GDPR – General Data Protection Regulation

On the basis of EU Regulation 2016/679 (GDPR), we give you information about the processing of personal information of guests that occurs in connection with their stay.

1. Contact details
The data manager is PARKHOTEL, s.r.o., Veslařská 347/250, Pisárky, 637 00 Brno.
The contact details of the person responsible for the protection of personal data are: cirbus@parkhotel.cz, tel .: 00420 543 236 350.

2. Personal data processing table

The name of the processing of personal data Purpose of processing Categories of personal data Legal title Specification of legal title – law Source – by whom Save time or deletion time Categories of data recipients
               
Reservation of accommodation – receiving information from online booking portals Reservation of the stay Identification and contact details, length of stay Conclusion or performance of the contract   booking portal Saving for the duration of the stay and the claim period they are not
Accommodation at the reception desk personally and by telephone Reservation of the stay Identification and contact details, length of stay Conclusion or performance of the contract   data subject Saving for the duration of the stay and the claim period they are not
Evidence of information about guests staying in Guestbook. Securing your stay Identification and contact details, length of stay, services provided Conclusion or performance of the contract   data subject Saving for the duration of the stay and the claim period they are not
Transmission of data to the Municipal Authority for a bed, recreational or spa fee Obligations towards the municipality Identifying information and length of stay Legal duty   data subject 6 years from the end of the stay Municipal office
Transmission of data to the Foreign Police Meeting the legal obligation – par 102 of the Act on the accommodation of foreigners 326/1999 Coll. Identifying information and length of stay Legal duty   data subject 6 years from the end of the stay Foreign Police
Guest Records in Client Database Accelerate booking of permanent guests Identification and contact details Right interest   data subject Up to the time of the objection. they are not
Records of VIP guests in the Client Database Specification of offering services to important guests. Preferences and hobbies Agreement   data subject For the duration of your consent. they are not
Handover of host data to ID-access system providing access to the premises Basic identification and room number Conclusion or performance of the contract   data subject During the stay they are not
Records of timed services used by guests. Reservation of services Basic identification and reserved services Right interest   data subject during the provision of services they are not
Customer system (loyalty cards) Rebate discounts Contact information Right interest   data subject while using the card they are not
Data transfer to Spa systems Interconnection of the hotel and spa system Identification and contact details, residence data and purchased services Conclusion or performance of the contract   data subject By submitting they are not
Bills and Invoices – VAT Documents Issuance of sales documents Data required for the issuance of VAT documents Legal duty No. 235/2004 Coll., on VAT par 35 and 35a data subject 10 years Tax Office
Evidence of receipts – receipts and invoices for DZP – for non-payers of VAT Document archiving for DzP according to the law Data required for the issuance of documents to a non-taxable person Legal duty No. 563/1991 Coll., on accounting – par. 31 and 32 data subject 5 years Tax Office
Newsletter Providing bids and new services to existing customers E-mail Right interest   data subject Up to the time of the objection. they are not
Processing of identification data to provide services during the stay Host identification to facilitate service delivery Identification data Right interest   data subject Up to the time of the objection. they are not
Evidence of currency exchange in an exchange office above EUR 10000 Issuance of documents in a currency exchange office Identification data, exchange data, or a statement on a politically exposed person Legal duty 368/2016 Sb data subject 10 years Financial Analytical Authority
Restaurant system – reservation of tables Reservation of services Contact information Conclusion or performance of the contract   data subject until the service is provided they are not
Customer system (loyalty cards) for restaurant guests and other services Rebate discounts Contact information Conclusion or performance of the contract   data subject while using the card they are not
Delivery system Sales of meals from restaurants to external customers Contact information Conclusion or performance of the contract   data subject until the service is provided they are not
Offers to the delivery system customers Offers meals from restaurants to external customers Contact information Right interest   data subject To file an objection they are not

3. Table explanation and processing

Legal titles – are the legal justifications for processing and are defined in GDPR, Articles 6 and 9.
Saving Time – means how long we are authorized or required to process and store your data.
Other recipients – Here are the other recipients we provide the data to. If “Not” is mentioned, then it means that we do not pass it on to anyone.
Data Source – Here is where we received personal data. If the “Data Entity” is mentioned then it means that we obtained it directly from the person concerned.
We do not intend to pass your personal data outside the EU or any international organization.
(See obligation under Article 13.1 (f): the controller’s intention to transmit personal data to a third country or an international organization and the existence or absence of a Commission decision on adequate protection or, in the cases referred to in Articles 46 or 47 or 49 (1) the reference to appropriate safeguards and the means to obtain a copy of that data or information on where the data were made available.)
In cases where the processing is based on the legal title “Conclusion or performance of the contract,” we need your personal data for the conclusion of the contract and its subsequent performance, without which it is not possible to conclude the contract.
In cases where the processing is based on the legal title “Legal Obligation”, we need to process your personal data on the basis of legal requirements within the time specified by the law, and we must not limit or delete this processing during this period.
We will only process your personal data for the purposes listed in the table.
We receive personal data directly from data subjects, with the exception of the “Reservation of Accommodation – Receiving Information from Online Reservations Portals”, where we receive some personal data from companies running online booking portals. You can find contact details of these personal data managers on their website where you made a reservation. Due to their large number and the mutual transfer of data between them, we do not mention them here.

4. Describe the rights of data subjects

As the data subject (the natural person with whom the data are processed) you have the following rights to your personal data:

Právo Upřesnění
Request a listing

This is a listing of the information we have about you, the so-called right of access.

The listing will be in the format as per our capabilities. You do not have the right to request a listing in your specified format.

Exceptions when we are not allowed to execute the statement are cases involving documents whose publication would jeopardize the rights and freedoms of others. These are personal data of other persons, protection of business secrets, intellectual property, etc.

Request repair If you find that we are making inaccurate, outdated or incomplete information about you, request a correction or addition.
Request deletion

We need to delete in cases where we have stored personal data after a specified storage period or have no valid legal title.

We may not legally delete the deletion in cases where the processing is performed as a Performance Contract or a Legal Obligation.

Require processing restrictions

This concerns processing of legitimate interest.

The limitation of processing will occur in the case of an objection and the restriction will be maintained during the assessment of the objection.

Give objection to processing

Opposition may be made in cases where the processing is carried out as a legitimate interest.

The objection to the sending of business communications will always be acknowledged.

In cases where your name or other contact information is given in order to provide services, the possibility of abuse is almost impossible and is necessary for these activities. Therefore, we consider this legitimate interest to be prevalent and we do not recognize the objections.

Revoke consent to processing This is possible in cases where the processing is done on the basis of consent. If you give consent to the processing and recall it, processing will be terminated.
Require a listing in a portable format

You can request a listing in a portable format only for processing based on legal titles – contract performance and consent.

You may request that you only list the information you have given us and which we do in electronic form and you do not have the right to request the format. We’ll hand it to you in XLS format with named columns.

Oppose automated decision making We do no processing based on automated decision making.
Submit a complaint to the Supervisory Authority If we do not respond to your request within 1 month, you can file a complaint with the Personal Data Protection Authority.

5. Method of exercising rights

If you wish to exercise any of these rights, you can apply in the following ways:
At the hotel reception, your identity will be verified by your ID or passport and a request will be made with you and will be communicated. Without an identity verification, it is not possible to accept the request.
You will be given a written Application Notification Notice and related materials upon re-verification of your identity.
For more than one copy, we are entitled to charge a fee corresponding to the administrative costs.
Operations related to the exercise of the rights of data subjects are made free of charge.
However, if the requests are found to be manifestly unreasonable or disproportionate, in particular because they are repeated, we can:
(a) impose a reasonable charge for administrative costs
b) refuse to comply with the request.
To submit an application electronically:
a) send it by e-mail to recepce@parkhotel.cz with valid electronic signature, without this confirmation of identity can not be recognized.
b) Or send mtkscrh from your data box to the data box.
Put it in:
1) Identification data – name, surname, date of birth
2) The exercise of any right you request – see chapter Description of rights of data subjects
3) Clarification of the application – for example, if the correct data is corrected
4) Telephone – to clarify and agree on further steps
If you have any doubts as to your identity, we are authorized to ask you for additional information to confirm your identity.