Procesní perspektiva ochrany osobních údajů ve velkoobchodní společnosti

The thesis focuses on personal data protection during realization of company processes. The objective of the work is to define specificity of personal data processing and protection for companies that operate within a wholesale business area, to analyze the Czech and the European Union legislation regulating the principles for personal data processing and protection, and to identify the new requirements stated in Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), which enters into force from 25 May 2018.The theoretical part includes an introduction of business process management and information security management, an overview of principles relating to processing of personal data and a guideline for a proper approach to GDPR compliance.In the practical part, the theoretical principles are compared with the real practice within a chosen wholesale company. The overview of the different types of processed personal data, the overview of the most common purposes relating to the personal data processing and a list of potential risk areas for personal data protection are involved, too. A proposal for new company processes that would deal with situations in which the data subject claims the right to be forgotten (which is newly modified by GDPR) is included as well.The information contained in this thesis can be useful not only for the chosen wholesale company, but also for any other organization that needs to set up or optimize the rules for personal data processing and protection.