Information on processing personal data of clients and business partners
Dear Sirs,
This document contains basic information about how we process your personal data. It was prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (GDPR).
(a) The controller is the person who, alone or together with others, determines the purposes and decides how personal data will be processed.
b) Your data administrator is: Residence Lipno Management s.r.o., Company ID: 03206718, registered office at Lipno nad Vltavou 880, 382 78 Lipno nad Vltavou, registered at the Regional Court in České Budějovice, file no. C 22878
as administrator.
c) You can contact the administrator through the following contacts:
phone: +420 380 831 644
E-mail: info@residencelipno.cz
a) We process your personal data in order to:
(a1) ensuring the conclusion and subsequent fulfillment of a contractual obligation between the trustee and you (Article 6 (1) (b) of the GDPR). Other legal obligations arise from such a relationship and the controller must also process personal data for this purpose (Article 6 (1) (c) of the GDPR), including in order to maintain a register for the payment of the spa and recreational stay fee (§ 7). , paragraph 3, Act No. 565/1990 Coll., on local fees);
and (2) the protection of your legitimate interests (Article 6 (1) (f) of the GDPR), which is to ensure the protection of the materials you have entrusted to us for processing, the protection of our property.
a3) registration of personal data beyond the obligations for keeping the register book by the administrator (the landlord), arising from Section 3 (4) of Act no. No. 565/1990 Coll. about local fees in the Residence Lipno reservation system - booking.cap-net.cz;
(a4) marketing purposes
- sending information (news, current quotations) about services supplied by the administrator (hereinafter also as services),
- getting information about your satisfaction with services and events,
in order for the trustee to best adapt the offer of his services and commercial communications relating to them to your needs, for this purpose the trustee obtains your explicit consent (Article 6 (1) (a) of the GDPR;
b) Providing personal data to the controller is generally a legal and contractual requirement. You are required to consent to the provision of personal data for the operation of the reservation system (personal data beyond those kept in the register book) and for marketing purposes, which does not constitute compliance with the contractual and legal obligations of the administrator. Failure to give your administrator permission to process personal data for marketing purposes does not mean that the administrator will refuse to provide you with its service under contract.
c) Our legitimate interests are, in particular, the proper fulfillment of all contractual obligations, the proper fulfillment of all legal obligations, the protection of our business and assets and, last but not least, the protection of the environment and ensuring sustainable development.
(d) The lawfulness of the processing is given by Article 6 (1) of the GDPR, according to which the processing is lawful if necessary for the performance of the contract, the administrator's legal obligations, the protection of the controller's legitimate interests or processing. and.
e) The lawfulness of processing is further based, for example, on Act No. 563/1991 Coll., on Accounting, according to which billing information is processed and stored, Act No. 89/2012 Coll., the Civil Code, according to which the administrator defends his legitimate interests; from the Act No. 235/2004 Coll., on Value Added Tax and Act no. No. 565/1990 Coll., on local fees.
a) We process your personal data:
basic identification data
b) Source of personal data - we have obtained personal data directly from you, especially from completed forms, mutual communication or from concluded contracts. In addition, personal data may also come from publicly available sources, registers and registers, such as the trade or trade register.
c) Processing time - information that we have to archive based on the deadlines set by legislation, we keep for the period specified in the law (this applies in particular to accounting documents and data kept in the register book). .Personal data processed solely for marketing purposes shall be processed until the withdrawal of consent, for a maximum period of 10 years.After that period, personal data will be safely and irrevocably destroyed so that it cannot be misused.
d) Transmission of data - Personal data must be provided within the legal limits to state administration authorities, such as tax administrators, courts, law enforcement authorities. When processing orders we use various systems, which are mostly installed on our equipment. If this is not the case, and the system is operated by an external supplier, we have the appropriate contracts with him and we ensure that he also takes care of your data with due responsibility and in accordance with GDPR. For all processors, we ensure that they also process your personal data safely and fully in accordance with GDPR.
We will only pass on personal information to BETTER HOTEL s.r.o. registered at Rybná 716/24, 110 00 Praha 1, kept by the Municipal Court in Praha under number C233552, for the purpose of operating the common reservation system, this handover is necessary for the operation of this reservation system.
a) You are guaranteed the rights described in this article with respect to the processing of your personal data. You can apply to the administrator at the above-mentioned contacts, either by sending an e-mail to the addresses indicated or in writing to the company address. All communications and statements on the rights you exercise are provided by the administrator free of charge. However, should the request be manifestly unfounded or disproportionate, in particular because it is repeated, the controller shall be entitled to charge a reasonable fee taking into account the administrative costs involved in providing the information requested. In case of repeated application of the request to provide copies of processed personal data, the administrator reserves the right to charge a reasonable fee for administrative costs for this reason. Your administrator will provide you with comments and, if necessary, information on the measures taken as soon as possible, but no later than within one month. The administrator is entitled to extend the deadline by two months, if necessary and in view of the complexity and number of requests. The administrator will inform you about the extension including the reasons.
b) The right to information about the processing of your personal data - you are entitled to request from the controller whether the personal data is processed or not. If personal data are processed, you have the right to request information from the controller, in particular on the identity and contact details of the controller, his or her deputies and, where appropriate, the Data Protection Officer, the purposes of processing, the categories of personal data concerned, administrators, on the enumeration of your rights, on the possibility to turn to the Office for Personal Data Protection, registered Sochora 27, 170 00 Prague 7, about the source of processed personal data and about automated decision making and profiling. If the controller intends to further process your personal data for a purpose other than that for which it was collected, the controller will provide you with information about that other purpose and other relevant information before further processing. The information provided to you in exercising this right is already contained in this document, but this does not prevent you from requesting it again.
c) Right of access to personal data - you are entitled to request from the controller whether your personal data is processed or not and if so, you have access to information about the purposes of processing, categories of personal data concerned, recipients or categories of recipients, retention of personal data, information about your rights (rights to request correction or deletion from the controller, processing restrictions, objection to such processing), the right to file a complaint with the Office for Personal Data Protection, information about the source of personal data, automated decision-making and profiling and information regarding the process used, as well as the significance and anticipated consequences of such processing for you, information and guarantees in the case of transfer of personal data to a third country or international organization. You have the right to provide copies of the processed personal data. However, the right to obtain such a copy shall not adversely affect the rights and freedoms of others.
d) Right of rectification - under the given conditions you generally have the right to rectify your personal data.
e) Right of erasure / right to be forgotten - in specified cases you have the right to request that the administrator delete your personal data. Such cases include, for example, that the data being processed is no longer necessary for the above mentioned purposes. The administrator deletes personal information automatically after the expiry date, but you can contact him at any time. Your application is then subject to an individual assessment (despite your right to delete, the administrator may have an obligation or a legitimate interest to keep your personal data) and you will be informed in detail about its processing.
f) Right of processing limitation - the controller processes your personal data only to the extent necessary. However, if you feel that the controller, for example, exceeds the purposes for which he or she processes personal data, you may request that your personal data be processed solely for the strictest legal reasons or that personal data should be blocked. Your application is then subject to an individual assessment and you will be informed in detail about its processing.
g) Right to data portability - based on your request, the administrator may provide your personal data to another administrator, resp. to another company, the administrator will transfer your personal data in an appropriate format to your designated entity, provided that no legal or other significant obstacles prevent it.
h) Right to object and automated individual decision-making - if you believe that the controller is processing personal data in violation of the protection of your private and personal life or in violation of law (provided that personal data are processed by the controller on a public or legitimate interest, or are being processed for direct marketing purposes, including profiling, or for statistical purposes, or for purposes of scientific or historical interest), you may contact the administrator to explain or remedy the defective condition. You can also object directly to automated decision-making and profiling.
i) Right to lodge a complaint with the Office for Personal Data Protection - you can always contact your supervisory authority, the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website https://www.uoou.cz/)
j) Right to Revoke Consent - You have the right to revoke your consent to the processing of personal data at any time, either by completing the form on the administrator's website or by sending an appeal to the administrator's email or address or by using a link in email communication.
If you entrust us with documents containing personal data or we process an order for which the personal data of other persons are necessary, we are in the position of the processor. We process the data for such orders (which may contain personal data) in accordance with this information and for as long as necessary.
a) Google services and cookies
The website uses so-called "cookies" for its activities. The website also uses Google Analytics and possibly other services provided by Google, Inc. ("Google"). The use of cookies also applies to the use of these other services.
b) What are cookies and how do you agree to their use?
Cookies are text files that are stored on a computer or other electronic device of each visitor to the web interface, which allow analysis of how the web interface is used.
By using the web interface, you consent to the use of cookies, as well as the processing of data about you by Google and our company, in the manner and for the purposes detailed in the web interface. You were informed about the use of cookies when you first accessed the web interface.
c) Can you prevent cookies from being stored on your computer?
You can refuse the use of cookies by selecting the appropriate settings in your Internet browser. If you don't want to be a part of Google Analytics statistics, you can use a deadlock.
Please note that if you refuse the use of cookies, it is not excluded that you will not be able to make full use of the website features.
d) How does Google use the data obtained?
If you are interested in how Google uses the data it receives from using the web interface, you can find this information by clicking on the following link: How Google uses data when you use our partners' websites or apps.
e) Remarketing activities
For better targeting and personalization of internet advertising we use services such as Sklik from Seznam.cz, AdWords from Google, Facebook, and others. For you, this means that when you browse the Internet, you are seeing an advertisement for products that you have shown in the past, for example, by visiting our website. These services, based on information from cookies, use knowledge about your movement on the web for the purposes described above. If you do not want this information to be used for this purpose, you need to set up your Internet browser accordingly (set your browser to block the saving of web traffic information).
This document is valid from May 25, 2018 and can be updated at any time. The current version will always be published on the company's website https://www.residence-lipno.com.