Information on the Processing of Personal Data and Cookies in Surveys and Quizzes by the Czech Statistical Office (ČSÚ)

Basic Principles

We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter referred to as the "GDPR").
The basic principle of the Czech Statistical Office (ČSÚ) is to process personal data lawfully, fairly, and transparently, only for the clearly defined and legitimate purpose of assessing. We always strive to minimize the scope of data collected, use only the information strictly necessary, protect the data with appropriate technical and organizational measures, and retain the data only for as long as necessary to fulfill the purpose of the survey. All data processing is carried out in accordance with applicable legal regulations, especially Article 5 of the GDPR, and with respect to the controller’s responsibility for compliance with personal data protection principles.
More information: https://csu.gov.cz/information-on-personal-data-processing

Purpose of the Survey, Quiz, and Data Processing

Surveys are conducted to collect feedback on the products and services provided by the Czech Statistical Office, including evaluations, improvement suggestions, and planning of future quality enhancement steps. Participation in the survey is entirely voluntary and not mandatory.
Statistical quizzes are organized to promote statistical literacy and raise awareness about statistics, as well as ČSÚ’s products and applications.

Data Controller and Contact Information

The controller of personal data collected through the survey is:
Czech Statistical Office, Na padesátém 3268/81, 100 82 Prague 10, Company ID (IČO): 00025593
Contact information: https://csu.gov.cz/personal-data-protection-gdpr

Legal Basis for Processing

Personal data are processed based on Article 6(1)(e) of the GDPR – the performance of a task carried out in the public interest within the competence of ČSÚ according to Act No. 89/1995 Coll., on the State Statistical Service.
The legal basis for any technical data processing, including anonymized web analytics/cookies, is public interest, or – where required by law – consent for processing certain types of cookies (see below).

Scope and Nature of Data Processed

Within the survey, data provided directly by respondents may be processed, such as:

• Answers to specific evaluation questions and written comments.
• IP address, timestamp, and technical information about the device for security and platform management purposes (Microsoft Forms).

ČSÚ does not require personally identifiable data unless strictly necessary to support the security and integrity of the survey.

Data Recipients and Transfers to Third Countries

• Processing is primarily carried out via the Microsoft Forms tool, with Microsoft acting as a data processor based on a data processing agreement with ČSÚ, in accordance with GDPR requirements.
• Data are not shared with other recipients or transferred outside the EU, except where permitted directly by law or under Microsoft’s contractual conditions for the provided cloud services (see Microsoft’s data protection declarations): https://privacy.microsoft.com/en-us

Cookies and Web Analytics in Surveys

• Web analytics are performed using only essential technical cookies or fully anonymized statistics (Matomo, hosted on ČSÚ servers in the Czech Republic).
• Non-essential cookies are not used in ČSÚ surveys. Any analytical cookies may only be set with your consent or are excluded entirely. These cookies are set by the platform operator, namely Microsoft Corporation.
• All information about cookies used on the ČSÚ website for survey purposes through Microsoft Forms is available at: https://csu.gov.cz/more-about-cookies

Data Retention Period

Personal data obtained through surveys are stored only for the time strictly necessary for evaluation, compiling aggregated statistics, and taking follow-up actions, but no longer than 12 months after the survey ends, unless a specific legal regulation sets a different retention period.

Further Information, Rights, and Contact

Information about your rights regarding personal data processing and how to exercise them is available at: https://csu.gov.cz/rights-you-can-exercise-in-relation-to-the-processing-of-your-personal-data-by-the-czso

For questions, please contact the Data Protection Officer (DPO) of the ČSÚ.

Details about cookies used for survey purposes via Microsoft Forms
(Link to further documentation or details as mentioned above)