GDPR

Information about the processing of personal data

1. General information about the processing of personal data

The Regional Museum in Mikulov processes the information provided to it pursuant to Articles 12 and 13 of the Regulation (EU) 2016/[NO1] 679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation, GDPR).

The Regional Museum in Mikulov is a contributory organization of the South Moravian Region, which is its founding authority. The main task of the organization is to support the cultural, social, scientific, awareness-raising, and educational needs of the public.

In carrying out its activities, the Regional Museum in Mikulov, which is a controller of personal data, processes personal data primarily for the following purposes:

1) Providing services to registered users – keeping records of addresses, including electronic ones, for sending invitations to openings and exhibitions, and sending information and news
2) Organizing cultural and educational events 
3) Protecting library collections
4) Keeping a history of loans 
5) Keeping records of researchers 
6) Keeping records of items in collections, etc. 
7) Direct marketing
8) Accounting and human resources administration
9) Protecting property and collections and ensuring personal safety (security camera systems)
10) Managing contractual relations

Contact address of the data controller:

Regional Museum in Mikulov, a contributory organization 
Zámek 1/4, 692 01 Mikulov 
Telephone: + 420 519 309 019 
Email: rmm@rmm.cz 
IČ 00089613 
Data box ID: r45k7hc

The contact person for addressing requests and questions is the data protection officer:

Mgr.  Petr Kubín 
Zámek 1/4, 692 01 Mikulov  
Telephone: + 420 519 309 019 
Email: kubin@rmm.cz 
Data box ID: r45k7hc

2. Processing personal data

2.1. Purposes of processing personal data

The personal data of our employees, visitors, and other partners are used to carry out our activities as a state collection institution established in the public interest and which provides services to the public. 

2.2 Legal basis for processing personal data

The processing of personal data is lawful, pursuant to 6 (1) (a) of the GDPR, if consent is given by the data subject; pursuant to 6 (1) (b) of the GDPR, if processing is necessary for the performance of a contract; or pursuant to 6 (1) (e) of the GDPR, if processing is necessary for the performance of a task carried out in the public interest.

Personal data are not transmitted to third parties, unless the contributory organization is required by law to transmit such information to authorities, offices, or institutions.

In processing personal data, the contributory organization does not use automatic processing or profiling that would serve as the basis for actions or decisions that would infringe upon the rights or legitimate interests of citizens.

2.3 Complying with the controller’s legal obligations

We are required to process some personal data in order to comply with our legal obligations, as established in legislation. In our case, such legislation includes the following:

– Act No. 122/2000 Coll., on the protection of museum collections and amendments to some laws, as amended, and Implementing Regulation No. 275/2000 Coll., as amended;

– Act No. 130/2002 Coll. on the support of research and development from public funds and on the amendment to some related acts (Research and Development Support Act), as amended;

– Act No. 499/2004 Coll., on archiving and records administration, as amended;

– Act No. 257/2001 Coll, on libraries and terms of operating public library and information services (the Library Act), as amended;

– and other valid legislation related to the protection of national cultural heritage.

We must also comply with other legal obligations established, for example, in labour laws, in the Public Procurement Act, the Accounting Act, the Financial Control Act, and other regulations that apply to us.   

2.4 Photography and video from events at the Regional Museum in Mikulov 

We document events we organize for the public through photography and video. We then publish select photographs and videos on our websites, on our social media accounts, or in photo galleries accessible on the internet. Photographs are also to a small extent made available to media outlets.

2.5 Additional terms and conditions regarding personal data protection

Whether providing your personal data is a legal or contractual requirement, and whether you are obligated to provide us with your personal data, depends on the specific situation. When such a situation arises, we will always inform you of such a requirement and its potential consequences.

2.5.1 Personal data that are processed and their sources

In the vast majority of cases, we acquire the personal data that we process directly from you. A small amount of data is obtained from public sources, and some data may be generated through the activities of our facilities or the operation of our websites or information systems.

2.5.2 Recipients or categories of recipients of personal data

The recipients of the personal data we process are our authorized employees and our contractual partners who help run our operations and provide us software. We do not share our databases with anyone, nor do we transmit or sell the information they contain to anyone.

2.5.3 The duration for which personal data will be stored or the criteria used for establishing this duration

The duration for which we store personal data is determined based on the legitimate grounds for processing such data, which are primarily the obligation to retain records for audits or specific provisions of applicable legislation. We have an internal regulation that specifies all legally required record retention periods.

3. The intention of the controller to transfer personal data to third countries or international organizations

The Regional Museum in Mikulov has no intention to transfer personal data to third countries or international organizations

4. The right to request the controller for access to personal data, or to rectify or erase them, or to restrict the processing of data or to object to processing as well as the right to data portability

4.1 Right to access to personal data

You have the right to obtain from us information about if and how we process your personal data. You are also entitled to receiving a copy of this information.

4.2 Right to rectification

You have the right to have us correct any inaccurate information or to complete any incomplete personal data. 

4.3 Right to erasure 

You have the right to have us erase your data if they are no longer necessary or their processing was based on consent that has been withdrawn – and furthermore, if you are a parent and do not agree to the processing of the personal data of a child, if personal data were processed illegally, or if an objection to data processing was raised based on the legitimate interests of the personal data controller.

However, if processing your data is necessary for exercising freedom of expression and information, for compliance with our legal obligations, for the performance of a task carried out in the public interest, for archiving purposes, for scientific or historical research purposes, or for the establishment, exercise, or defence of legal claims, then your request will be declined.

If you exercise your right to erasure, you are entitled to request the erasure of all occurrences of and references to your personal data and all copies thereof.

4.4 Right to restricting processing

You have the right to have us restrict the processing of your personal data if they are inaccurate or unnecessary, or if you object to processing.

4.5 Right to data portability

If we process your data with your consent or on the basis of a contract, you have the right to have us provide you with your data in a format that you may transfer to another controller. This right may be applied only if the processing of personal data is based on consent or a contract.

4.6 Right to object to data processing

You have the right to object to the processing of your personal data at any time, on grounds relating to your particular situation. In case of objections, the controller is obliged to determine and demonstrate any compelling legitimate grounds for the processing which override your interests in the protection of your personal data. If you object to the processing of your personal data for direct marketing purposes, your data will not be processed.

Our procedure for handling claims related to exercising this right: 
1) Receiving a request/claim 
2) Identifying the claimant 
3) Evaluating the request 
4) Deciding about the request 
5) Issuing a decision 
6) Informing the claimant 

5. The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

If we process your data based on your consent, you have the right to withdraw your consent at any time. However, this will not affect our right to process your data before your withdrawal.

6. The right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the Office for Personal Data Protection, IČO 70837627, Pplk.  Sochora 27, 170 00 Praha 7, if you feel that the Regional Museum in Mikulov is, in processing your data, acting in a manner contradictory to the Regulation.

 

In Mikulov, 4 May 2026

Mgr.  Petr Kubín
director