Personal Data protection
1. Who is the data controller and who collects personal data?
All personal data is collected, processed and managed by the controller. The notice on personal data protection applies to personal data collected by JUDr. Hana Gutová, PhD., attorney-at-law, located at Senovážné náměstí 22 Praha 1, IČO: 01342363 in connection with the services and products we offer.
2. What is personal data and how it is collected
Personal data is any information that can be used to directly or indirectly identify a specific individual. This definition includes personal data of comments, user media, cookies and third-party website content.
3. Ways of collecting personal data
Personal data is collected by the data controller from several sources:
a) Personal data that you directly provide to us. We collect information about name, surname, date of birth, address, email address, phone number, credit card details, ID number, passport number, signature.
b) Personal data that we collect automatically. We also collect and store certain types of personal information each time there is an online interaction between you and us. Examples of the types of personal data we collect include: IP address, device ID. We may also collect technical information to help us recognize your device to prevent misuse and for diagnostic purposes.
4. Purpose of personal data processing
We collect, process and provide your personal data only for specific and limited purposes.
For example, to process your accommodation orders, service orders, payments, to evaluate
and resolve any complaints, services and methods of communication and the functionality of our websites.
In addition, the Administrator also processes your personal data using automated means.
We collect, process and provide your personal data for the following purposes:
• To process your accommodation orders, service orders, payments, so that we can deal with
your questions and requests and evaluate and resolve any complaints.
• To develop and improve our products, services, communication methods and the
functionality of our websites.
• To provide you with information and manage your registration or subscription to our
newsletters or other communications.
• To administer our day-to-day business needs relating to your participation in our
competitions,
• To provide personalized products, communications, targeted advertising and products that
we recommend to you.
If the Administrator collects and processes your personal data, you are always informed about
this collection in advance.
If necessary, we will ask for your consent to the processing of personal data. Once you have
given your consent for activities related to their processing, you have the right to revoke it at
any time.
We process your personal data in order to implement a contractual relationship to which you
are or wish to be a contractual party. For example, we have to process your personal data in
accommodation systems.
At the request of the Police of the Czech Republic, we are obliged to disclose your personal
data and whether you have stayed at our hotel.
We also process your personal data in cases where we have a legal obligation to carry out
such processing (for example, obligations in the area of taxation or the area of social
security). For example, in the event of a court order or subpoena, we may be required to
process personal data for a specific purpose.
A) Browsing the site and accessing areas for registered users
Purpose: necessary data for the provision of online services are processed, including the
registration of IP addresses, visited pages and access data, as well as information about the
user’s terminal. Data is also processed for security and website improvement purposes.
Legal reason: data processing is necessary for the provision of online services; consent
expressed by using the website
Recipients and third parties to whom we provide personal data: HOTUSA companies and
establishments
Delivery of all data required for user registration is mandatory, unless otherwise stated in the
registration form, and the Administrator may refuse registration to an interested party who
does not provide this data.
B) Use of web forms
Purpose: to fulfill requests made through web forms.
Legal basis: consent expressed when using and submitting the form.
Recipients and third parties to whom we provide personal data: HOTUSA companies and
establishments and other companies involved in providing the requested services
C) Provision of services
Purpose: to provide services including management of hotel reservations and payments. Send
information about HOTUSA services electronically.
Legal reason: conclusion of a contract or provision of a service.
Recipients and provision to third parties: HOTUSA companies and facilities and other
companies involved in providing the requested services, including the requested hotel facilitie
5. Who do we share personal data with?
Administrator. as a member of the HOTUSA international group, it shares your data with
selected third parties under the following conditions:
• Third party service providers. On our websites, we share your personal information with third-party service providers who perform their work on our behalf, such as companies that They have access to the personal data needed to perform their functions, but cannot use it for other purposes.
• Other third parties. Your personal information will be used by us or shared with our
advertising networks, ad servers, social networks and analytics companies or other third
parties both in connection with marketing, advertising, data enrichment and other offers and
in connection with product information.
7. How your data is protected
The priority of the administrator of personal data is to ensure the security of data, namely constant protection against any intervention, misuse, loss, unauthorized access. All the measures we take include a limited range of persons working with personal data, the possibility of personal data security, encryption, anonymization of personal data whenever possible and desirable. Access to your personal data is only permitted to our employees and only when necessary.
8. Rights of the subject of personal data
• Right to information. You have the right for us to provide you with clear, transparent and easy-to-understand information about how we use your personal data and about your rights.
• Right of access and correction. You have the right to view, correct and update your personal data at any time. Please contact us whenever you would like to exercise this right of yours.
• The right to data portability. The personal data you have provided to us may be transferable. This means that they may be moved, copied or sent electronically under certain circumstances.
• The right to be forgotten. In certain circumstances, you have the right to have your data deleted. If you wish to delete your personal data that we hold about you, please let us know and we will take the necessary steps to respond to your request in accordance with legal requirements.
• Right to restriction of processing. In certain circumstances, you have the right to restrict the processing of your personal data.
• The right to object. In certain circumstances, you have the right to object to certain types of processing, including processing for direct marketing purposes (e.g. sending informational emails from us or contacting you about various opportunities).
• The right to file a complaint with a supervisory authority. You have the right to lodge a complaint directly with the relevant supervisory authority regarding how we process your personal data.
• Right to withdraw consent. If you have given your consent to anything we do with your personal data (eg we rely on your consent as a legal basis for processing your personal data), you have the right to withdraw it at any time (although doing so does not mean that anything we we have done with your personal data until then within the scope of your consent is illegal). You can withdraw your consent to the processing of your personal data at any time by contacting us in the manner mentioned below.
9. Retention period
The Administrator keeps personal data for the period necessary for the purpose for which it was processed. We actively review the personal data we retain and securely delete it, or in some cases anonymize it, when there is no longer a legal, business or consumer need to retain it.
10. Supervisory authority
You can obtain further information and advice regarding your rights from the supervisory body for personal data protection, which is the Office for Personal Data Protection, located in PPlk. Sochora 27, Prague 7.