GDPR and data protection

This page is a translation provided for informational purposes only. The official GDPR and Data Protection Policy is only available in Czech, here.

If you would like to receive information about the personal data we collect about you, please contact the Data Protection Officer: oou@vsnewton.cz, or visit us in person at:

NEWTON College, a.s., Rašínova 2, Brno
NEWTON College, a.s., 5. května 1640/65, Prague
NEWTON College, a.s., Tomášikova 22, Bratislava

Principles of processing and protection of personal data

At NEWTON University, we take the protection of personal data seriously. Here we provide you with information about what personal data is collected, how it is handled, from what sources it is obtained, for what purposes it is used, to whom it is provided, where it is possible to obtain information about the personal data processed and what measures are taken to secure your personal data.

1. Method and duration of processing of personal data

We process personal data in accordance with the legislation governing the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
We keep records of all personal data processed and are the controller of such data.
We collect and process personal data for specific, explicitly stated lawful purposes, where the provision of our services is subject to the processing of personal data, or based on the consent of a natural person, where consent to processing may be refused or withdrawn at any time.
We collect personally identifiable information that enables the identification of the natural person, contact personal data for communication and other specifying information related to services provided and company activities. Contact data means, in particular, address, telephone number, e‑mail address and other information.
Information concerning the personal data being processed is provided in the consent or given in information about the processing of personal data.
We process personal data for the period of time specified by law in the case of lawful processing, for the period defined by legitimate interest or for the period of validity of the granted consent. At the end of the processing period, we will dispose of it by erasure and shredding.

2. Where and how we obtain your personal data

When you fill in a form on the website.
From you, during the admissions process to study, and during your studies.
When interacting with you at our events; on our website, and where you fill in your contact details including providing informed consent for us to process your personal data.

3. For what purposes we process personal data

We process personal data in connection with your studies at our university and to carry out any activities required to comply with our legal obligations.
For our internal needs, to protect our rights and legally protected interests, to improve the quality and efficiency of the services we provide.
For other purposes, such as expanding the portfolio of products and services we provide; to inform you about new services, provide you with information about the university, and notify you of news and events.

4. How we protect personal data

Our processing of personal data is governed by our Data Protection Enforcement Methodology. Specific steps and processes for organisational and technical security are set out. The guidelines and procedures for the protection of personal data are regularly updated and their implementation is under constant control. During processing, we use security mechanisms to ensure the protection of personal data at the highest possible level against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access of transmitted, stored or otherwise processed personal data.
Employees and persons who handle personal data in the course of their work or contractual duties are bound by the confidentiality obligations imposed by legislation or contractual relationship. The confidentiality obligation continues after the end of their employment or contractual relationship with us.

5. To whom we transfer personal data

To public authorities and state authorities in the performance of legal obligations.
To other entities, only on your instructions or with your consent.
We make your personal data available to contractual partners in the provision of services: IS4U, s.r.o. for the provision and support of the university’s information system
We always require recipients to ensure the security and protection of personal data with regard to the rights of the data subject.
We use the email address for analytical and marketing purposes and pass it on in encrypted form to Google Ireland Ltd, based at Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. in accordance with their terms and conditions which can be found here.

6. How we process personal data on the basis of consent

In the case of processing on the basis of informed consent, you always freely decide whether to give your consent to the extent proposed by us, limit it, or refuse to grant consent. We are bound by the scope of the consent given;
You may withdraw the consent you have given at any time; the contacts for withdrawing consent are set out in the following paragraph.
In the event of refusal to grant consent or withdrawal of consent already given, we will terminate the processing of the personal data concerned without undue delay, subject to technical and organisational feasibility;
Consent to the processing of personal data can be given again at any time.

7. How to request the fulfilment of rights and what rights you have in the processing of personal data

All contact details, procedures on how to exercise the right of access and make a request, are set out below.
You have the opportunity to exercise your rights as follows:
By email to oou@vsnewton.cz
In person at the reception desk in our company at the following addresses: NEWTON University, a.s., Rašínova 2, Brno; NEWTON University, a.s., 5.května 1640/65, Prague
Data box: 6kdfd3p
In writing to our address: Vysoká škola NEWTON, a.s., Rašínova 2, Brno

Right of access

Upon your request, we provide information about the personal data we hold and process about you.
We will prepare and transmit the information to you without undue delay in the agreed and requested manner, so that the protection of your rights is ensured.
Right to data portability
Upon your request, we will prepare the personal data we hold and process about you in a structured, commonly used and machine-readable format.
We will transmit this data in a secure manner to you or to another data controller you designate.
Correction of personal data held
In order to properly provide our services, it is necessary to have correct and accurate personal information. It is important that you notify us of any changes to your personal information. If we are notified of a change, we will promptly make a correction to our records. If, during processing, we discover through our own activity that the personal data is not true or up-to-date, we will invite you to correct it and, failing confirmation, we will delete the data.

Procedure for filing an objection, restriction of processing, withdrawal of consent and other requirements

You have the opportunity at any time to object to the processing of personal data, withdraw consent, request a change in the scope of consent, submit a request for restriction of processing or make a query or request in the area of data processing and data protection. This can be done through the following means:

By email oou@newton.university
In person at the reception desk in our company at the following addresses: NEWTON University, a.s., Rašínova 2, Brno; NEWTON University, a.s., 5.května 1640/65, Prague
Data box: 6kdfd3p
In writing to our address: Vysoká škola NEWTON, a.s., Rašínova 2, Brno

You can contact the Office for the Protection of Personal Data directly with an objection or complaint.

8. Information about the principles of personal data processing

The principles of personal data processing and protection are published in a form for the public here on the website of NEWTON University.
You are made aware of the principles of personal data processing and protection when you submit your personal information as part of the admissions process and , and our staff actively familiarises you with them during public events.

Data Breach Notification Form
Valid as of 1 January 2022