2. Personal data processing table


The name of the processing of personal data

Purpose of processing

Categories of personal data

Legal title

Specification of legal title - law

Source - by whom

Delay time or Delay time

Categories of data recipients









Reservation of accommodation - receiving information from online booking portals

Reservation of the stay

Identification and contact details, length of stay

Conclusion or performance of the contract


booking portal

Saving for the duration of the stay and the claim period.

they are not

Accommodation reservations at the reception desk personally and by telephone

Reservation of the stay

Identification and contact details, length of stay

Conclusion or performance of the contract


data subject

Saving for the duration of the stay and the claim period.

they are not

Evidence of information about guests staying in Guestbook.

Securing your stay

Identification and contact details, length of stay, services provided

Conclusion or performance of the contract


data subject

Saving for the duration of the stay and the claim period.

they are not

Transmission of data to the Municipal Authority for a bed, recreational or spa fee

Obligations towards the municipality

Identifying information and length of stay

Legal duty


data subject

6 years from the end of the stay

Municipal office

Transmission of data to the Foreign Police

Meeting the legal obligation - par 102 of the Act on the accommodation of foreigners 326/1999 Coll.

Identifying information and length of stay

Legal duty


data subject

6 years from the end of the stay

Foreign Police

Guest Records in Client Database

Accelerate booking of permanent guests

Identification and contact information

A legitimate interest


data subject

Up to the time of the objection.

they are not

Records of VIP guests in the Client Database

Specification of offering services to important guests.

Preferences and hobbies

Agreement


data subject

For the duration of your consent.

they are not

Passing data about the host to the ID-access system

providing access to the premises

Basic identification and room number

Conclusion or performance of the contract


data subject

During the stay

they are not

Records of timed services used by guests.

Booking services

Basic identification and reserved services

A legitimate interest


data subject

during the provision of services

they are not

Customer system (loyalty cards)

Rebate discounts

Contact information

A legitimate interest


data subject

while using the card

they are not

Data transfer to Spa Systems

Interconnection of the hotel and spa system

Identification and contact details, residence data and purchased services

Conclusion or performance of the contract


data subject

Upon delivery

they are not

Bills and Invoices - VAT Documents

Issuance of sales documents

Data required for the issuance of VAT documents

Legal duty

No. 235/2004 Coll., on VAT par 35 and 35a

data subject

10 years

Tax Office

Evidence of receipts - receipts and invoices for DZP - for non-payers of VAT

Document archiving for DzP according to the law

Data required for issuance of documents to a non-taxable person

Legal duty

No. 563/1991 Coll., on accounting - par. 31 and 32

data subject

5 years

Tax Office

Newsletter

Providing bids and new services for existing customers

Email address

A legitimate interest


data subject

Up to the time of the objection

they are not

Processing of identification data to provide services during the stay

Host identification to facilitate service delivery

Identification data

A legitimate interest


data subject

Up to the time of the objection

they are not

Evidence of currency exchange in a currency exchange office above EUR 10000

Issuance of documents in a currency exchange office

Identification data, exchange data, or policy statement on a politically exposed person

Legal duty

368/2016 Sb

data subject

10 years

Financial Analytical Authority

Restaurant system - reservation of tables

Booking services

Contact information

Conclusion or performance of the contract


data subject

until the service is provided

they are not

Customer system (loyalty cards) for restaurant guests and other services

Rebate discounts

Contact information

Conclusion or performance of the contract


data subject

while using the card

they are not

Delivery system

Sales of meals from restaurants to external customers

Contact information

Conclusion or performance of the contract


data subject

until the service is provided

they are not

Offers to the delivery system customers

Offers for meals from restaurants to external customers

Contact information

A legitimate interest


data subject

To the objection

they are not



  1. Table explanation and processing

Legal Titles - are the legal justifications for processing and are defined in the GDPR Regulation, Articles 6 and 9.

Save time - means the time for which we are authorized or required to process and store your data.

Other recipients - Here are the other recipients we give the data to. If "Not" is mentioned then it means that we do not pass it on to anyone.

Data source - here is where we received personal data. If the "Data Entity" is mentioned, then it means that we obtained it directly from the person concerned.

We do not intend to pass your personal data outside the EU or any international organization.

*** or when personal data is transferred outside the EU:

In cases where the processing is based on the legal title "Conclusion or performance of the contract", we need your personal data for the conclusion of the contract and its subsequent fulfillment, without which it is not possible to conclude the contract.

In cases where the processing is based on a legal title "Legal Obligation", we need to process your personal data on the basis of legal requirements within the time specified by the law, and we must not limit or delete this processing for that period.

We will only process your personal data for the purposes listed in the table.

We receive personal data directly from data subjects, except for the "Booking Accommodation - Receiving Information from Online Reservations Portals" where we receive some personal data from companies running online booking portals. You can find contact details of these personal data managers on their website where you made the reservation. Because of their large number and the mutual transfer of data between them, we are not mentioning them here.





  1. Describe the rights of data subjects

As the data subject (the natural person with whom the data are processed) you have the following rights to your personal data:

Right

Specification

Request a listing

This is a listing of the data we have about you, the so-called right of access.

The listing will be in the format as per our capabilities. You do not have the right to request a listing in your specified format.

Exceptions when we are not allowed to execute the statement are cases involving documents whose publication would jeopardize the rights and freedoms of others. These are personal data of others, protection of business secrets, intellectual property, etc.

Request a repair


If you find that we are making inaccurate, obsolete or incomplete information about you, request a correction or addition.

Request deletion


We need to delete in cases where we have stored personal data after a specified storage period or have no valid legal title.

We may not legally delete the deletion in cases where the processing is carried out under the Contract or Legal Obligation.

Require processing restrictions

This concerns processing of legitimate interest.

The limitation of the treatment will occur in the case of an objection and the limitation will take place during the assessment of the objection.

Give objection to processing

An objection may be made in cases where the processing is carried out as a legitimate interest.

The objection to the sending of commercial messages will always be acknowledged.

In cases where your name or other contact information is given in order to provide services, the possibility of abuse is almost impossible and is necessary for these activities. Therefore, we consider this legitimate interest to be the overriding and we do not recognize the objections.

Revoke consent to processing

This is possible in cases where the processing is based on consent. If you give consent to the processing and recall it, processing will be terminated.

Request a listing in a portable format


You can request a listing in a portable format only in case of processing based on legal titles - performance of the contract and consent.

You may request that you only list the data you have given us and which we do in electronic form and you do not have the right to request the format. We will deliver it to you in printed format
A4 word

Oppose automated decision making

We do not perform any processing based on automated decision making.

Submit a complaint to the Supervisory Authority


If we do not respond to your request within 1 month, you can file a complaint with the Personal Data Protection Authority.


  1. Way of exercising rights

If you wish to exercise any of these rights, you can apply in the following ways:

At the hotel reception, your identity will be verified by your ID or passport, and a request will be made and a deadline will be announced. Without an identity verification, it is not possible to accept the request.

At the date of settlement, written notification of the result of the application and related materials will be provided to you upon re-verification of the identity.

For more than one copy, we are entitled to charge a fee corresponding to the administrative costs.

Operations related to the exercise of the rights of data subjects are made free of charge.

However, if the requests are found to be manifestly unreasonable or inappropriate, in particular because they are repeated, we can:

  1. to impose a reasonable fee for administrative costs
  2. refuse to grant the request.

To apply electronically:

  1. please send it by e-mail to residence@lapassionaria.cz with a valid electronic signature, without this confirmation of identity can not be accepted.

Put it in:

  • Identification data - name, surname, date of birth
  • To exercise what right you are requesting - see chapter Description of rights of data subjects
  • Specify the request - for example, if the correct information is corrected
  • Phone - to clarify and agree on further steps

In the event that you have any doubts as to your identity, we are authorized to ask you to provide additional information to confirm your identity.