Personal data

Personal data | Levnější Hotel v Praze

PRINCIPLES OF PERSONAL DATA PROCESSING

 

Miroslav Horanský

Firm Identification No.: 75258986

Registered office: Prague 10, Záběhlice, Ellnerové 3104/4

Registered in the Trade Register of the Municipal Office in Prague 10

E-mail: info@hostel-rohoznik.cz

Telephone No.: 00420 / 605 407 932

Website: https://levnejsihotelvpraze.cz/ (hereinafter referred to as “Website“)

(hereinafter referred to as “Controller“)

 

controls and processes personal data of the subjects listed below as part of his activities. These Principles of Personal Data Processing (hereinafter referred to as “Principles“) inform data subjects regarding the circumstances of the processing of their personal data and the rights they have in relation to such processing.

 

      I. DATA SUBJECTS, PURPOSES, SCOPE, DURATION AND LEGAL REASON FOR PROCESSING

 

 A. CLIENTS

The Controller processes personal data of customers for the purpose, to the extent, for the legal reason and for the period mentioned below:

 

a. Purpose: Providing services to customers in accordance with the mandate contract (entering into the mandate contract, booking of accommodation and other related communication).

Scope of data: Full name, residential address, e-mail address, telephone number.

Legal reason: Necessity of personal data processing for the performance of the contract.

Duration: For the period necessary for the performance of the contract and for the duration of limitation periods.

 

b. Purpose: Accounting and tax purposes and fulfilment of archiving obligations.

Scope of data: Full name, address.

Legal reason: Necessity of processing to fulfil legal obligations imposed on the Controller by law.

Duration: For the necessary period of 10 years, unless legal regulations require longer periods.

 

c. Purpose: Sending commercial messages for marketing and advertising purposes.

Scope of data: Full name and e-mail address.

Legal basis: Consent.

Duration: For a period that is necessarily long and reasonable, at the latest until the consent is revoked.

 

d. Purpose: Sending unsolicited commercial messages.

Scope of data: Full name and e-mail address.

Legal reason: Legitimate interest (direct marketing).

Duration: For a period that is necessarily long and reasonable.

 

B. WEBSITE VISITORS

You can learn more about the processing of personal data of visitors to the online store and about cookies here.

 

C.  PERSON WHO CONTACTS THE CONTROLLER

The Controller processes personal data of persons who contact the Controller by e-mail, telephone or via a web form in the online store for the purpose, to the extent, for the legal reason and for the period mentioned below:

a. Purpose: Answering questions of the inquiring person.

Scope of data: Full name, e-mail address, telephone number.

Legal reason: Legitimate interest in providing a response.

Duration: For the period necessary to answer the question.

 

  1. VOLUNTARY PROVISION OF DATA

The data subject provides the Controller with his / her personal data voluntarily. Not providing personal data may affect the Controller’s ability to enter into the contract or to provide the data subject with services that are based on the necessary knowledge of information regarding the data subject, including personal data.

 

  1. RIGHT TO WITHDRAW CONSENT

If the processing of personal data is based on the consent of the data subject, the data subject is entitled to withdraw his / her consent to the processing at any time by sending an electronic message to the address (enter the e-mail address) or via the link specified in the commercial message. Such withdrawal of consent shall not affect the processing of personal data carried out by the Controller on the basis of another legal title, in particular for the purpose of performance of a purchase contract, provision of a service or processing that is based on consent until the moment of its withdrawal.

 

  1. PERSONAL DATA PROCESSORS

Personal data processors:

  • operator of the respective accommodation facility according to the client’s choice;
  • service providers for processing cookies: Google Ireland Limited, Meta Platforms Ltd.

 

However, please note that due to the changing nature of some service providers, it is not possible to list all current and future processors of personal data by name. The list of processors may therefore change over time.

 

The Controller does not transfer personal data to any third countries (outside the EU) or international organizations.

 

  1. METHOD OF PERSONAL DATA PROCESSING

The Controller and, as the case may be, his processors process personal data manually (in electronic form) and electronically using automated means.

 

  1. RIGHTS OF DATA SUBJECTS

The data subject has the following rights:

 

a. The right of access to personal data

The data subject has the right to obtain confirmation from the Controller as to whether or not personal data relating to him / her are being processed and, if so, the data subject has the right to obtain access to such personal data as well as to the following information:

  1. purposes of personal data processing;
  2. category of personal data concerned;
  3. recipients or categories of recipients to whom personal data have been or will be disclosed;
  4. planned period for which personal data will be stored or – if such a period cannot be determined – the criteria applied to determine this period;
  5. the existence of the right to request from the Controller the rectification or erasure of personal data relating to the data subject or the restriction of processing or to object to such processing;
  6. the right to file a complaint with the competent supervisory authority;
  7. all available information regarding the source of personal data, if not obtained from the data subject.

 

Furthermore, the data subject has the right to request a copy of the processed personal data from the Controller, provided that this does not adversely affect the rights and freedoms of other persons. If additional copies are requested by the data subject, the Controller may charge a reasonable fee based on administrative costs. If the data subject submits a request in electronic form, the information shall be provided in electronic form that is commonly used, unless the data subject requests otherwise.

 

b) The right to rectification

The data subject has the right to request the Controller to rectify inaccurate personal data relating to the data subject without undue delay. Taking into account the purposes of the processing, the data subject has the right to request supplementation of incomplete personal data, including by providing an additional statement.

 

c) The right to erasure (the right “to be forgotten”)

The data subject has the right to request the Controller to erase personal data relating to the data subject without undue delay, and the Controller is obliged to erase such personal data without undue delay if any of the following reasons apply:

  1. personal data are no longer needed for the purposes for which they were collected or otherwise processed;
  2. the data subject revokes the consent on the basis of which the personal data were processed, and there is no other legal reason for the processing;
  3. the data subject raises legitimate objections to the processing of personal data;
  4. personal data were processed illegally;
  5. personal data are required to be deleted to fulfil a legal obligation set out in the law of the European Union or of the Czech Republic;
  6. personal data were collected in connection with an offer of services provided by an information company based on consent given by a child.

 

d) The right to restrict processing

The data subject has the right to request the Controller to restrict the processing in any of the following cases:

  1. the data subject denies the accuracy of his / her personal data for the time required for the Controller to verify the accuracy of the personal data;
  2. the processing is unlawful and the data subject refuses the erasure of personal data and instead requests the restriction of their use;
  3. the Controller no longer needs the personal data for processing purposes but the data subject requests them for the determination, exercise or defence of legal claims.

 

e) The right to portability of personal data

The data subject has the right to receive personal data relating to the data subject that he / she has provided to the Controller in a structured, commonly used and machine-readable format, and the right to transfer such data to another controller without the Controller preventing it in the event that:

  1. the processing is based on consent to the processing of personal data or the processing of personal data is carried out for the purposes of entering into and performing a contract with the data subject; and at the same time
  2. the processing is performed automatically.

 

When exercising his / her right to data portability, the data subject has the right to have personal data transferred by the Controller directly to another controller, if this is technically feasible. The right to portability of personal data shall not adversely affect the rights and freedoms of other persons.

 

f) The right to object

The data subject has the right to object to the processing of personal data. If the data subject raises a legitimate objection to the processing for the purposes of direct marketing or profiling, his / her personal data shall no longer be processed for these purposes.

 

The objection shall be evaluated, and subsequently the Controller shall inform the data subject whether the objection is accepted and the Controller shall no longer process the data or that the objection is not justified and the processing shall continue. Processing shall be restricted until the objection is resolved.

 

g) The right not to be subject to automated decisions, including profiling

The data subject has the right not to be subject to any decision based solely on automated processing, including profiling (i.e. any form of automated processing of personal data consisting of their use to evaluate some personal aspects relating to the data subject), which has legal effects on him / her or significantly affects him / her in a similar way. This right does not apply if the automated decision is necessary for entering into or performing a contract between the data subject and the Controller or is based on the express consent of the data subject; in these cases, however, the data subject has the right to human intervention in the automated decision by the Controller, the right to express his / her opinion and the right to challenge the automated decision.

 

h) The right to file a complaint with the competent supervisory authority

The data subject has the right to file a complaint against the processing of his / her personal data by the Controller with the competent supervisory authority which for the Czech Republic is the Office for Personal Data Protection, Plk.Sochora 27, 17000 Prague 7.

 

  1. FINAL PROVISIONS

The Controller has not appointed a personal data protection officer.

The Controller is entitled to modify these Principles of Personal Data Protection and Processing unilaterally.

These Principles of Personal Data Protection and Processing become effective on 1.6.2023

Links