Information on Personal Data Processing (GDPR Notice)
Information on Personal Data Processing (GDPR Notice)
Based on EU Regulation 2016/679 (hereinafter “GDPR”), we inform you that, in connection with your stay, we process your personal data.
These are the data you provide at the reception during check-in for entry in the Guest Book, as well as data provided when making reservations. Such data are recorded in the hotel’s information system for the duration of your stay. They are also used to comply with legal obligations towards the Municipal Authority, the Foreign Police, and the Financial Authority.
To facilitate future check-ins, we retain your data for your next potential visit.
Based on our legitimate interest, and in accordance with Act No. 480/2004, we also use your data for sending email offers. You may opt out of such communication at any time.
You have the right to access your data, request their rectification, erasure, restriction of processing, object to processing, withdraw consent, and lodge a complaint.
The controller of your personal data is:
HOTELY SRNÍ, a.s., Celetná 590, Prague 1, 110 00
Contact details for the Data Protection Officer: GDPR@hotely-srni.cz
,
Phone: +420 376 599 212
1) List of all processing activities, including their purposes, legal bases, categories of data processed, and retention periods
The Company (“Controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and other applicable legislation.
Personal data are processed both manually and automatically by the Controller’s authorised employees as well as by processors contracted by the Controller under data processing agreements.
Categories of recipients to whom personal data may be disclosed include: the Foreign Police, the Municipal Authority, the Financial Authority, and our contracted processors.
Personal data will be processed for the period required by applicable legislation.
The data subject has the right to access personal data processed by the Controller, to request rectification or erasure, restriction of processing, and the right to object to processing.
The data subject also has the right to obtain from the Controller the personal data concerning them which they have provided to the Controller. Upon request, the Controller will provide such data without undue delay in a structured, commonly used, and machine-readable format, or, upon request, will transfer them directly to another clearly designated controller. This right does not apply to personal data that are not processed automatically.
The Controller does not intend to transfer personal data to third countries.
2) Detailed description of your rights and how to exercise them
Right of access – to obtain confirmation whether your personal data are being processed and to access such data.
Right to rectification – to request correction of inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) – to request deletion of your personal data under conditions set out by GDPR.
Right to restriction of processing – to request that the processing of your personal data be limited.
Right to object – to object to processing carried out on the basis of legitimate interest or for direct marketing purposes.
Right to data portability – to receive your personal data in a machine-readable format or have them transferred to another controller.
Right to withdraw consent – if processing is based on consent, you may withdraw it at any time.
Requests concerning these rights may be submitted to the Controller using the contact details provided above.
3) Additional information
If you believe that your personal data are being processed unlawfully, you may first raise a complaint with the Controller.
If your complaint is not resolved to your satisfaction, you may contact the supervisory authority responsible for the Czech Republic:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
Based on EU Regulation 2016/679 (hereinafter “GDPR”), we inform you that, in connection with your stay, we process your personal data.
These are the data you provide at the reception during check-in for entry in the Guest Book, as well as data provided when making reservations. Such data are recorded in the hotel’s information system for the duration of your stay. They are also used to comply with legal obligations towards the Municipal Authority, the Foreign Police, and the Financial Authority.
To facilitate future check-ins, we retain your data for your next potential visit.
Based on our legitimate interest, and in accordance with Act No. 480/2004, we also use your data for sending email offers. You may opt out of such communication at any time.
You have the right to access your data, request their rectification, erasure, restriction of processing, object to processing, withdraw consent, and lodge a complaint.
The controller of your personal data is:
HOTELY SRNÍ, a.s., Celetná 590, Prague 1, 110 00
Contact details for the Data Protection Officer: GDPR@hotely-srni.cz
,
Phone: +420 376 599 212
1) List of all processing activities, including their purposes, legal bases, categories of data processed, and retention periods
The Company (“Controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and other applicable legislation.
Personal data are processed both manually and automatically by the Controller’s authorised employees as well as by processors contracted by the Controller under data processing agreements.
Categories of recipients to whom personal data may be disclosed include: the Foreign Police, the Municipal Authority, the Financial Authority, and our contracted processors.
Personal data will be processed for the period required by applicable legislation.
The data subject has the right to access personal data processed by the Controller, to request rectification or erasure, restriction of processing, and the right to object to processing.
The data subject also has the right to obtain from the Controller the personal data concerning them which they have provided to the Controller. Upon request, the Controller will provide such data without undue delay in a structured, commonly used, and machine-readable format, or, upon request, will transfer them directly to another clearly designated controller. This right does not apply to personal data that are not processed automatically.
The Controller does not intend to transfer personal data to third countries.
2) Detailed description of your rights and how to exercise them
Right of access – to obtain confirmation whether your personal data are being processed and to access such data.
Right to rectification – to request correction of inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) – to request deletion of your personal data under conditions set out by GDPR.
Right to restriction of processing – to request that the processing of your personal data be limited.
Right to object – to object to processing carried out on the basis of legitimate interest or for direct marketing purposes.
Right to data portability – to receive your personal data in a machine-readable format or have them transferred to another controller.
Right to withdraw consent – if processing is based on consent, you may withdraw it at any time.
Requests concerning these rights may be submitted to the Controller using the contact details provided above.
3) Additional information
If you believe that your personal data are being processed unlawfully, you may first raise a complaint with the Controller.
If your complaint is not resolved to your satisfaction, you may contact the supervisory authority responsible for the Czech Republic:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů).