Processing of personal data
With effect from 25 May 2018, the processing of your personal data is subject to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the so-called GDPR. In this regard, we provide you with the following information on the processing and protection of your personal data.
I. Personal data controller
The controller of your personal data is Cade-Hotel s.r.o., with its registered office at Burketova 51, 397 01 Písek, Company ID 09725032, (hereinafter referred to as the Controller), which is the operator of the Cade Hotel at Burketova 51, 397 01 Písek (hereinafter referred to as the Hotel).
II. What personal data do we process
The personal data we process about you, the scope of which varies depending on the type and scope of services provided, includes your:
- first and last name, title
- date of birth
- citizenship
- residential address
- travel document number
- visa number, if indicated in the travel document
- length of stay
- purpose of stay in the Czech Republic
- type, number and expiration date of the payment card
- recording from the camera system
- other data, if necessary in connection with the provision of services by the Administrator.
We obtain personal data directly from you or from your accommodation providers when concluding an accommodation reservation contract or accommodation contract and further during the course of our contractual relationship. Providing your personal data is voluntary. If you decide not to provide us with your personal data, it will not be possible to conclude an accommodation reservation contract or accommodation contract.
No automated decision-making takes place when processing your personal data.
To ensure the security and confidentiality of your personal data, which is extremely important to us, we use technical and organizational measures, in particular to protect against unauthorized access to personal data and its misuse, including ensuring the security of our IT systems. We regularly evaluate and update all measures.
III. Purpose of processing and legal basis for processing personal data
We process your personal data for the following purposes:
- Provision of services based on a concluded accommodation reservation contract or a Hotel accommodation contract, i.e. in particular for the purposes of concluding a contract, managing our contractual relationship and communicating with you. The legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the purposes of concluding or performing a contract with you.
- Fulfillment of our legal obligations, i.e. in particular for the purposes of maintaining a house register and reporting the accommodation of a foreigner within the meaning of the legal regulations governing the stay of foreigners in the Czech Republic. The legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the fulfillment of a legal obligation to which we as the personal data controller are subject.
- Protection of our legitimate interests, i.e. in particular for the purposes of assessing, exercising and enforcing our legal claims, protecting the rights, property or safety of us, our clients or other persons. The legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the purposes of our legitimate interests as a personal data controller.
IV. Recipients to whom we may provide your personal data
We do not pass on your data to anyone else, except for authorities and public authorities that are not considered recipients under the general regulation.
V. The period for which we will process your personal data
We only retain your personal data for as long as any of the above processing purposes last, i.e. in particular for the duration of the contract and for the duration of your consent to the processing of personal data. After the termination of the contract, we retain your personal data only for the period and under the conditions required by law in accordance with general limitation, archiving and destruction periods.
VI. Your rights related to the processing of your personal data
In connection with the processing of your personal data, you have:
- the right to concise, clear, transparent and understandable information about how we handle your personal data and what your rights are related to the processing of your personal data (this document also serves this purpose)
- the right to access personal data, including the right to obtain confirmation as to whether or not we are processing your personal data and the right to request information about what personal data we are processing
- the right to rectify inaccurate and incomplete personal data
- the right to erase your personal data ("right to be forgotten") if:
- your personal data are no longer necessary for the purposes for which they were collected or processed;
- you have withdrawn your consent to the processing of your personal data;
- you have objected to the processing of your personal data and our legitimate interest in further processing your personal data does not prevail in the given case or you have objected to the processing of your personal data for direct marketing purposes;
- your personal data have been processed unlawfully;
- Your personal data must be deleted in accordance with legal regulations.
- the right to restrict the processing of your personal data if:
- you dispute the accuracy of your personal data, for a period of time until we verify their accuracy;
- the processing of your personal data is unlawful and you only request the restriction of their use instead of erasing your personal data;
- we no longer need your personal data, but you require them to exercise your legal claims;
- you have objected to the processing of your personal data, for a period of time until we verify whether our legitimate interests override your interests.
- the right to data portability, including your right to obtain your personal data and your right to decide on their transfer to another service provider (to another personal data controller)
- the right to object to the processing of your personal data if we process them for the purposes of protecting our legitimate interests or for direct marketing purposes
- the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7; www.uoou.cz
If you have questions or comments regarding the processing of your personal data or want to exercise your rights specified in point VI., you can do so in writing at the Administrator's address, i.e. Burketova 51, 397 01 Písek or electronically at the e-mail address recepce@hotelcade.cz.