statutory regulation) or with the consent of the individual whose data is being processed.
Where consent is necessary for the processing of personal data (e.g., for a child, their legal guardian, or an employee), such consent must be informed, specific, and written. Processing of personal data may only take place once consent has been obtained. The written consent is stored for the entire duration of data processing.
Personal data processed based on the consent of legal guardians:
- Lists of students participating in school events
- Names of persons authorized to pick up the child from kindergarten, including contact information
- Contact information for legal guardians (if different from the child’s address)
- Photographs used for promoting or enhancing interest in kindergarten attendance
- Videos and photographs taken at school events used for promoting the kindergarten on social media
- Display of students’ artwork and similar creations at exhibitions, events, and on social media
Personal data processed based on the Education Act:
- School registry
- Documents related to support measures for students
- Documents related to child protection services
Personal data processed based on communication with parents and for informational purposes:
- Lists of participants for school and extracurricular activities for service providers
- Information published by the school in the media – school website, press, promotional materials
- Contact information for legal guardians and other individuals involved in the child’s education (e.g., for picking up the child from school)
- Sensitive personal data voluntarily provided by the child’s legal guardians to ensure specific needs (e.g., dietary restrictions, health, family background, cultural customs)
Personal data processed as part of advertising campaigns:
- As part of our advertising campaigns, we collect the first and last name of the kindergarten applicant, as well as the first and last name of the legal guardian, their email address, and phone number, for the purpose of further communication and providing information about our kindergarten."
VI. Rights of data providers
The school, represented by the data controller (the director), is responsible for processing personal data of other entities. This responsibility cannot be transferred to another entity. To fulfil this responsibility, technical and organizational measures are implemented to protect personal data. The school processes only the personal data necessary for its activities and retains it for the minimum required period.
You have the right to:
- The right to be informed
- The right to access your personal data
- The right to rectify personal data
- The right to erase personal data unless processing is subject to legal obligations
- The right to object
- The right to data portability
- The right to withdraw consent to the processing of personal data
- The right to lodge a complaint with the supervisory authority
How do we protect your data?
We take maximum care to protect the personal data that we receive from you, your children, or other target groups. The personal data you provide is stored on our work devices with restricted access, located in secure areas.
There is no transfer of data to third parties or to countries outside the EU.
Data retention periods:
School registry and student documentation: These data are usually stored for the duration of the child’s attendance at the kindergarten and thereafter for the period specified by educational laws (in the Czech Republic, this is a minimum of 45 years after the completion of school attendance according to Regulation No. 364/2005 Sb.).
Consents to the processing of personal data: These data are stored for as long as the purpose of processing remains valid. Once the purpose ends (e.g., the child stops attending the kindergarten and the promotional or school event concludes), consent is withdrawn, and personal data is deleted.
Personal data related to employees: These data are stored for the duration of employment and for the necessary period after employment to meet legal obligations (e.g., for tax and labor law purposes, typically 10 years).
Health records and sensitive personal data: These data are stored for as long as they are necessary to ensure the safety and health care of the child. After this period, they are disposed of in accordance with GDPR.
CCTV data (if applicable): Recordings are retained only for the necessary period (usually a few days to weeks).
In Brno, September 1, 2024
Mgr. Martina Drtílková MBA, Kindergarten Director
