GDPR

The company Vavřinec group s.r.o., ID: 072 47 516, with its registered office at Vítkova 631/7a, Prague 8, 18000 (“Controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) (“GDPR”) and other applicable legal regulations.

The Controller processes data obtained primarily from the data subject and further data obtained from third parties (e.g., travel agencies, online portals, etc.), which are authorized to share such data with the Controller. The Controller processes data provided by third parties only to the extent necessary for the performance of contracts or legal obligations as described below.

Personal data such as name, surname, arrival date, departure date, phone number, email address, permanent address, and date of birth may be processed for the purpose of concluding and fulfilling the accommodation contract or similar contract (hereinafter referred to as “contract”) and for the purpose of exercising the rights of the Controller arising from the contract.

Personal data such as name, surname, arrival date, departure date, permanent address, purpose of stay, number of occasional ID or travel document (passport) may be processed to fulfill the Controller’s legal obligations under Act No. 565/1990 Coll., on Local Fees, as amended.

Personal data such as name, surname, arrival date, departure date, permanent address, date of birth, passport number, nationality, visa number, and purpose of stay may be processed to fulfill the Controller’s obligations under Act No. 326/1999 Coll., on the Residence of Foreigners in the Czech Republic, as amended.

The Controller will process personal data manually and automatically through its authorized employees and through processors authorized by the Controller based on personal data processing agreements.

Personal data such as name, surname, arrival date, departure date, permanent address, date of birth, ID card number, passport number, nationality, visa number, and purpose of stay may be disclosed by the Controller to state or municipal authorities in accordance with the above-mentioned laws.

Personal data such as name, surname, arrival date, departure date, permanent address, room number, and date of birth may be disclosed to entities with whom the Controller will exercise its rights under the contract (especially courts, notaries, bailiffs).

The above personal data, in accordance with the principle of data minimization and other principles arising from GDPR and related regulations, represent the minimum required by the Controller for the fulfillment of its rights and obligations under the above-mentioned contracts concluded with data subjects and under the aforementioned laws.

By providing an email address, the accommodated person voluntarily consents to the processing of this personal data for the purpose of sending commercial and marketing offers and communications. This consent is granted indefinitely from the conclusion of the contract and may be withdrawn at any time or until it is revoked. The email address will be processed automatically by the Controller’s employees and will not be disclosed to third parties.

The Controller typically does not process sensitive data and does not request it from data subjects. An exception may be data about the health of the data subject, which the data subject voluntarily provides. Such data may be used by the Controller to offer better services and fulfill the specific wishes of the data subject.

The data subject has the right to access their personal data processed by the Controller, the right to rectify or delete it, or to restrict its processing, and the right to object to its processing. The data subject also has the right to withdraw their consent to the processing of personal data, if the data is processed on the basis of this consent.

The data subject also has the right to obtain personal data concerning them and provided by them to the Controller. The Controller will provide the requested data to the data subject without undue delay in a structured, commonly used, and machine-readable format, or, at the data subject’s request, will provide it to another specifically designated controller. This right does not apply to personal data that is not processed automatically.

The Controller does not intend to transfer personal data to third countries.

If the data subject believes that their personal data is being processed unlawfully, they may file a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (www.uoou.cz).

Controller’s contact details:

Vavřinec group s.r.o.

ID: 072 47 516

Vítkova 631/7a

186 00 Prague 8

Lenka Hrubá, Hotel Manager: hruba@svatyvavrinec.cz, 776 509 783