Principles of personal data processing

‍

‍

Data Controller and Data Subject

The controller of personal data is the company operating this website, the booking service.

The data subject is a natural person who has provided the controller with his/her personal data on the basis of a lease agreement, purchase agreement, service contract or other contract concluded with the controller or on the basis of consent to the processing of personal data within the framework of subscribing to newsletters sent by the administrator. The data subject may also be a natural person whose personal data the controller has obtained from other lawful sources.

Scope of personal data processing

The controller processes personal data to the extent that it is provided to it by the data subjects, or to what extent the controller obtains it from other lawful sources. These are: first name, surname, date of birth, place of residence, place of business, identification number, payment card number tax identification number, e-mail, telephone, signature.

Purpose of personal data processing, general consent

The controller processes the personal data of data subjects in order to fulfill the contract concluded between the data subject and the controller in the form of electronic means of communication at a distance, or in writing, fulfilling legal obligations and for the purpose of direct marketing (i.e. offering products and services of the controller), including sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services. The controller sends the commercial communication only if the data subject has subscribed to the newsletter and has given the second consent to the processing of personal data for marketing purposes.

Purpose of processing personal data, consent for marketing purposes

The controller processes the personal data of data subjects in order to fulfill the contract concluded between the data subject and the controller in the form of electronic means of communication at a distance, or in writing, fulfilling legal obligations and for the purpose of direct marketing, offers, information about the hotel and its activities. The data subject has the possibility to unsubscribe from newsletters in a simple way and free of charge.

Assessment of the necessity of processing

The controller takes care of the protection of the privacy of data subjects and therefore only processes personal data that are strictly necessary for the specified purposes of processing.

Legal basis for the processing of personal data

The legal basis for the processing carried out for the purpose of direct marketing is the consent of the data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining electronic contact in connection with the sale of a product or service of the controller according to Act No. 480/2004 Coll.).

In other cases, the legal basis for processing is the fulfillment of the contract, the protection of the legitimate interests of the administrator (protection of property, the exercise of rights under the contract in court proceedings, etc.) and the fulfillment of a legal obligation.

Period of processing of personal data

In the case of personal data processed for the purpose of fulfilling the contract, the controller processes the personal data for the duration of the contractual relationship and subsequently for another 10 years, taking into account the length of the limitation period for compensation for damage or damage. In the case of processing in order to fulfill a legal obligation, the controller processes personal data for a period stipulated by law. In the case of personal data processed on the basis of the consent of the data subject, the controller processes the personal data for a period of 10 years, unless the consent to the processing of personal data is withdrawn by that time. This is without prejudice to the controller's obligation to process personal data for a period established by or in accordance with the relevant legislation.

Withdrawal of consent to the processing of personal data

If the data subject has given the controller consent to the processing of personal data, he or she may withdraw his voluntarily granted consent to the processing of personal data at any time free of charge. Withdrawal of consent shall not affect the lawfulness of processing based on the consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data processed by the controller on the basis of a legal basis other than consent (i.e., in particular, if the processing is necessary for the fulfillment of a contract, legal obligation or for other reasons specified in applicable law).

Access to personal data

The personal data of data subjects shall be accessed by the controller and, where appropriate, by third parties - recipients who provide appropriate safeguards and whose processing meets the requirements of the applicable legislation and which ensures proper protection of the rights of data subjects

‍

‍