GDPR and Personal Data

The State Fund for Transport Infrastructure, in connection with the operation of the electronic vignette information system (hereinafter the “Vignette Registration System”), processes personal data and is affected by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act no. 110/2019, on the processing of personal data.

On this page you will find information on which personal data the State Fund for Transport Infrastructure collects and for what purposes it uses them, or from what sources it obtains your personal data, how it treats them and how they are processed.

This website also contains contacts where you can get more information about the processing of personal data and where you can exercise your privacy rights.

Administrator of your personal data

The administrator of your personal data is the State Fund for Transport Infrastructure (hereinafter the “SFDI”).

Based at: Sokolovská 1955/278, 190 00, Praha 9, Czech Republic

Company ID No: 70856508

E-mail: epodatelna@edalnice.cz

Tel.: +420 222 266 757

Databox ID: ws5mh9w

www.edalnice.cz , www.sfdi.cz

The SFDI is established by Act no. 104/2000, on the State Fund for Transport Infrastructure, as amended.

More information on the exercise of the data subject’s rights

Request for exercise of the data subject’s rights

SFDI data protection officer

  1. Ing. Jakub Voneš
  2. poverenec@sfdi.cz
  3. +420 266 097 309
As a personal data controller, the SFDI determines what personal data is processed and for what purposes, and it is responsible for complying with all personal data protection requirements. The following companies are processors of your personal data:

CENDIS, s.p.
Based at: nábřeží Ludvíka Svobody 1222/12, 110 00, Praha 1, Czech Republic
Company ID No: 00311391
E-mail: info@cendis.cz
Phone: +420 225 131 367
Data box ID: txsvfsh

Česká pošta, s.p.
Based at: Politických vězňů 909/4, 225 99, Praha 1, Czech Republic
Company ID No: 47114983,
E-mail: info@cpost.cz
Phone: +420 954 301 111
Data box ID: kr7cdry

ČEPRO, a.s.
Based at: Dělnická 213/12, 170 00 Praha 7, Czech Republic
Company ID No: 60193531
E-mail: ceproas@ceproas.cz
Data box ID: hk3cdqj

Police of the Czech Republic
Based at: Strojnická 27, 170 89 Praha 7, Czech Republic
E-mail: epodatelna.policie@pcr.cz
Phone: +420 974 811 111
Data box ID: rkiai5y

Customs Administration of the Czech Republic
Based at: Budějovická 7, 140 00 Praha 4, Czech Republic
E-mail: podatelna@cs.mfcr.cz
Phone: +420 261 331 111
Data box ID: 7puaa4c

Basic information on the processing of personal data

1.   Purposes of processing and the scope of processed personal data

Personal data is processed only to the necessary extent, and the SFDI guarantees the security of this data. The SFDI, in cooperation with the processors of personal data, set up the processes within the Vignette Registration System so as to eliminate the risk of unauthorised or accidental disclosure of personal data, their destruction or loss, unauthorised transfer, unauthorised processing or other misuse.

The SFDI and the processors process your personal data manually and automatically. No automated decision-making or profiling takes place during automated processing. All personal data are processed by SFDI workers or workers of the processors, who are bound by confidentiality and binding internal regulations, or the contractual relationship between the SFDI and the processor with regard to th protection of personal data.

(a)     Vehicle registration in the Vignette Registration System

For this purpose, the following personal data may be processed by the SFDI or a processor: licence plate number, indication of the state in which the motor vehicle subject to the time-related toll (hereinafter the “Vehicle”) is registered, the start and end of the period for which the vignette is paid, an indication of whether the Vehicle is powered by natural gas and biomethane, the date and time of payment and the email address or telephone number, if provided.

The SFDI obtains these personal data directly from you or from the processor who registers the Vehicle in the Vignette Registration System for you, or from a third party who registers the Vehicle in the Vignette Registration System.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with Act no. 13/1997, on roads (hereinafter the “Act on Roads”). If the above personal data are not provided, the Vehicle cannot be registered in the Vignette Registration System.

(b)     Recording and processing of data due to a change in the licence plate number

For this purpose, the following personal data may be processed by the SFDI or the processor: the licence plate number (original and new), information on the state in which the Vehicle is registered, the personal data of the notifier: name, surname, date of birth, address of residence, officially verified signature or its equivalent (data box number or recognised electronic signature). Alternatively, other personal data that are contained in the vehicle registration document or other document proving the change of the licence plate number or, in the case of submission by a third party, data contained in the power of attorney.

The SFDI obtains this personal data directly from you or from a third party who has requested a change of the licence plate number, through the notice of change of the licence plate number.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads. If the above personal data are not provided, it is not possible to record a change in the Vehicle’s licence plate number in the Vignette Registration System.

(c)     Records of exemption of Vehicles from the time-related toll

This purpose may relate to recording the exemption of a Vehicle from the time-related toll or recording the lapse of reasons for the exemption and exclusion of such a Vehicle from the register, or checking the above facts as part of the Vehicle exemption by consulting the Register of Road Vehicles and Basic Registers.

In the course of these activities, the following personal data may be processed by the SFDI or a processor: the licence plate number, information on the state in which the Vehicle is registered, personal data on the notifier: the name, surname, date of birth and personal details of the owner or operator of the Vehicle: the name, surname, date of birth, address of residence, officially verified signature or its equivalent (data box number or recognised electronic signature), and definition of the reason for exemption of the vehicle, or power of attorney granted by the owner or operator with a verified signature or its equivalent (data box ID or recognised electronic signature), if the owner or operator of the Vehicle is represented on the basis of a power of attorney and a copy of the road Vehicle registration certificate, road Vehicle technical certificate or certificate of conformity proving fulfilment of a reason for exemption.

The SFDI obtains these personal data directly from you (notifiers, owners or Vehicle operators). To check these facts, the SFDI may consult the Register of Road Vehicles and Basic Registers.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads. In the event that the above-mentioned personal data are not provided, it is not possible to record the exemption of a Vehicle in the Vignette Registration System or to record the lapse of the reasons for a Vehicle’s exemption in the Vignette Registration System.

(d)     Registration of statements from the Czech National Bank (payment confirmation)

For this purpose, the following personal data may be processed by the SFDI or a processor: the sender’s account number and name (first name, surname).

These personal data are obtained through statements from the Czech National Bank.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads.

(e)     Refund of a Vignette (time-related toll) paid for an exempt vehicle

For this purpose, the following personal data may be processed by the SFDI or a processor: the licence plate number, information on the state in which the Vehicle is registered, the personal data of the notifier: name, surname, date of birth, address of residence, officially verified signature or its equivalent (data box number or recognised electronic signature).

SFDI obtains these personal data directly from you or from a third party who has requested a refund of a paid Vignette.

This processing is done on the basis of necessity for the fulfilment of a task in the public interest or in the exercise of official authority, delegated by Act no. 89/2012, the Civil Code. In the event the above-mentioned personal data are not provided, it is not possible to assess and, if necessary, refund a vignette paid an exempt Vehicle in the Vignette Registration System.

(f)     Electronic toll system Vehicle Register

For this purpose, the following personal data may be processed by the SFDI or a processor: the licence plate number and information on the State in which the vehicle is registered.

The SFDI obtains these personal data from the operator of the electronic toll system.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads.

(g)     Enabling the control of the payment of the Vignette (time-related toll) via a camera system located at the control gates or at mobile control stations.

For this purpose, the following personal data may be processed by the SFDI or the processor: a photograph of the Vehicle (the photograph may contain personal data of the driver or co-driver), the licence plate number and additional data: place and time.

These personal data are obtained through cameras located at control gates or mobile control stations.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads.

(h)     Monitoring and control of the licence plate number recognition algorithm.

For this purpose, the following personal data may be processed by the SFDI or the processor: a photograph of the Vehicle (the photograph may contain personal data of the driver or co-driver) and the licence plate number.

These personal data are obtained through cameras located at control gates or mobile control stations.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with the Act on Roads.

(i)     Monitoring and control of self-service kiosks via a slit camera.

For this purpose, the following personal data may be processed by the SFDI or the processor: a camera recording (the camera recording contains personal data of the self-service kiosk user).

These personal data are obtained through cameras located on self-service kiosks.

This processing is performed on the basis of the legitimate interest of the  administrator or a third party in order to avoid damage to or theft of the administrator’s or third party’s property.

(j)     Registration and storage of records, notifications, notices, requests or other submissions in connection with the Vignette Registration System and the keeping of a register of names

For this purpose, the following personal data may be processed by the       SFDI or a processor: name, surname, date of birth, address of residence, officially verified signature or its equivalent (data box number or recognised electronic signature), as well as personal data contained in the record / request / notification / notice / other submission): the licence plate number and information on the State in which the vehicle is registered. In the case of a notice of change of a licence plate number, personal data contained in the vehicle registration document or in another document proving the change of a licence plate number may be also processed; in the case of submission by a third party, data contained in the power of attorney may be processed as well.

SFDI obtains these personal data directly from you (the persons who submitted the request / notification / notice / other submission) or from the third party who made the submission on your behalf.

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with Act no. 499/2004, on archiving and the file service. If the bove personal data are not provided, your submission of a request / notification / notice / other submission cannot be processed.

For this purpose, the following contact personal data may be processed by the SFDI or a processor: email address and telephone number.

SFDI obtains these personal data directly from you (the persons who submitted the request / notice / other submission) or from the third party who made the submission on your behalf. These data are optional, and their non-provision does not affect the submission of the request / notification / notice / other submissions.

This processing is done on the basis of the legitimate interest of the administrator or a third party in order to facilitate communication.

(k)     Handling of enquiries about the Vignette Registration System

For this purpose, the following personal data may be processed by the SFDI or a processor: name, surname, date of birth, address of residence, signature, data box number or a recognised electronic signature, email address or telephone number.

The SFDI obtains these personal data directly from you (the enquirer).

This processing is done on the basis of the necessity for the fulfilment of a task in the public interest or in the exercise of official authority, which is delegated to the administrator in accordance with Act no. 499/2004, on archiving and the file service. If the above personal data are not provided, your enquiry cannot be processed.

(l)     Management of user accounts for employees of the administrator and processors and their authorisation in the Vignette Registration System

For this purpose, the following personal data may be processed by the SFDI or a processor: name, surname, identification number, job position, business ID, email address or telephone number.

The SFDI obtains these personal data for its employees from its own records and for the employees of processors from your employer.

This processing is performed on the basis of the legitimate interest of the administrator or a third party in order to avoid damage to or theft of the administrator’s or third party’s property.

2.       Transfer of personal data and their recipients

Your personal data may be transferred to State administration authorities, to which the SFDI is obliged to transfer personal data in accordance with legal regulations, in particular the Act on Roads.

Your personal data will be made available to CENDIS, s.p., the company which created the Vignette Registration System and also provides the Call Centre service for you; however, it is not entitled to transfer your personal data to third parties or use them for its own purposes or include them in services provided to third parties. In the case of enabling the control of the Vignette payment, your personal data are disclosed or transferred to the Police of the Czech Republic and the Customs Administration of the Czech Republic.

Personal data are not transferred by the SFDI to third countries or provided to international organisations.

3.       Period of processing and storage of personal data

Your personal data are processed by the SFDI only for the time strictly necessary for the processing; the periods for individual purposes are as follows:

(a)     Vehicle records in the Vignette Registration System – data are stored in the Vignette Registration System for the period of validity of the electronic Vignette and subsequently for a further period of 2 years from the end of the Vignette’s Validity.

(b)     Recording and processing of data due to a change in the licence plate number – data are stored in the Vignette Registration System for the period of validity of the Electronic Vignette and subsequently for a further period of 2 years from the end of the Vignette’s Validity.

(c)     Records of Exemption of Vehicles from the time-related toll – data are stored in thev Vignette Registration System for the period of validity of the reasons for Vehicle Exemption and subsequently for a further period of 2 years from the time when the reasons for Exemption have lapsed.

(d)     Records of statements from the Czech National Bank (payments confirmations) – data are stored in the File Register for at least 5 years (Act no. 563/1991, on accounting) and their storage and archiving is governed by the valid SFDI File Rules.

(e)     Refunds for a Vignette (time-related toll) paid for a vehicle exempt from the time-related toll – data are stored in the File Records and their storage and archiving is governed by the valid SFDI File Rules; the minimum period is 3 years.

(f)     Records of Vehicles registered in the electronic toll system – data are stored in the Vignette Registration System for the period of validity of the Vehicle registered in the toll system.

(g)     Enabling the control of the Vignette payment by means of a camera system located at the control gates or at mobile control stations – data are stored in the Vignette Registration System, including the control gate, for 24 hours.

(h)     Control of the licence plate number recognition algorithm – data are stored in the Vignette Registration System, including the control gate, for 24 hours.

(i)     Monitoring and control of self-service kiosks via a slit camera – data are stored in the self-service kiosk for 5 days.

(j)     Records and storage of records, notifications, notices, requests or other submissions in connection with the Vignette System and keeping of a register of names – data are stored in the File Records and their storage and archiving is governed by the valid SFDI File Rules.

  • Documents relating to the protection of personal data, including the exercise of the data subject’s right, are stored for at least 5 years.
  • Documents relating to the Exemption of Vehicles from the time-related toll are stored for at least 3 years.
  • Documents relating to a change of the licence plate number are stored for at least 3 years.
  • Documents relating to the establishment of access to a distributor’s administrative interface are stored for at least 10 years.

(k)     Handling of enquiries about the Vignette System – data are stored in the File Register and their storage and archiving is governed by the valid SFDI File Rules; the minimum period is 3 years.

(l)     Maintenance of user accounts for the employees of the administrator and processors in the Vignette System – data are stored in the Vignette System for the period of validity of the user account.

4.       Rights of the data subject

(a)      Right to withdraw consent

If the SFDI processes your personal data with the data subject’s consent (this does not happen within the Vignette System), you have the right to revoke this consent at any time without affecting the above purposes.

(b)      Right of access to personal data

As the owner of your personal data, you have the right to obtain confirmation from the SFDI whether or not your personal data are being processed. If your personal data are being processed, you also have the right to access them together with the following information about:

  • the purpose of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the SFDI the correction or deletion of personal data, the restriction of their processing or the right to object to such processing;
  • the right to lodge a complaint with the Office for Personal Data Protection;
  • all available information on the source of the personal data;
  • whether automated decision-making, including profiling, is taking place, the procedure used, as well as the significance and expected consequences of such processing.

The SFDI provides a copy of the processed information free of charge. Only in the event that requests are clearly unfounded or disproportionate, especially because they are repeated, the SFDI may impose a reasonable fee according to the Table of Fees for providing information on personal data, which is available here. If the request was submitted in digital form, the SFDI will provide you with the information in a commonly used digital form, unless otherwise requested.

(c)      Right to rectification

If you discover an inaccuracy in your personal data, you, as the owner of the personal data, have the right to have the SFDI rectify the inaccurate personal data without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

(d)      Right of erasure

As the owner of your personal data, you have the right to have the SFDI delete your personal data if at least one of the following conditions is met:

  • the personal data are not necessary in relation to the purposes for which they were collected or otherwise processed;
  • your consent to the processing of personal data is revoked and there is no other legal reason for the processing;
  • objection to the processing has been raised and there are no legitimate reasons for the processing;
  • the personal data have been unlawfully processed;
  • the personal data must be erased in order to fulfil a legal obligation.

The right of erasure does not apply if there is a legal exception, in particular because the processing of personal data is necessary for one of the following:

  • exercising the right of freedom of expression and information;
  • fulfilment of a legal obligation which requires processing in accordance with the legal regulations of the European Union or the Czech Republic or for the fulfilment of a task performed in the public interest or in the exercise of official authority vested in the SFDI;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right of erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  • for the establishment, exercise or defence of legal claims.

(e)      Right to restriction of processing

As the owner of your personal data, you have the right to have the SFDI restrict the processing of your personal data in any of the following cases:

  • denial of the accuracy of personal data – the SFDI will limit the processing to the time necessary to verify the accuracy of personal data;
  • the processing is unlawful, and you refuse to delete your personal data and instead request a restriction on their use;
  • the SFDI no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of your legal claims;
  • there is an objection to the processing, until it is verified that the legitimate reasons of the SFDI outweigh the legitimate reasons of your person.

Where processing has been restricted, your personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of the Czech Republic.

(f)      Right to data portability

As the owner of the personal data, you have the right to obtain personal data concerning your person in a structured, commonly used and machine-readable format and you shall have the right to request the transfer of such data to another controller without being prevented from doing so by the SFDI, provided that:

  • personal data are processed with the consent of the data subject;
  • the processing is carried out by automated means.

The SFDI, if technically possible, will transfer the data to another administrator at your request. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(g)      Right to object

As the owner of the personal data, you have the right at any time to object to the processing of your personal data if the legal claim for the processing is the fulfilment of a task in the public interest or in the exercise of official authority or if the processing is necessary for the legitimate interests of the controller or a third party, including profiling based on these provisions. The SFDI shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of your person or for the establishment, exercise or defence of legal claims.

(h)      Right not to be the subject of an automated individual decision, including profiling

As the owner of the personal data, you have the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for you or affects you in a similar way.

(i)      Right to lodge a complaint

As the owner of the personal data, you have the right to lodge a complaint with the Office for Personal Data Protection, based at pplk. Sochora 27, 170 00 Praha 7, Czech Republic, phone: +420 234 665 111, website: http://www.uoou.cz/, if you believe that by processing your personal data the SFDI is violating the General Data Protection Regulation.

  • Registering the vehicle in the EDAZ for the length of the vignette’s validity and then for a period of two years from the vignette’s expiration;
  • Recording a vehicle’s exemption for as long as the reasons for the vehicle’s toll exemption exist (EDAZ) and for a period of two years after the reasons for the exemption have passed.

5.       Exercise of the data subject’s rights

To request the exercise of your rights, it is necessary to fill in the relevant PDF form, which you can send in the following ways. With regard to the possible risks of misuse and ensuring the protection of the data subject’s personal data (e.g. customer, employee, supplier, etc.), the SFDI restricts the communication channels through which your request for the exercise of the data subject’s rights may be accepted and responded to. For unambiguous identification of the data subject, we require the following personal data: name, surname, date of birth, place of permanent residence.

1. To the designated data box for the Electronic Vignettes agenda with the identifier ws5mh9w at the web address https://www.mojedatovaschranka.cz/.

2. By email to the address epodatelna@edalnice.cz (digitally filled-in .PDF form or a scanned filled-in .PDF form provided with an electronic signature that is acknowledged by a special legal regulation to be equal in effect to a handwritten signature; or an electronic conversion of a printed out and filled in, acquired at any official Czech Point location);

3. In paper form through an operator providing postal services with an officially certified signature to the address: Státní fond dopravní infrastruktury, Sokolovská 1955/278, 190 00 Praha 9.

4. If you do not have access to the Internet, you can write a free-form notification containing the particulars required by law and an officially verified signature or power of attorney, and send it to the address of the State Fund for Transport Infrastructure (SFDI) headquarters.

Downloadable form

Request for exercise of data subject’s rights

If you send the request to SFDI contact details that are not considered communication channels for submitting a request for the exercise of your rights, your request will also be forwarded for processing.


Stay in Touch on Social Networks