Personal Data Protection and Privacy Policy
Personal Data Controller
The controller of personal data is the Prague University of Economics and Business, W. Churchill Sq. 1938/4, 130 67 Prague 3 – Žižkov, Czech Republic; Registration no. (IČO): 61384399.
Processing of Personal Data
VŠE processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable legal regulations. Personal data are processed only to the extent necessary to fulfil a specific purpose and for the period strictly necessary.
Purposes of Processing
- ensuring study-related, scientific, administrative and operational activities,
- communication with users and handling their enquiries,
- provision of services for which users register (e.g. events, newsletters),
- operation, security and optimisation of the website.
Website News Subscription and Voluntary Registrations
For news subscriptions or similar voluntary registrations, the provided data are used exclusively for the purposes for which the registration is submitted.
In the basic form of subscription (registration via the VŠE website without additional conditions), the e-mail address is used solely for sending news and notifications related to the relevant VŠE website or project, and no additional consent is required.
If the distribution is provided by an external service (e.g. a specialised newsletter platform) or if external partners are involved, separate consent to the transfer of data may be required. The user is always explicitly informed of this fact at the time of registration.
Event Registration
When registering for events organised by VŠE, we process only the personal data necessary for the organisation and administration of the event; VŠE minimises the scope of collected personal data.
For each event, users are informed in advance who the organiser is and therefore to whom their data are provided. This applies in particular to events organised in cooperation with external partners to whom specific registration data are transferred.
In the case of registration via the VŠE Event Registrations system, basic school identification data of VŠE students and employees – name, school e-mail address and user name (xname) – are automatically transferred in order to reliably associate participation with their school identity.
Cookies, External Content and Consent Management
We use cookies and similar technologies on our websites, which may originate from VŠE as well as from third parties (e.g. Google, Meta, Microsoft, etc.).
Domain-wide Consent Consistency
Websites on the vse.cz domain share common settings – consent granted on one website applies to all websites on this domain.
Websites outside the vse.cz domain use their own separate consent, which applies only to the specific website.
Types of Cookies
- Technical / necessary cookies – ensure the basic functionality of the website; they cannot be disabled.
- Preference cookies – store user settings (e.g. enabling contrast mode); they do not contain personal data or any unique user identifier.
- Analytical cookies – help evaluate website traffic and user behaviour, usually in anonymised or pseudonymised form.
- Marketing cookies – enable personalised advertising or measurement of campaign effectiveness.
- External media cookies – related to displaying embedded elements such as videos, maps or interactive widgets.
Specific Services Using Cookies
Cookie consent for optional cookies is always granted by the user for a specific service. The currently used services for which the user provides consent to the use of cookies are:
- Google Analytics
- Google Ads, DoubleClick
- Google Ads - personalized
- YouTube video tracking
- Vimeo video tracking
- TikTok video tracking
- Sklik
- Google Maps
- Microsoft Clarity
If there is a change in the list of services (e.g. the addition of a new technology), users will be prompted again to grant or modify their consent.
Consent Management
Users may allow or deny cookies for individual services via the cookie settings dialog. Consent operates in opt-in mode; cookies usable for user identification are only applied after consent has been granted. Without consent, some services may store anonymised cookies (not capable of identifying the user).
Embedded Content
Some pages include third-party elements (e.g. YouTube, Vimeo, Google Maps). If the user does not consent to the use of cookies for a given service, the website uses – where possible – tracking-free versions (e.g. youtube-nocookie.com).
Who May Have Access to the Data
Data may be disclosed only to:
- VŠE employees,
- contractual processors (website administrators, hosting providers and analytics tool providers),
- event organisers based on consent,
- public authorities where required by law.
User Rights
The user has the right to:
- access their data,
- rectification or completion,
- erasure (where legally permissible),
- restriction of processing,
- object to processing,
- data portability (where applicable),
- withdraw consent at any time,
- lodge a complaint with a supervisory authority.
Contacts
Technical Enquiries Regarding Websites and Cookies
General Enquiries Regarding Personal Data Protection
Data Protection Officer of VŠE:
RNDr. Karel Nenadál
E-mail: dpo@vse.cz
Phone: +420 224 095 710
VŠE Regulation on Personal Data Protection
Detailed information on the processing of personal data across VŠE is provided in the official regulation (available in Czech). An English overview is available at Information on VŠE Processing and Protection of Personal Data.
Policy Updates
This policy may be updated from time to time in response to changes in legislation, technical adjustments or extensions of the list of services used. The current version is always published on this page.