GDPR – General Data Protection Regulation
On the basis of EU Regulation 2016/679 (GDPR), we give you information about the processing of personal information of guests that occurs in connection with their stay.
1. Contact details
The data manager is PARKHOTEL, s.r.o., Veslařská 347/250, Pisárky, 637 00 Brno.
The contact details of the person responsible for the protection of personal data are: tirpakova@parkhotel.cz, tel .: 00420 543 236 350.
2. Personal data processing table
| The name of the processing of personal data | Purpose of processing | Categories of personal data | Legal title | Specification of legal title – law | Source – by whom | Save time or deletion time | Categories of data recipients |
| Reservation of accommodation – receiving information from online booking portals | Reservation of the stay | Identification and contact details, length of stay | Conclusion or performance of the contract | booking portal | Saving for the duration of the stay and the claim period | they are not | |
| Accommodation at the reception desk personally and by telephone | Reservation of the stay | Identification and contact details, length of stay | Conclusion or performance of the contract | data subject | Saving for the duration of the stay and the claim period | they are not | |
| Evidence of information about guests staying in Guestbook. | Securing your stay | Identification and contact details, length of stay, services provided | Conclusion or performance of the contract | data subject | Saving for the duration of the stay and the claim period | they are not | |
| Transmission of data to the Municipal Authority for a bed, recreational or spa fee | Obligations towards the municipality | Identifying information and length of stay | Legal duty | data subject | 6 years from the end of the stay | Municipal office | |
| Transmission of data to the Foreign Police | Meeting the legal obligation – par 102 of the Act on the accommodation of foreigners 326/1999 Coll. | Identifying information and length of stay | Legal duty | data subject | 6 years from the end of the stay | Foreign Police | |
| Guest Records in Client Database | Accelerate booking of permanent guests | Identification and contact details | Right interest | data subject | Up to the time of the objection. | they are not | |
| Records of VIP guests in the Client Database | Specification of offering services to important guests. | Preferences and hobbies | Agreement | data subject | For the duration of your consent. | they are not | |
| Handover of host data to ID-access system | providing access to the premises | Basic identification and room number | Conclusion or performance of the contract | data subject | During the stay | they are not | |
| Records of timed services used by guests. | Reservation of services | Basic identification and reserved services | Right interest | data subject | during the provision of services | they are not | |
| Customer system (loyalty cards) | Rebate discounts | Contact information | Right interest | data subject | while using the card | they are not | |
| Data transfer to Spa systems | Interconnection of the hotel and spa system | Identification and contact details, residence data and purchased services | Conclusion or performance of the contract | data subject | By submitting | they are not | |
| Bills and Invoices – VAT Documents | Issuance of sales documents | Data required for the issuance of VAT documents | Legal duty | No. 235/2004 Coll., on VAT par 35 and 35a | data subject | 10 years | Tax Office |
| Evidence of receipts – receipts and invoices for DZP – for non-payers of VAT | Document archiving for DzP according to the law | Data required for the issuance of documents to a non-taxable person | Legal duty | No. 563/1991 Coll., on accounting – par. 31 and 32 | data subject | 5 years | Tax Office |
| Newsletter | Providing bids and new services to existing customers | Right interest | data subject | Up to the time of the objection. | they are not | ||
| Processing of identification data to provide services during the stay | Host identification to facilitate service delivery | Identification data | Right interest | data subject | Up to the time of the objection. | they are not | |
| Evidence of currency exchange in an exchange office above EUR 10000 | Issuance of documents in a currency exchange office | Identification data, exchange data, or a statement on a politically exposed person | Legal duty | 368/2016 Sb | data subject | 10 years | Financial Analytical Authority |
| Restaurant system – reservation of tables | Reservation of services | Contact information | Conclusion or performance of the contract | data subject | until the service is provided | they are not | |
| Customer system (loyalty cards) for restaurant guests and other services | Rebate discounts | Contact information | Conclusion or performance of the contract | data subject | while using the card | they are not | |
| Delivery system | Sales of meals from restaurants to external customers | Contact information | Conclusion or performance of the contract | data subject | until the service is provided | they are not | |
| Offers to the delivery system customers | Offers meals from restaurants to external customers | Contact information | Right interest | data subject | To file an objection | they are not |
3. Table explanation and processing
Legal titles – are the legal justifications for processing and are defined in GDPR, Articles 6 and 9.
Saving Time – means how long we are authorized or required to process and store your data.
Other recipients – Here are the other recipients we provide the data to. If “Not” is mentioned, then it means that we do not pass it on to anyone.
Data Source – Here is where we received personal data. If the “Data Entity” is mentioned then it means that we obtained it directly from the person concerned.
We do not intend to pass your personal data outside the EU or any international organization.
(See obligation under Article 13.1 (f): the controller’s intention to transmit personal data to a third country or an international organization and the existence or absence of a Commission decision on adequate protection or, in the cases referred to in Articles 46 or 47 or 49 (1) the reference to appropriate safeguards and the means to obtain a copy of that data or information on where the data were made available.)
In cases where the processing is based on the legal title “Conclusion or performance of the contract,” we need your personal data for the conclusion of the contract and its subsequent performance, without which it is not possible to conclude the contract.
In cases where the processing is based on the legal title “Legal Obligation”, we need to process your personal data on the basis of legal requirements within the time specified by the law, and we must not limit or delete this processing during this period.
We will only process your personal data for the purposes listed in the table.
We receive personal data directly from data subjects, with the exception of the “Reservation of Accommodation – Receiving Information from Online Reservations Portals”, where we receive some personal data from companies running online booking portals. You can find contact details of these personal data managers on their website where you made a reservation. Due to their large number and the mutual transfer of data between them, we do not mention them here.
4. Describe the rights of data subjects
As the data subject (the natural person with whom the data are processed) you have the following rights to your personal data:
| Právo | Upřesnění |
| Request a listing |
This is a listing of the information we have about you, the so-called right of access. The listing will be in the format as per our capabilities. You do not have the right to request a listing in your specified format. Exceptions when we are not allowed to execute the statement are cases involving documents whose publication would jeopardize the rights and freedoms of others. These are personal data of other persons, protection of business secrets, intellectual property, etc. |
| Request repair | If you find that we are making inaccurate, outdated or incomplete information about you, request a correction or addition. |
| Request deletion |
We need to delete in cases where we have stored personal data after a specified storage period or have no valid legal title. We may not legally delete the deletion in cases where the processing is performed as a Performance Contract or a Legal Obligation. |
| Require processing restrictions |
This concerns processing of legitimate interest. The limitation of processing will occur in the case of an objection and the restriction will be maintained during the assessment of the objection. |
| Give objection to processing |
Opposition may be made in cases where the processing is carried out as a legitimate interest. The objection to the sending of business communications will always be acknowledged. In cases where your name or other contact information is given in order to provide services, the possibility of abuse is almost impossible and is necessary for these activities. Therefore, we consider this legitimate interest to be prevalent and we do not recognize the objections. |
| Revoke consent to processing | This is possible in cases where the processing is done on the basis of consent. If you give consent to the processing and recall it, processing will be terminated. |
| Require a listing in a portable format |
You can request a listing in a portable format only for processing based on legal titles – contract performance and consent. You may request that you only list the information you have given us and which we do in electronic form and you do not have the right to request the format. We’ll hand it to you in XLS format with named columns. |
| Oppose automated decision making | We do no processing based on automated decision making. |
| Submit a complaint to the Supervisory Authority | If we do not respond to your request within 1 month, you can file a complaint with the Personal Data Protection Authority. |
5. Method of exercising rights
If you wish to exercise any of these rights, you can apply in the following ways:
At the hotel reception, your identity will be verified by your ID or passport and a request will be made with you and will be communicated. Without an identity verification, it is not possible to accept the request.
You will be given a written Application Notification Notice and related materials upon re-verification of your identity.
For more than one copy, we are entitled to charge a fee corresponding to the administrative costs.
Operations related to the exercise of the rights of data subjects are made free of charge.
However, if the requests are found to be manifestly unreasonable or disproportionate, in particular because they are repeated, we can:
(a) impose a reasonable charge for administrative costs
b) refuse to comply with the request.
To submit an application electronically:
a) send it by e-mail to recepce@parkhotel.cz with valid electronic signature, without this confirmation of identity can not be recognized.
b) Or send mtkscrh from your data box to the data box.
Put it in:
1) Identification data – name, surname, date of birth
2) The exercise of any right you request – see chapter Description of rights of data subjects
3) Clarification of the application – for example, if the correct data is corrected
4) Telephone – to clarify and agree on further steps
If you have any doubts as to your identity, we are authorized to ask you for additional information to confirm your identity.