Personal data controller and data subject

The data controller is the company operating this website, the booking service.

The data subject is a natural person who has provided the controller with his or her personal data on the basis of a rental agreement, purchase agreement, service contract or other contract concluded with the controller or on the basis of consent to the processing of personal data in the context of subscribing to newsletters sent by the controller. The data subject may also be a natural person whose personal data the controller has obtained from other lawful sources.

 

Scope of processing of personal data

The controller shall process personal data to the extent that they are provided to it by the data subjects or to the extent that the controller obtains them from other lawful sources. This includes: name, surname, date of birth, place of residence, place of business, identification number, payment card number, tax identification number, e-mail, telephone, signature.

 

Purpose of personal data processing, general consent

The controller processes the personal data of data subjects for the purpose of fulfilling the contract concluded between the data subject and the controller by means of electronic means of communication at a distance or in writing, for the performance of legal obligations and for the purpose of direct marketing (i.e. offering the controller's products and services), including sending commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services. The controller sends commercial communications only if the data subject has subscribed to the newsletter and has given a second consent to the processing of personal data for marketing purposes.

 

Purpose of processing personal data, consent for marketing purposes

The controller processes personal data of data subjects for the purpose of fulfilling the contract concluded between the data subject and the controller by electronic means of distance communication or in writing, fulfilling legal obligations and for the purpose of direct marketing, offers, information about the hotel and its activities. The data subject has the possibility to unsubscribe from the newsletter in a simple and free way.

 

Assessment of the necessity of processing

The controller takes care to protect the privacy of data subjects and therefore only processes personal data that are strictly necessary for the stated purposes of processing.

 

Legal basis for processing personal data

The legal basis for processing carried out for direct marketing purposes is the consent of data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining electronic contact in connection with the sale of the controller's product or service pursuant to Act No. 480/2004 Coll.).

In other cases, the legal basis for processing is the performance of a contract, the protection of the legitimate interests of the controller (protection of property, assertion of rights under a contract in legal proceedings, etc.) and the fulfilment of a legal obligation.

 

Period of processing of personal data

In the case of personal data processed for the performance of a contract, the controller processes personal data for the duration of the contractual relationship and subsequently for a further 10 years, taking into account the length of the limitation period for compensation for damage or injury. In the case of processing for the purpose of compliance with a legal obligation, the controller shall process personal data for the period prescribed by law. In the case of personal data processed on the basis of the consent of the data subject, the controller shall process the personal data for a period of 10 years, unless the consent to the processing of the personal data is withdrawn by that time. This is without prejudice to the controller's obligation to process personal data for the period specified by or in accordance with the relevant legislation.

 

Withdrawal of consent to the processing of personal data

If the data subject has given the controller consent to the processing of personal data, he or she may withdraw his or her voluntary consent to the processing of personal data at any time free of charge. Withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation or for other reasons specified in applicable law).

 

Access to personal data

The personal data of data subjects shall be accessible to the controller and, where applicable, to third party recipients who provide appropriate safeguards and whose processing complies with the requirements under applicable law and ensures adequate protection of the rights of data subjects