1) General Information
1.1. Personal Data Processing Policy
When processing your personal data, we honour and respect the standards of data protection and particularly adhere to the following principles:
a) We always process your personal data for a clearly and comprehensibly stated purpose, by specified means, in a defined manner, and only for such time as is necessary due to the purposes of their processing; we only process accurate personal data of clients, and we are assured that their processing meets the stated purposes and is necessary to fulfil these purposes;
b) We protect and process your personal data in a way that ensures the highest possible security of this data and which prevents any unauthorised or accidental access to clients' personal data, their change, destruction or loss, unauthorised transmissions, their other unauthorised processing, as well as other abuses;
c) We always inform you clearly about the processing of your personal data and your claims for accurate and complete information about the circumstances of this processing, as well as your other related rights;
d) In our company, we comply with appropriate technical and organisational measures to ensure a level of security appropriate to all possible risks; all persons who come into contact with clients' personal data have a duty of confidentiality with respect to information obtained in connection with the processing of such data.
2) Informationon the processing of personal data
- a) Administrator Information
The administrator of your personal data is our company:
GAUDEO – Vranovská pláž s.r.o., identification number 02162695, with registered office Mladoňovice 65, 675 32 Mladoňovice.
- b) Processing purposes and legal basisfor processing
- i) Processing of personal data without your consent
As a rule, these are situations where you are obliged to give us specific personal data as a condition of being able to provide you with your product or service or when we are authorised to process your personal data obtained in another way.
We are legally entitled to process your personal data without your consent for the following purposes of complying with our legal obligations, particularly:
- a) fulfilling legal obligations
- i) fulfilling legal obligations
- ii) fulfilment of obligations in the identification and control of the client according to the act on certain measures against the legalisation of proceeds
- iii) fulfilmentof archiving obligations;
- b) the conclusion or performance of a contract with you.
- c) protection of rights and legally protected interests, especially for solving any controversial agenda, especially for the purposes of conducting court or other disputes.
- ii) Processingpersonal data with your consent
These are generally situations where you voluntarily consent to us processing personal data provided by you or otherwise obtained. If you do not give consent, this may be a reason that our company will not be able to provide certain products or services or will be forced toad just availability in a reasoned way, the extent or conditions of the products and services provided.
Based on your consent, our company processes your personal data for the following purposes:
- (a) client care
- (b) offering products and services
In particular, it is about the dissemination of information, offering products and services to our company and others including product and service offerings, which are specifically targeted at individual clients, through different channels, e.g. by mail, electronic means (including e-mail and messages sent to mobile devices via telephone number) or by making a phone call, via the website. More details on the transfer are set out below in this Policy.
- c) Extent of processed personal data of clients
Our company processes your personal data to the extent necessary to fulfil the above purposes. We process contact andidentification data, data indicating creditworthiness, trustworthiness andpayment morality, descriptive and other data and, to the extent necessary andjustified, details of other persons.
Communication record. Our company monitors and records selected communications with clients. When making voice recordings, we will always give you advance notice. The content of this communication is confidential, and we use it for the purposes of complying with legal obligations, conclusion and performance of the contract, the protection of the rights and legally protected interests and, with your consent, for the purposes of the care of clients.
- d) How personal data are processed
Our company processes your personal data, including manual and automated processing, including algorithmic processing, in the information systems used by our company.
One way of processing our company's personal data is also through automated evaluation (to personalise our product and service offerings) personal data of clients; in doing so, derivative data about the client is also created. This is done in particular for the purpose s of complying with our legal obligations and to protect the rights and legally protected interests of our company, its clients or third parties. However, to a certain extent, our company can also use the relevant evaluation results to prepare individualised products and services.
Your personal data is processed primarily by employees of our company and, to the extent necessary, third parties (our suppliers and partners). Before any transfer of your personal data to a third party, we always enter into a written agreement with that person, which contains the same guarantees for the processing of personal data, which our company itself complies with in accordance with its legal obligations or we verify their compliance with GDPR and relevant privacy legislation.
- e) Recipients of personal data
Your personal data of clients are available, especially to the employees of our company, in connection with the performance of their duties, in which it is necessary to handle the personal data of clients, however, only to the extent that is necessary in that case and compliance with all safety measures.
In addition, your personal data may betransferred to third parties involved in processing our company's clients'personal data, or these personal data may be available to them for anotherreason per the law.
Before any transfer of your personal data to a third party, we always enter into a written agreement with that person, in which we modify the processing of personal data to include safeguards for the processing of personal data, which our company itself observes in accordance with its legal obligations or their compliance with GDPR and relevant privacy legislation is verified.
In accordance with applicable law, our company is authorised or obliged directly, without your consent, to transfer your personal data:
the relevant government departments, courts and law enforcement agencies for the purpose of carrying out their duties and for the purpose s of enforcement
payment service providers, where necessary, to prevent, investigate or detect payment fraud;
by other persons within the scope of third-party legal regulations, for example, for the purpose of collecting our debt.
With your consent, based on which we are entitled to dispose to the appropriate extent, your personal data may be passed on to other entities to comply with our company's legal obligations, the conclusion and performance of the contract, the offering of products and services, the protection of the rights and rightly protected interests of our company, the care of clients.
- f) Time of processing of personal data
Our company only processes clients' personal data for as long as necessary due to their processing purposes. We continuously assess if there continues to be a need to process certain personal data required for a specific purpose. If we find that they are no longer needed for any of the purposes they were processed, we will delete the data. However, internally, we have already evaluated the usual period of usability of personal data in relation to specific purposes of processing personal data, at the end of which we consider particularly carefully the need to process relevant personal data for a given purpose. At the same time, in that context, personal data is processed for the purposes of:
- we process the fulfilment of the contractfor the duration of the contractual relationship with the client; Furthermore,the relevant personal data is usually usable for a period of 10 years;
- we process the offering of products and services for the duration of the contractual relationship; Furthermore, the relevant personal data is usually usable for a period of 10 years;
- we process client care for the duration ofthe contractual relationship with the client; Furthermore, the relevantpersonal data is usually usable for a period of 10 years;
- g) Right to withdraw consent
In this Policy, we tried to explain why we need your personal data and that we may process them only with your consent for some purposes. You are not obliged to consent to process your personal data by our company; at the same time, you are entitled to withdraw that consent. If you withdraw your consent, we will terminate the processing of relevant personal data for purposes requiring appropriate consent; however, we may be authorised, or even obliged, to continue to process the same personal data for other purposes.
If you do not grant or withdraw your consent, we can:
- (a) adjust the availability, scope or conditions of its products or services; or
- (b) refuse to provide you with our products or services if we find that such consent is necessary to provide the product or service under the conditions.
In case you wish to withdraw your consent to the processing of personal data, please contact the following email address in writing: recepce@penzionygaudeo.cz via the email address registered with us.
- h) Sources of personal data
We obtain clients' personal data in particular:
- from the clients themselves, directly, e.g. when entering into contracts relating to products or provided services, or indirectly, e.g. when using the products themselves, clients' services or in the framework of making product and service information available to clients, e.g. through the company's website, etc.
- from publicly available sources (public registers, registers or lists);
- from its own activities by processing and evaluating other personal data of clients.
- i) Your right to request access topersonal data and protection of clients' rights
If you ask us for information regarding processing your personal data, we will provide you with information about what data we process about you without delay. For providing such information, we have the right to claim reasonable reimbursement of the costs incurred in providing this information. If you find or believe that our company or a third party, which is involved in the processing of data, conducts the processing of your personal data, which is contrary to the protection of your private life or contrary to the law, especially if your personal data is inaccurate, you can:
- require an explanation from our company or a third party involved in the processing ofthe data;
- require that a faulty condition be removed; in particular, you may request that personal data be corrected or supplemented; if necessary, this data will be temporarily blocked or disposed of.
If we find your request well-founded, our company or a third party involved in data processing will remove the faulty condition immediately and free of charge.
As a client, you always have the right to contact the Privacy Office.
3) Extent of personal data processed
Identification data – include personal data –primarily name, surname, and permanent residence address. Other possible identifying data are, for example, the computer’s IP address and the file of specific authentication data that we agree to use.
Contact information – name, surname, contact address, telephone number, email address or other similar contact details. Other possible identifying data are, for example, the computer’s IP address and the file of specific authentication data that we agree to use.
Data necessary to decide on the conclusion of the contract - these are data needed primarily to assess riskiness from the perspective of preventing the legalisation of the proceeds of crime and terrorist financing, as well as data collected to assess the credit risk of the trade.
These data include, depending on the type of contract concluded:
Sociodemographic data include age, gender, family status, education, number of persons in the household, type of income, and character of the employment relationship.
Data arising from the performance of contract obligations - depending on the nature of the product or provided service, we process data related to the product or provided service. Personal data, such as contract duration, warranty period, voucher number, etc., are processed in this category.
Personal data obtained in connection with the provision of our products or services - These are personal data obtained in our communication. It is mainly about:
- data used to ensure the security of communications,
- records of your preferred language for communication, expressed interest in a product or service, or your specific requirements that have been communicated to us.
