Terms and Conditions for the Processing of Personal Data
Data Controller: BKV Kamenná spol. s r.o., 37401 Kamenná 2, Trhové Sviny, IČO 47237147, DIČ: CZ47237147 (hereinafter the “Operator”)
Customer: A natural or legal person using the operator’s services
Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, General Data Protection Regulation
General Provisions
- The purpose of these terms and conditions is to ensure the processing of customers’ personal data obtained in the course of the Hotel’s business activities and to establish the obligation to maintain confidentiality regarding such information, to the extent and under the conditions set forth in these terms and conditions.
- In accordance with these terms and conditions, the Hotel undertakes to process customers’ personal data. These terms and conditions are drawn up in accordance with the rights and obligations arising from the relevant legal regulations regarding the processing of personal data as described in the preceding paragraph, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, the General Data Protection Regulation (“the Regulation”).
Rights, Obligations, and Confidentiality
- The hotel undertakes to adopt such technical, personnel, and other necessary measures to prevent unauthorized or accidental access to personal data, its alteration, destruction, or loss, unauthorized transfers, other unauthorized processing, or any other misuse of personal data.
- In connection with the provision of lodging services, the Hotel is required to process guests’ personal data. The following individuals, in particular, handle this data:
- Hotel receptionist
- Hotel manager
- Accountant
- Marketing department staff
- The above-mentioned users have been instructed on the sensitivity of personal data. They handle guests’ personal data exclusively within the scope of the services provided by the Hotel. Neither the Hotel nor its employees disclose guests’ personal data to third parties. Other processors of guests’ personal data include:
- The Previo hotel system
- Inzio Marketing Company
- The terms and conditions for the processing and handling of guests’ personal data are set forth in a data processing agreement between the hotel and the respective processor.
Customer Information
- The Hotel has a legal obligation to retain certain personal data about its guests, specifically their first name, last name, date of birth, address, length of stay, ID number and type, any visa, and the purpose of their stay. This obligation is governed by the Act on the Residence of Foreigners in the Czech Republic (No. 326/1999) and the Act on Local Fees (No. 565/1990). Under these legal regulations, the hotel is required to retain personal data about guests for a period of 6 years.
- The guest has the right at any time to request a summary of their personal data from the hotel. This information is stored in (i) the guest’s file in the hotel system, (ii) the guest register, and (iii) the record book, all of which are kept in printed form in a locked room. In the event of a request to delete personal data, the Hotel will delete the guest file and shred the guest register and record book. However, the Hotel must comply with the aforementioned laws. The listed personal data may only be deleted after the statutory retention period has expired.
Technical and Organizational Measures for the Protection of Personal Data
- The Hotel undertakes to ensure, through technical and organizational measures, the protection of the personal data being processed so as to prevent unauthorized or accidental access to the data, its alteration, destruction, or loss, unauthorized transfers, other unauthorized processing, or any other misuse, and to ensure that all obligations of the personal data controller arising from legal regulations—in particular the Regulation—are continuously fulfilled in terms of personnel and organization throughout the period of data processing.
- The Hotel undertakes to ensure that data processing is secured, in particular, in the following manner:
- only authorized Hotel personnel will have access to personal data; the conditions and scope of data processing will be determined by the Hotel, and each such person will access personal data using their unique identifier;
- personal data will be processed on the Hotel’s premises, to which only authorized persons or its contractors (subcontractors), bound by the same obligations, will have access;
- The Hotel will prevent unauthorized reading, creation, copying, transfer, modification, or deletion of records containing personal data;
- it will take measures to enable the identification and verification of to whom personal data has been disclosed, and by whom it has been processed, modified, or deleted.
- The Hotel undertakes, through its own internal regulations or, where applicable, specific contractual provisions, to ensure that its employees and other persons who will process personal data do so only under the conditions and to the extent specified by the Hotel and in accordance with the Hotel’s instructions. In particular, the Hotel itself (and it shall also require the aforementioned persons to do so) shall maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of personal data, even after the termination of employment or the relevant work at the Hotel.
CCTV System
- The Hotel uses a CCTV system to protect its guests, as well as its own and their property. The Hotel declares that it does not process the recordings in any way, nor does it provide them to third parties or entities.
Cookies
When you browse our website, we record your IP address, how long you stay on the page, and which page you came from. We consider the use of cookies to measure website traffic and customize the display of web pages to be a legitimate interest of the data controller, as we believe this allows us to offer you even better services.
Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable cookies on your computer.
Last updated: May 25, 2018