Pursuant to Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter also referred to as "GDPR").
Dear guests, on this page you will find the most important information about your personal data processed by the controller Ing. 76 224 015, with registered office at Strážné 95, Strážné (hereinafter referred to as "Controller" or "Company") for the purpose of operating the Friesovy boudy hotel and Andula guesthouse.
The purpose of this notice is to inform you about the processing of personal data that occurs in connection with visits to the websites www.friesovyboudy.cz and www.penzionandula.cz, as well as about some other cases of processing of personal data where the Company's activities involve the processing of personal data of other persons (e.g. guests in the hotel, journalists, etc.; hereinafter referred to as "Data Subject").
By sending an enquiry via the enquiry form, personal data is also collected, which is located in an encrypted interface and includes the following data:
The processing of these log files will be carried out by the Company itself. Personal data about visitors to the Controller's website processed in connection with the administration of the Controller's website, or the administration of the Controller's booking system and/or the implementation of internet marketing will only be processed provided that the relevant data subject has given consent to the processing in question within the meaning of Article 6(1)(a) GDPR, and for as long as the consent in question is valid. In the absence of the Data Subject's consent within the meaning of Article 6(1)(a) GDPR, the Personal Data of Data Subjects are/will be processed at the request of Data Subject within the meaning of Article 6(1)(b) GDPR.
In the event that a website user is interested in receiving newsletters and other promotional communications, the Company will process, on the basis of consent, the personal data provided by such user for these purposes, always at least to the extent of the e-mail address, name and surname. The content of the newsletter and other advertising communications may be personalised on the basis of the data provided and other data for the personalisation of the content which the Company obtains from the user's behaviour on the website or newsletter, as applicable.
The Company will only start processing the user's personal data after the user has filled in the relevant order form for sending the newsletter and other advertising communications with his/her data and subsequently placed the order and confirmed his/her consent to the processing of personal data by replying as instructed in the e-mail message received. If the order is not confirmed, the completed data will not be stored anywhere.
The personal data provided is processed until the consent given is withdrawn. The actual processing of the personal data provided will be carried out by the Company itself or by a specialist processor.
Consent to this processing of personal data is entirely voluntary, and the user may withdraw it at any time by sending a notice of withdrawal of consent in writing to the Company's registered office (see below).
The user may also withdraw the consent given by clicking on the "You can unsubscribe" link in the newsletter or advertising message sent to him.
For events organised by us, we take photo documentation (situational shots of events) to a reasonable extent for the purpose of subsequent publication of selected photos on our website for promotional purposes of the Friesovy boudy hotel and Andula guesthouse. In this way, we do not primarily depict the visitors of a specific event, but the overall atmosphere of the event, the images are not published in detailed resolution, nor do we attach descriptions of specific persons attending the event. According to the expert opinion of the Office for Personal Data Protection, in such cases, the primary issue is not the protection of personal data, but the protection of privacy under the Civil Code; therefore, consent to the processing of personal data for "illustrative" images is not required.
Visitors are notified in advance of the taking of photographs by means of a camera pictogram, our photographers are visibly identified and photographs are only taken in the main event area, so that visitors are always free to stay in areas where no photographs are taken. If you have any doubts or questions about taking photo documentation, you can contact us at the contacts below.
On the basis of your reservation (or stay without reservation) we process personal data of our clients to the following extent:
The provision and processing of all of the above personal data, with the exception of your e-mail address and telephone number and information about your membership in the loyalty program, is necessary for the purposes of fulfilling the Company's legal obligations, in particular those arising from the Local Tax Act and the Act on the Residence of Foreigners in the Czech Republic, as well as from accounting and tax regulations.
The processing of your identification data and data about your stay and the services provided and the amount and method of payment is necessary for the purposes of fulfilling the contractual relationship relating to your stay, i.e. securing orders and reservations, concluding and fulfilling contracts relating to the accommodation, catering and related services offered and provided by the Company.
We process your personal data in the scope of your name, surname, e-mail address and information about your stay on the basis of the legitimate interest of the Company for the purpose of direct marketing, the purpose of processing here is exclusively the possibility of sending you marketing and commercial communications, i.e. information about interesting news, discounts, etc.
We also process personal data to the same extent to send you satisfaction questionnaires after your stay in order to verify your satisfaction with the Company's services and to continuously improve the quality of the Company's services for you.
There are no cases in the hotel where the services provided by our guests are questioned. Should there be a case of a dispute about the services provided by the Company, the Company would be obliged to process data about the services provided to the extent necessary to conduct such a dispute, solely for the purpose of protecting the Company's rights in such a dispute. Similarly, the Company would also be obliged to process the necessary data in the event of non-payment for services or in the event of damage to the Company.
In no case do we carry out automated decision-making or other automated processing of your personal data that would have legal effects on you or would affect you in a similarly significant way.
In the case of an inquiry for services on the website of the Friesovy boudy hotel www.friesovyboudy.cz or the Andula guesthouse www.penzionandula.cz via the inquiry form or by sending an inquiry to the relevant email listed on the website, the Company will process the personal data of the potential customer in the scope of name, surname, email address, telephone contact, or company only on the basis of your consent. You can withdraw your consent at any time by sending an explicit communication to email@example.com.
After processing the relevant enquiry, the Company may use the aforementioned data on the basis of your consent for its marketing purposes regarding its offer of accommodation services. In this case, the data subject has the right to withdraw the consent at any time by sending an explicit communication to firstname.lastname@example.org. The processing of the personal data provided will be carried out by the Company itself or, where appropriate, through a processor, the processor.
The personal data of customers (name, surname, date of birth, ID card or passport number, place of residence, signature) who make their stay at the Friesovy boudy Hotel or Andula Guesthouse are processed by the Company on the basis of the legal grounds imposed by Act No. 565/1990 Coll., on local taxes (§3g), as amended, and Act No. 326/1999 Coll., on the residence of foreigners (§101), as amended. Therefore, this is processing necessary for the fulfilment of a legal obligation in accordance with Article 6(1)(c) of the GDPR and the consent of the person accommodated is not required for such processing (Data Subject).
The Company also stores the name, surname and email address of its customers on the basis of consent for the purpose of verifying customer satisfaction or a commercial offer of the same nature or the service that was the subject of the order. In this case, the Data Subject has the right to withdraw the consent given at any time by sending an explicit communication to the email email@example.com.
The feedback will be collected by the Company, and thus the e-mail addresses of the customers will be processed, so that a questionnaire on satisfaction with the course of the stay in the Friesovy boudy Hotel or Andula Guesthouse, i.e. a commercial communication, will be sent to these e-mail addresses, in accordance with the above. The questionnaire will only be sent to customers once in connection with the respective purchase of the service. The company will carry out the feedback and thus the processing of the customers' e-mail addresses itself or through a contractually obliged third party (processor).
The customer has the right to submit a proposal for out-of-court settlement of such dispute to the designated consumer dispute resolution body, which is:
The Czech Trade Inspection Authority is a supervisory authority exercising supervision over consumer protection, acting in accordance with Act No. 64/1986 Coll., on the Czech Trade Inspection Authority, as amended, and other legal regulations. The website of the Czech Trade Inspection Authority is www.coi.cz.
The Company uses Google Analytics, a service developed and operated by Google Inc., having its registered office at Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to analyse the website using cookies.
Google will not transmit data, incl. IP-addresses, will be combined with other data. Google's privacy statement can be viewed here.
The website visitor can prevent the collection of cookies and their analysis by Google Analytics by changing the browser settings as described above and also by:
As part of Google Analytics, the Company also uses related advertising features provided by Google, such as Google Ad Network impression reports, enhanced reporting of anonymous demographic data (e.g., age, gender, interests), and displaying ads on the content network based on product views ("remarketing"), including Google AdWords to personalize advertising and improve ad targeting and remarketing.
The purpose of the processing is to protect property and increase personal security. The scope of the processing includes only the image recording of the camera system, without sound recording. The controller of these recordings is the Company. The CCTV footage is stored on a HDD device/hard drive operated by the Company no other processor is used for this CCTV system. The place of processing is the hotel Friesovy boudy (at Strážné 95, 543 52 Czech Republic) and the pension Andula (at Strážné 95, 543 52 Czech Republic) and their premises.
Only law enforcement authorities or administrative authorities for the purposes of misdemeanour proceedings may receive data from the CCTV system.
The cameras occupy the entrance and reception area, corridor and underground garage areas, parking areas in front of the hotel, entrances/exits, staff entrances, supply and handling areas, terraces, fitness/wellness entrances, lobbies/foyers, access to conference rooms, ramp, courtyard/interior.
Recording retention time is a maximum of 72 hours after which the data is automatically erased by overwriting with new footage as the camera system is based on a loop mode.
The operation of the cameras is continuous (possibly based on an automatic motion sensor).
Contact details for receiving requests for information are given below.
We process your personal data for the duration of your stay in our hotel. Afterwards, we only process it after its termination:
The data for which we are obliged to process under the relevant legal regulations, and only for the period of time that is necessary under these legal regulations. (For example, the accounting and tax documents we issue to you also contain some of your personal data (name, type of service provided, date of issue of the document). We keep these documents only for the purpose of complying with the obligations set out in the relevant accounting and tax legislation, for the period of time imposed by such legislation.)
Your name, surname, e-mail address and information about your stay for the purposes of direct marketing of the hotel (sending you information about interesting news or discounts on our services, etc.) and for sending you satisfaction surveys. We process the data for sending satisfaction surveys only until the surveys have been evaluated (maximum 1 month after your stay). For the purpose of direct marketing, we process your data as mentioned above until you inform us of your possible objection to further such processing.
Data necessary for the purposes of existing or realistically threatened disputes. We process this data only until the dispute has been finally resolved and the obligations arising from the decision have been fulfilled, or until such time as disputes about the services provided may possibly arise under applicable law.
After the aforementioned periods, we regularly destroy your personal data, both in paper and electronic form.
Data subjects whose personal data is processed by the Company are entitled to the following rights related to the processing of their personal data, provided that the conditions set out in the legislation are met:
Furthermore, data subjects whose personal data is processed by the Company have the right to object to the processing of their personal data if the legal basis for the processing is the legitimate interests of the Company, subject to the fulfilment of the prerequisites laid down by law. If personal data are processed for direct marketing purposes, the data subject has the right to object to such processing at any time.
The data subjects whose personal data is processed by the Company may exercise the above rights in writing or by e-mail to the Company as the data controller, using the contacts listed below.
The controller can be contacted by:
The aforementioned rights of the data subject are not absolute rights. The Company will assess the rights exercised individually and with regard to its own rights or the rights of third parties.
If the Data Subject considers that there has been a breach of the law in relation to the protection of his/her personal data, he/she has the right to lodge a complaint with a supervisory authority. The supervisory authority for the territory of the Czech Republic is the Office for Personal Data Protection Pplk. Sochora 27,170 00 Prague 7 (www.uoou.cz).