Personal data protection
INFORMATION ON THE PROCESSING AND PROTECTION OF PERSONAL DATA
With effect from 25 May 2018, the processing of your personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), known as the GDPR. In this regard, we provide you with the following information about the processing and protection of your personal data.
I. Personal data controller
The controller of your personal data is Green Garden, s.r.o., with its registered office in Prague 2 - Nové Město, Fügnerovo náměstí 1865/4, ID No. 26462524, (hereinafter referred to as the Controller), which operates the Green Garden Hotel at the address Prague 2 - Nové Město, Fügnerovo náměstí 1865/4 (hereinafter referred to as the Hotel).
II. What personal data we process
The personal data we process about you, the scope of which varies depending on the type and scope of services provided, includes your:
- name and surname, title
- date of birth
- nationality
- residential address
- travel document number
- visa number, if indicated in the travel document
- length of stay
- purpose of stay in the Czech Republic
- type, number and expiry date of payment card
- CCTV footage
- other data, if necessary in connection with the provision of services by the Administrator. We obtain
personal data directly from you or from your accommodation providers when concluding an accommodation reservation contract or accommodation contract and further during our contractual relationship. The provision of your personal data is voluntary. If you decide not to provide us with your personal data, it will not be possible to conclude an accommodation reservation contract or accommodation contract. No automated
decision-making takes place when processing your personal data.
To ensure the security and confidentiality of your personal data, which is extremely important to us, we use technical and organisational measures, in particular to protect against unauthorised access to and misuse of personal data, including ensuring the security of our IT systems. We regularly evaluate and update all measures.
III. Purpose of processing and legal basis for processing personal data
We process your personal data for the following purposes:
- providing services based on a concluded accommodation reservation contract or accommodation contract at the Hotel, i.e. in particular for the purposes of concluding a contract, managing our contractual relationship and communicating with you.
The legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the purposes of concluding or performing a contract with you. - fulfilment of our legal obligations, i.e. in particular for the purposes of keeping a house register and reporting the accommodation of foreigners within the meaning of the legal regulations governing the stay of foreigners in the Czech Republic. The
legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the fulfilment of a legal obligation that applies to us as a personal data controller. - Protection of our legitimate interests, i.e. in particular for the purposes of assessing, exercising and enforcing our legal claims, protecting the rights, property or safety of us, our clients or other persons. The
legal basis that allows us to process your personal data in this case is that the processing of your personal data is necessary for the purposes of our legitimate interests as a personal data controller.
IV. Recipients to whom we may provide your personal data
We do not pass on your data to anyone else except public authorities and bodies, which are not considered recipients under the General Regulation.
V. How long we'll process your personal data
We only store your personal data for as long as any of the above-mentioned purposes of processing persist, i.e. in particular for the duration of the contract and for the duration of your consent to the processing of personal data. After the termination of the contract, we will only store your personal data for the period and under the conditions required by law in accordance with the general limitation, archiving and disposal periods.
VI. Your rights related to the processing of your personal data
In connection with the processing of your personal data, you have:
- the right to concise, clear, transparent and comprehensible information about how we handle your personal data and what your rights are in relation to the processing of your personal data (this document also serves this purpose)
- the right to access your personal data, including the right to obtain confirmation as to whether or not we are processing your personal data and the right to request information about what personal data we are processing
- the right to correct inaccurate and incomplete personal data
- the right to erase your personal data ("right to be forgotten") if:
- your personal data is no longer necessary for the purposes for which it was collected or processed;
- you have withdrawn your consent to the processing of your personal data;
- you have objected to the processing of your personal data and our legitimate interest in further processing your personal data does not take precedence in this case, or you have objected to the processing of your personal data for direct marketing purposes;
- your personal data has been processed unlawfully;
- your personal data must be erased in accordance with legal regulations. - the right to restrict the processing of your personal data if:
- you contest the accuracy of your personal data, for a period enabling us to verify its accuracy;
- the processing of your personal data is unlawful and you request only the restriction of its use instead of its erasure;
- we no longer need your personal data, but you require it for the exercise of your legal claims;
- you have objected to the processing of your personal data, for a period until we verify whether our legitimate interests override your interests. - the right to data portability, including your right to obtain your personal data and your right to decide to transfer it to another service provider
(another personal data controller) - the right to object to the processing of your personal data if we process it for the purposes of protecting our legitimate interests or for direct marketing purposes
- the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7; www.uoou.cz
If you have any questions or comments regarding the processing of your personal data or wish to exercise your rights as set out in point VI, you may do so in writing to the Controller's address, i.e. Prague 2 - Nové Město, Fügnerovo náměstí 1865/4, or electronically at the e-mail address daniel.gallas@greengarden.cz.
