Privacy

Personal Data Protection Policy

Dear Sir or Madam,

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), we hereby inform you that we process your personal data that you have provided to us or personal data that we have obtained in connection with your booking or on the basis of its performance.

Personal Data Controller and Contact Details

The personal data controller pursuant to Article 4(7) of the GDPR is the Diocese of Ostrava-Opava, Company ID No.: 65468953, with its registered office at Kostelní nám. 3172/1, 702 00 Ostrava, email address ubytovani@doo.cz, tel. +420 731 625 715, registered in the register of registered legal entities maintained by the Ministry of Culture of the Czech Republic under registration number: 8/1-08/1996

Data Protection Officer

We have appointed a data protection officer, namely Lexius advokáti s.r.o., Company ID No.: 04666933, with its registered office at Na Podkovce 281/10, 147 00 Prague, responsible person JUDr. Jakub Kříž, Ph.D., attorney-at-law. The data protection officer may be contacted by telephone at +420 703 142 855 or by email at gdpr@lexius.cz.

Purpose of Personal Data Processing

We process personal data for the purpose of processing your booking and in connection with the exercise of rights and performance of obligations arising from the contractual relationship between us, for the purpose of maintaining our accounts, for the purpose of complying with the requirements under Act No. 565/1990 Coll., on local charges, and for the purpose of complying with the requirements under Act No. 326/1999 Coll., on the residence of foreigners in the territory of the Czech Republic and on the amendment of certain laws. We also process personal data for the purpose of sending commercial communications and carrying out other marketing activities (e.g. email address)

When making a booking, we require personal data that is necessary for the successful processing of the booking (e.g. name, address, contact details); when performing the contract, we further process personal data required by the Act on Local Charges (birth number, identity document number). In the case of foreigners, we also process data required by the Act on the Residence of Foreigners in the Territory of the Czech Republic (e.g. nationality, permanent residence abroad, travel document and visa numbers).

The provision of personal data is a necessary requirement for entering into and performing the contract; without the provision of personal data, it is not possible to conclude the contract or for the controller to perform it.

Your personal data that we obtain for the above purposes will also be processed to ensure our legal claims (e.g. name and address) and for the purpose of fulfilling legal obligations imposed on us by the legislation of the Czech Republic or the European Union.

Legal Basis for Processing

We process your personal data on the basis of Article 6(1)(b) of the GDPR, Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR.

Transfer of Personal Data

We transfer your personal data to persons involved in the provision of the agreed services and the processing of payments under the contract, as well as to persons providing services related to the operation of the website www.apartmanyutrojice.cz and other services in connection with the operation of our web interface, and to persons providing marketing services. We will also provide personal data to public authorities where they request it, but only to the extent specified in the request.

Transfer of Personal Data to Third Countries

We do not intend to transfer personal data to a third country (a country outside the EU) or to an international organisation.

Data Retention Period

We will retain personal data for the duration of the contractual relationship between us and for a period of 4 years following the end of the contractual relationship. For accounting purposes, personal data will be retained to the necessary extent for a maximum period of 10 years. In other cases, the retention period is determined by legal regulations.

Your Rights in Relation to the Processing of Your Personal Data

Under the conditions set out in the GDPR, you have the right to access your personal data pursuant to Article 15 of the GDPR, the right to rectification of personal data pursuant to Article 16 of the GDPR, or restriction of processing pursuant to Article 18 of the GDPR, the right to erasure of personal data pursuant to Article 17 of the GDPR, the right to object to processing pursuant to Article 21 of the GDPR and the right to data portability pursuant to Article 20 of the GDPR. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been violated.

Personal Data Security

We declare that we have taken all appropriate technical and organisational measures to secure personal data. We declare that personal data may be accessed only by persons authorised by us.

Final Provision

This Personal Data Protection Policy is published on the website www.apartmanyutrojice.cz and, in the event of any booking, will be sent to your email address. The controller thereby fulfils, among other things, its obligation under Article 12 of the GDPR.

By clicking the “BINDINGLY BOOK” button in the booking interface on the website www.apartmanyutrojice.cz, you confirm that you have read this Personal Data Protection Policy and accept it in its entirety. The controller is entitled to amend this policy. It will publish the new version of the Personal Data Protection Policy on its website and will simultaneously send you a new version of this policy to the email address that you provided to the controller.

This policy shall take effect on 24 May 2021.