GDPR

Information on the Processing of Personal Data

Your personal data is processed for the purpose of organizing the business competition “Liftoff Challenge” (hereinafter referred to as the “competition”) and for the performance of a contract that we have entered into with you or are about to enter into. Some of your personal data is also processed as necessary for the protection of legal rights and interests—ours as well as yours. Below, we provide an overview of the processing purposes in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and Czech Act No. 110/2019 on personal data processing.

The competition is a project aimed at encouraging interest in science and technology and giving young people the opportunity to develop their own business ideas. It is organized by the ESA BIC Czech Republic business incubator under the auspices of the Business and Investment Support Agency CzechInvest.

As participants in the competition, you are entitled to information from CzechInvest as the data controller, in accordance with Articles 12 and 13 of the GDPR at the time your personal data is collected.

Who Are We?

The Business and Investment Support Agency CzechInvest is a state-funded organization with its registered office at Štěpánská 567/15, Nové Město, 12000 Prague 2, ID: 71377999 (hereinafter the “Agency”).

As the controller of your personal data, we are responsible for implementing and adhering to data protection principles and other necessary measures to protect your rights. To ensure our commitment to data protection, we have appointed a Data Protection Officer (DPO).

If you have any questions or concerns about the processing of your personal data as described in this document, or if you wish to exercise your rights, please contact us at: GDPR@czechinvest.org.

You may also contact our appointed DPO at: poverenec@czechinvest.gov.cz.
The DPO is an independent person who helps ensure GDPR compliance and serves as a liaison between you and the supervisory authority.

If you are dissatisfied with how your data is being processed, or with our response, you may lodge a complaint with the supervisory authority:
The Office for Personal Data Protection
Pplk. Sochora 27, Prague 7 – Holešovice, 170 00
Phone: +420 234 665 444
Email: posta@uoou.cz

Please note: This document does not cover the processing of personal data related to website usage or cookies. That information is provided in a separate document available on each of our websites.

More information on how CzechInvest processes personal data is available here: https://czechinvest.gov.cz/en/About-Us/Personal-Data-Protection

What Personal Data Do We Process?

We process only the necessary personal data required to comply with legal obligations and protect the legitimate interests of both the Agency and competition participants. We ensure that personal data processing is adequate, relevant, and limited to what is necessary for its purpose.

Name and surname
Age
Email address
School information
Current level of university education

Why Do We Process Your Personal Data?

To comply with our legal obligations as a data controller
To perform a contract to which you are a party
To protect our legitimate interests, including:
- Responding to inquiries, requests, objections, and complaints
- Managing internal operations
- Promoting ESA BIC Czech Republic and the competition
Based on your consent (e.g., for marketing purposes)

Providing consent is voluntary and can be withdrawn at any time.

How Do We Protect Your Personal Data?

We prioritize the integrity, confidentiality, and availability of your personal data. From the design phase onward, we adopt appropriate technical and organizational measures based on the current state of technology, implementation costs, the nature and context of processing, and the potential risks to your rights and freedoms.

Only authorized personnel have access to your data, and safeguards are in place to prevent accidental or unlawful destruction, loss, alteration, or unauthorized disclosure.

What Are Your Rights?

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure of personal data
Right to restriction of processing
Right to data portability
Right to object to data processing
Right to lodge a complaint with the supervisory authority
Right to effective judicial remedy

You may also withdraw your consent at any time by sending a clear, explicit statement to GDPR@czechinvest.org.

To Whom Do We Disclose Your Personal Data?

We do not share or sell your data to third parties. However, we may disclose it to public authorities when legally required. We do not transfer your data outside the EU.

How Long Do We Keep Your Data?

We retain your personal data only for as long as necessary. Specific retention periods depend on legal requirements and the nature of the processing.

We store data for up to 2 years from the date of consent, as we expect a major milestone in Czech space activities (a manned flight) within that timeframe. This period allows us to effectively promote related educational activities and maintain contact with key participants, such as competition finalists.

Data is securely stored on servers used by CzechInvest and accessed only by a limited group of trained personnel.