Privacy Policy

At Autoškola KSN s.r.o. we focus not only on high-quality tuition, road safety and an individual approach to our students, but also on handling their personal data responsibly.

This document explains what personal data we collect, why we need it, how we handle it, how long we keep it and what rights you have in connection with its processing.

This information applies in particular to people interested in our services, driving licence applicants, participants in tuition and training, and other persons whose personal data we process in connection with operating the driving school.

The controller of personal data is:

(hereinafter the "controller" or "Autoškola KSN").

If you have any questions regarding personal data protection or wish to exercise your rights, you can contact us at the email address above or in writing at our registered office.

The controller has not appointed a data protection officer.

Personal data means information relating to a specific natural person or enabling their direct or indirect identification.

We obtain data primarily directly from you, for example when you fill in a driving school application, conclude a contract, communicate with our company or submit documents required for tuition and training. In cases laid down by law, we may also obtain data from the relevant public authorities or other authorised entities.

Depending on the specific purpose, we may process in particular the following categories of personal data:

• Identification data: title, first name, surname, date and place of birth, birth number, citizenship and identity document details, where necessary.
• Contact data: permanent address, correspondence address, email address and telephone number.
• Contract and tuition data: information from the application, progress of tuition and training, data needed to organise the course and communicate with the student.
• Payment and accounting data: details of payments made, bank details where applicable, and other information necessary for bookkeeping and meeting tax obligations.
• Health data: information contained in the medical assessment of fitness to drive motor vehicles and other health data, where their processing is necessary and legally permissible.
• Image and audio data: recordings made by camera systems in driving school vehicles, if such a system is installed and used in the vehicle.

The scope of data processed always depends on the specific relationship with Autoškola KSN and on what data is required by law or for the proper provision of the agreed services.

We process personal data only where there is an appropriate legal ground under the General Data Protection Regulation (GDPR) or another applicable legal regulation.

4.1 Performance of a contract and pre-contractual steps

We need the data in particular to process applications, conclude contracts, organise courses, keep records of the progress of tuition and training, and provide the services ordered.

The legal basis is Article 6(1)(b) GDPR, where processing is necessary for the conclusion or performance of a contract, or for taking steps at the request of the applicant prior to entering into it.

4.2 Compliance with legal obligations

In connection with operating a driving school, we must comply with obligations laid down by law. These include, for example, mandatory documentation relating to tuition and training, bookkeeping, retention of tax documents and cooperation with authorised bodies.

The legal basis is Article 6(1)(c) GDPR.

4.3 Processing of health data

Health data is a special category of personal data. We process it only to the extent necessary to fulfil the relevant obligations relating to the tuition and training of driving licence applicants, provided a condition under Article 9 GDPR and the applicable legal regulations is met for such processing.

4.4 Controller's legitimate interests

In justified cases, we may process personal data on the basis of legitimate interest under Article 6(1)(f) GDPR, provided that this interest is not overridden by the rights and freedoms of the persons concerned.

Possible legitimate interests include in particular:

• protection of persons, vehicles and other property;
• investigation of extraordinary events and incidents during training;
• protection of legal claims and defence of the company's legitimate interests;
• sending commercial communications to existing customers, provided the conditions of the applicable legal regulations are met.

Before any processing based on legitimate interest, we assess its necessity and impact on the rights and freedoms of the persons concerned. You may object to processing based on legitimate interest under the conditions laid down in Article 21 GDPR.

We process personal data in particular for the following purposes:

Providing driving school services

We use the data to process applications, conclude and perform contracts, schedule lessons, keep tuition and training records, communicate with students and arrange the follow-up steps needed to complete the course.

Compliance with legal and accounting obligations

We need the data for bookkeeping, issuing and retaining accounting and tax documents, recording payments and fulfilling other obligations that apply to our company.

Verification of medical fitness

Where required by law, we process data from the medical assessment in order to verify that the conditions for participating in tuition and training and for obtaining the relevant driving licence are met.

Communication and commercial communications

Under the conditions laid down by law, we may use contact data to send information about our services, news, events or special offers. Where required, we will ask for the relevant consent in advance. Where we make use of the statutory option of sending commercial communications to existing customers, we always offer a simple and free way to opt out of further communications.

Protection of persons and property by cameras

If cameras are installed in driving school vehicles, their recordings may be used to investigate accidents, damage events, security incidents and other extraordinary situations, to protect the health and lives of persons and to protect the property of Autoškola KSN and other persons.

Details of the camera system, its actual scope and the recording retention period are set out in the following section.

Driving school vehicles may be equipped with a camera system that records selected areas around the vehicle and possibly also its interior. The specific scope of recording depends on the technical design and placement of the camera in the vehicle.

If the camera system is active while driving, its purpose is primarily to protect the health and lives of persons, protect property, investigate traffic accidents and other incidents occurring during training, and protect the controller's legitimate interests.

The legal basis for processing is usually legitimate interest under Article 6(1)(f) GDPR, provided the necessity and proportionality of such processing have been assessed.

Recordings are accessible only to authorised persons and are used exclusively for the stated purposes. Unless they are needed to resolve an incident or to exercise a legal claim, they will be kept only for as long as strictly necessary.

If a retention period of 72 hours is set in a particular vehicle, recordings are automatically deleted or overwritten after this period, unless there is a reason to keep them longer. In the event of an accident, damage event or other relevant incident, the relevant recording may be kept for as long as necessary to investigate it and to exercise or defend legal claims.

More detailed information about the specific camera system, its placement and recording scope is made available to students in an appropriate manner, for example through a notice in the vehicle.

We keep personal data only for as long as necessary to fulfil the purpose for which it was obtained, or for the period required by law.

The retention period varies depending on the category of data:

Contract and course data

We keep it for the duration of the contractual relationship and then for the period needed to settle mutual rights and obligations, handle any complaints and protect legal claims.

Accounting and tax documents

We keep them for the period laid down by the applicable legal regulations. For tax documents under the Value Added Tax Act, this period may be at least 10 years from the end of the tax period in which the relevant supply took place.

Health data

We keep it only for as long as necessary to fulfil the legal obligations and purposes for which it was obtained. The specific period is governed by the applicable legal regulations and obligations relating to driving school documentation.

Camera recordings

Unless needed to resolve an incident, they are kept for the period set for the relevant camera system, which may be 72 hours. In the event of an incident, they may be kept longer, for as long as necessary to investigate it and protect legal claims.

Once the relevant period has expired, we delete, anonymise or otherwise securely dispose of the data, unless there is another legal reason for keeping it.

We disclose personal data only to entities that need it to perform their tasks, provide agreed services or fulfil legal obligations.

These recipients may include in particular:

• the relevant public authorities and bodies performing inspection or supervisory activities;
• instructors and other persons involved in tuition, training and the administration of the driving school;
• accountants, tax advisers and other professional advisers, where their involvement is necessary;
• providers of IT, hosting, cloud and email services;
• providers of delivery services and other contractual partners whose services we need to run the company.

Recipients have access only to the data necessary for the specific purpose and to the extent corresponding to their role and authorisation.

Some providers of the electronic, cloud or communication services we use may be based outside the European Union or may process personal data in countries outside the European Economic Area.

Personal data is transferred to a third country only where this is genuinely relevant to the service used and the requirements of the GDPR are met. Any transfer takes place on the basis of an appropriate legal mechanism, such as an adequacy decision or appropriate safeguards under the GDPR.

We will provide you with information about specific recipients and the safeguards used upon request, where they apply to the processing concerned.

In connection with the processing of personal data, you have the following rights under the conditions laid down by the GDPR:

Right of access

You may ask whether we process your personal data and, if so, obtain access to that data and to information about its processing.

Right to rectification

If your data is inaccurate or incomplete, you may request that it be corrected or completed.

Right to erasure

In the cases laid down by law, you may request the erasure of personal data. This right is not absolute and does not apply, for example, where further retention is required by law.

Right to restriction of processing

Under the conditions of the GDPR, you may ask us to temporarily restrict the processing of your personal data.

Right to object

If we process data on the basis of legitimate interest, you may object to such processing. In the case of commercial communications, you have the right to object to receiving them at any time; once you do so, we will no longer process personal data for this purpose.

Right to data portability

If the conditions of the GDPR are met, you may request to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to have it transmitted to another controller where technically feasible.

Right to withdraw consent

If processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You can exercise your rights by email at info@autoskolaksn.cz or in writing at the company's registered office.

You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), whose website is available at www.uoou.cz, if you believe that the processing of your personal data has breached the law.

When processing personal data, we apply technical and organisational measures designed to prevent unauthorised access, loss, damage, misuse or unauthorised disclosure of data.

We keep personal data in electronic and paper form depending on the nature of the relevant documentation. Access is limited to persons who need it to perform their work or contractual duties.

We continuously adapt the security measures to the nature of the data processed, the associated risks and the available technical options.

This policy serves to inform data subjects about how Autoškola KSN s.r.o. processes personal data. Making it available, or confirming that you have read it, does not in itself constitute consent to the processing of personal data. We ask for consent only where it is genuinely required under the applicable legal regulations.

The controller may update this document, in particular in the event of changes to legislation, the way services are provided or the technologies used. The current version will be published on the Autoškola KSN website.

Effective date: 1 April 2026