Na Dolnici 39
155 00 Praha 5
Czech Republic
Betreiber
Irena Kutková
IČ: 13782886
+420 603 849 641
info@pensioninprag.cz
Information on Personal Data Processing
under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “Regulation”)
Irena Kutková, with its registered seat at Na dolnici 4/39, 155 00, Praha 5 – Stodůlky, Id. No.: 13782886, e-mail: petra.praha@seznam.cz, providing accommodation (hereinafter also “Pension Petra”), as a personal data controller within the meaning of the Regulation (hereinafter also the “Controller”), hereby provides information on the manner and scope of personal data processing, including the scope of data subjects’ rights related to processing of their personal data.
The Controller processes personal data in conformity with EU law, especially in conformity with the Regulation, and also in conformity with the relevant international treaties binding on the Czech Republic and in conformity with the relevant national laws.
Data subjects may contact the Controller with regard to all issues related to processing of their personal data and to the exercise of their rights. The following contact details serve for these purposes: petra.praha@seznam.cz.
What personal data are processed by the Controller, for what purpose and on what basis?
The Controller obtains personal data directly from the data subjects and from third parties (e.g. booking portals).
The Controller only processes personal data that the Controller has obtained in conformity with the applicable legal regulations; the Controller collects and processes such personal data only for the set purpose, within the scope and for the period necessary for attaining this set purpose, while taking into account the practical functioning of the Controller. The personal data processed and their purposes and the legal basis for processing differ according to the services provided by the Controller to the data subject:
|
Case I – You have booked accommodation at Pension Petra |
|
|
Where have we obtained your personal data from? |
· Your personal data were obtained directly from you if you booked accommodation with us directly by e-mail or on our website. · If you used an intermediary in booking the accommodation (travel agency, booking portal), we have the data from the intermediary. |
|
Personal data processed: |
a) Name and surname of the person making the booking and his/her sex |
|
b) Citizenship/nationality |
|
|
c) Duration of the stay |
|
|
d) E-mail address and/or telephone number of the person making the booking |
|
|
|
e) Number of the identity card |
|
Legal basis for processing |
· We obtain the personal data specified in paragraphs a) to c) from you and we process them on the legal grounds of execution and performance of the contract. · We process the personal data specified in paragraph d), if provided to us within the booking, on the basis of a legitimate interest, consisting in the possibility of maintaining direct contact regarding the booking and any extraordinary events. |
|
Purposes of processing |
· We process the personal data under paragraphs a) to c) for the purpose of executing the contract. · We also process the personal data under paragraphs a) to c) and e) for the purpose of confirming your stay with a view to obtaining a visa, if appropriate. · We process the personal data under paragraphs a) to d) for the purpose of providing the required services. |
|
Information on the duty to provide personal data |
· The provision of personal data under paragraphs a) to c) is a contractual requirement. Without such personal data, we cannot enter into an accommodation contract with you and we therefore cannot satisfy your booking. |
|
Who we provide your personal data to? |
· We do not share the above personal data with any third party. |
|
Case II – You are a foreign national and are staying at Pension Petra and have thus become our guest |
|
|
Where have we obtained your personal data from? |
· We have your personal data directly from you · Furthermore, we process your personal data we obtained within the booking – see Case I. |
|
Personal data processed: |
a) Name and surname and your sex |
|
b) Permanent address |
|
|
c) Birth identification number or date of birth |
|
|
d) Citizenship/nationality |
|
|
e) Identity card/passport and visa |
|
|
f) Duration of the stay |
|
|
g) Purpose of the stay |
|
|
h) E-mail address and telephone number |
|
|
i) Third-party data (jointly accommodated persons) |
|
|
Legal basis for processing |
· We process the personal data specified in paragraphs a) to g) on the legal grounds of performing a legal obligation, specifically a duty under Act No. 326/1999 Coll., on the residence of foreigners in the territory of the Czech Republic, as amended. · We process the personal data specified in paragraph g) on the legal grounds of performing a legal obligation, specifically a duty under Act No. 565/1990 Coll., on local fees, as amended. · We process the personal data specified in paragraphs a) to c), and f) on the legal grounds of performing a legal obligation, specifically a duty under Act No. 563/1991 Coll., on accounting, as amended. · We process the personal data specified in paragraphs a) to g) on the legal grounds of execution of the contract. · We process the personal data specified in paragraph i) on the legal grounds of performance of the contract. · In specific cases, all the personal data may be processed, beyond the scope of the above, on the legal grounds of a legitimate interest consisting in enforcement of our claims and defence against claims raised. |
|
Purposes of processing |
· We process the personal data under paragraphs a) to g) for the purposes of performing our legal obligations specified above. · We process the personal data under paragraphs a) to g) for the purpose of executing the contract. · We process the personal data under paragraphs i) for the purpose of providing the required services and performing the contract. · All the personal data may be processed in a specific case for the purpose of conducting litigation. |
|
Information on the duty to provide personal data |
· The provision of the personal data under paragraphs a) to g) is a statutory requirement and, without being provided with these personal data from you, we cannot arrange accommodation at Pension Petra for you. |
|
For how long will your personal data be processed? |
· The personal data under paragraphs a) to g), processed on the basis of Act No. 326/1999 Coll., on the residence of foreigners in the territory of the Czech Republic, as amended, must be processed under the law for at least 6 years. · The personal data specified in paragraphs a) to c), and f), processed on the basis of Act No. 563/1991 Coll., on accounting, as amended, must be processed under the law for at least 5 years. |
|
Who we provide your personal data to? |
· To public authorities within the exercise of their powers. |
|
Case III – You are a citizen of the Czech Republic and are staying at Pension Petra and have thus become our guest |
|
|
Where have we obtained your personal data from? |
· We have your personal data directly from you · Furthermore, we process your personal data we obtained within the booking – see Case I. |
|
Personal data processed: |
a) Name and surname and your sex |
|
b) Permanent address |
|
|
c) Birth identification number or date of birth |
|
|
d) Citizenship/nationality |
|
|
e) Your identity card number |
|
|
f) Duration of the stay |
|
|
g) Purpose of the stay |
|
|
h) E-mail address and telephone number |
|
|
i) Third-party data (jointly accommodated persons) |
|
|
Legal basis for processing |
· We process the personal data specified in paragraphs a), b), f) and g) on the legal grounds of performing a legal obligation, specifically a duty under Act No. 565/1990 Coll., on local fees, as amended. · We process the personal data specified in paragraphs a) to c), and f) on the legal grounds of performing a legal obligation, specifically a duty under Act No. 563/1991 Coll., on accounting, as amended. · We process the personal data specified in paragraphs a) to g) on the legal grounds of execution of the contract. · We process the personal data specified in paragraph i) on the legal grounds of performance of the contract. · In specific cases, all the personal data may be processed, beyond the scope of the above, on the legal grounds of a legitimate interest consisting in enforcement of our claims and defence against claims raised. |
|
Purposes of processing |
· We process the personal data under paragraphs a) to c), f), and g) for the purposes of performing our legal obligations specified above. · We process the personal data under paragraphs a) to g) for the purpose of executing the contract. · We process the personal data under paragraphs i) for the purpose of providing the required services and performing the contract. · All the personal data may be processed in a specific case for the purpose of conducting litigation. |
|
Information on the duty to provide personal data |
· The provision of the personal data under paragraphs a) to g) is a statutory requirement and, without being provided with these personal data from you, we cannot arrange accommodation at Pension Petra for you. |
|
For how long will your personal data be processed? |
· The personal data specified in paragraphs a) to c), and f), processed on the basis of Act No. 563/1991 Coll., on accounting, as amended, must be processed under the law for at least 5 years. |
|
Who we provide your personal data to? |
· To public authorities within the exercise of their powers. |
What are rights of the data subject?
Within the meaning and under the conditions of Article 15 of the Regulation, the data subject is entitled to request that the Controller enable access to the subject’s personal data which are being processed. The data subject shall exercise this right at the e-mail address petra.praha@seznam.cz. In such a case, the Controller shall provide the data subject with a copy of the personal data in the pdf format.
In case of a change in the personal data or their inaccurate processing and if the legal regulations, internal regulations of the Controller, the contract or other documents do not indicate the duty to report and prove the change in the personal data to the Controller, the data subject may request that the Controller rectify the inaccurate personal data or supplement incomplete personal data. The Controller may request that it be proven that the proposed data are correct. The data subject shall exercise this right at the e-mail address petra.praha@seznam.cz.
The data subject may also request that the Controller erase his/her personal data or to limit their processing. The data subject shall exercise this right at the e-mail address petra.praha@seznam.cz. The Controller shall carry out the requested erasure or limitation of processing unless the Regulation or some other law stipulates otherwise.
Further, the data subject is entitled to obtain his/her personal data provided to the Controller, which the Controller processes on the basis of a need for their processing for the purposes of performing the contract or on the basis of consent of the data subject, and to submit these data to another controller (right to personal data portability). The data subject shall exercise this right at the e-mail address petra.praha@seznam.cz. The Controller shall send a list of personal data in the pdf format to the data subject unless the Regulation or some other law stipulates otherwise. If technically feasible, the Controller shall transfer the requested personal data directly to another controller.
The data subject has the right to object to the processing of all his/her personal data if they are processed on the legal grounds of legitimate interest. The data subject shall exercise this right at the e-mail address petra.praha@seznam.cz. The Controller shall not further process these personal data.
Furthermore, the data subject has the right to lodge a complaint with the supervisory authority, i.e. in the Czech Republic, the Office for Personal Data Protection (www.uoou.cz).
If personal data processing is based on granted consent, the data subject has the right to revoke his/her consent at any time. However, revocation of such consent shall in no way prejudice the lawfulness of processing based on the consent granted before its revocation.
This Information on Personal Data processing comes into effect on 25th May 2018.