Privacy Statement Regarding the Organization of a Seminar on Critical Infrastructure, Resilience, and New Obligations Across the Supply Chain
(to be held on November 9, 2026, hereinafter referred to as the “Event”)
1. Who Processes Your Personal Data
Your personal data in connection with registration for the Event and its organization is processed by the following independent data controllers:
1. The German-Czech Chamber of Commerce and Industry / Deutsch-Tschechische Industrie- und Handelskammer, with its registered office at Václavské náměstí 795/40, Nové Město, 110 00 Prague 1, Company ID No.: 497 08 210, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. A 8407, tel.: +420 224 221 200, e-mail: info@dtihk.cz, website: www.dtihk.cz (hereinafter referred to as the “Chamber”), acting as the main organizer of the Event, responsible in particular for participant registration, venue arrangements, catering, and the overall organization of the Event; and
2. Ernst & Young, s.r.o., with its registered office at Na Florenci 2116/15, 110 00 Prague 1 – Nové Město, Company ID No.: 267 05 338, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 108716, website: www.ey.com/cs_cz (hereinafter “EY”), acting as a co-organizer of the Event, which is primarily responsible for securing speakers and managing the content of the Event.
The Chamber and EY each process your personal data separately as independent controllers, each for the purposes and to the extent described below. This statement does not establish joint control of personal data or a controller-processor relationship between the Chamber and EY.
Regarding the processing carried out by the Chamber, you may contact Martina Jakl at jakl@dtihk.cz or by phone at +420 221 490 364. Regarding processing carried out by EY (in particular, communications concerning speakers, the content of the Event, and personal data that EY receives from the Chamber pursuant to Section 3 below), you may contact EY directly through the contact person Ivana Švecová, email: ivana.svecova1@cz.ey.com, or through the general contact listed in EY’s Privacy Statement available at https://www.ey.com/en_cz/legal-and-privacy/privacy-statement.
2. What personal data does the Chamber process and for what purposes
In connection with the Event, the Chamber processes participants’ personal data, including first name, last name, email address, phone number, employer (company) name, and job title, for the following purposes:
1. registering the participant for the Event and ensuring their participation;
2. organizing and managing the Event (e.g., securing venues, catering, and accreditation);
3. communicating with the participant regarding the Event, even after it has ended (e.g., sending materials, presentations, and a satisfaction survey); and
4. transferring relevant personal data to EY in accordance with Section 3 below, if necessary for the organizational management of the Event.
The legal basis for this processing is the Chamber’s legitimate interest in the proper organization of the Event and in communicating with its participants (Article 6(1)(f) of the Regulation). The provision of personal data is necessary for registration and participation in the Event; without it, participation in the Event is not possible.
3. Sharing Personal Data with EY
The Chamber will transfer participants’ personal data to EY, including first name, last name, email address, phone number, employer (company) name, and job title, for the purpose of communicating with participants regarding the Event’s program and content, as well as for communication concerning the Event after its conclusion, and for organizing EY’s participation in the Event.
Upon receiving this personal data from the Chamber, EY processes it as an independent data controller based on its legitimate interest in providing organizational support for the Event and ensuring its content (Article 6(1)(f) of the Regulation). EY does not further process or retain this personal data after the Event has ended, unless its retention is necessary to fulfill a legal obligation of EY or unless the participant has provided separate consent for further processing for the purposes of marketing communications or potential future recruitment.
No other categories of personal data are shared between the Chamber and EY beyond the scope described above.
4. Photographs and Video Recordings from the Event
During the Event, the Chamber or EY, as applicable, may take photographs and video recordings to document the course of the Event and for informational purposes. If the processing of photographs depicting a specific individual involves their publication for marketing purposes, the participant’s separate consent is required; details are set forth in a separate consent form, if provided upon registration.
5. Retention Period for Personal Data
The Chamber retains participants’ personal data for the period necessary to handle the organizational aspects of the Event and for the duration of the statute of limitations for any related claims; in cases where required by binding legal regulations, for the period specified by such regulations.
EY retains personal data received from the Chamber for the duration of the preparation and conduct of the Event and deletes it immediately after its conclusion or after the final communication regarding the Event, unless further retention is necessary to fulfill a legal obligation of EY or unless EY has another legal basis for further processing (e.g., consent granted for the purposes of marketing communications or future recruitment).
6. Security of Personal Data
Both the Chamber and EY implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including controlled access to data, secure data transmission, limiting employee access to what is strictly necessary, and secure data storage.
7. Transfer of Personal Data Outside the European Economic Area
As of the date of this statement, the Chamber does not anticipate transferring participants’ personal data outside the European Economic Area. EY may transfer personal data within the EY network and outside the European Economic Area in accordance with EY’s approved binding corporate rules, i.e., in accordance with Chapter V of the Regulation. This is because EY uses a global IT infrastructure in various jurisdictions for its day-to-day operations.
8. Your Rights
With regard to the processing of your personal data, you have the following rights under the Regulation and Act No. 110/2019 Coll., on the Processing of Personal Data, which you may exercise against the controller (the Chamber or EY) that processes the personal data in question:
1. the right of access to personal data, including the right to obtain a copy of the personal data being processed;
2. the right to rectify inaccurate or incomplete personal data;
3. the right to erasure of personal data, provided that the conditions set forth in the Regulation are met;
4. the right to restriction of processing, provided that the conditions set forth in the Regulation are met;
5. the right to data portability, provided that the conditions set forth in the Regulation are met;
6. the right to object to processing based on the controller’s legitimate interests, including processing for direct marketing purposes; and
7. the right to lodge a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, or with another competent supervisory authority.
9. Additional Information
General information on the Chamber’s processing of personal data is available in the document “Information on the Processing of Personal Data” at https://tschechien.ahk.de/cs/interni-soubor-ahk/prohlaseni-o-ochrane-osobnich-udaju.
EY’s General Privacy Statement is available at https://www.ey.com/en_cz/legal-and-privacy/privacy-statement.
This statement takes precedence as a special provision governing the processing of personal data in connection with the Event.