Privacy Policy

Data Controller and Data Subject

1. The data controller is the company operating this website and providing the booking service.
2. The data subject is a natural person who has provided their personal data to the controller on the basis of a lease agreement, purchase agreement, service agreement, or any other contract concluded with the controller, or based on consent to the processing of personal data as part of a newsletter subscription managed by the controller. The data subject may also be a natural person whose personal data has been obtained by the controller from other lawful sources.

Scope of Personal Data Processing

The controller processes personal data to the extent provided by data subjects or obtained from other lawful sources. This includes: first name, last name, date of birth, residence address, passport or ID card number, place of business, identification number, payment card number, tax identification number, email address, telephone number, and signature.

Purpose of Personal Data Processing and General Consent

The controller processes personal data of data subjects for the purpose of fulfilling a contract concluded between the data subject and the controller, either through electronic remote communication means or in written form, for compliance with legal obligations, and for the purpose of direct marketing (i.e. offering the controller’s products and services), including the sending of commercial communications in accordance with Act No. 480/2004 Coll., on Certain Information Society Services. The controller sends commercial communications only if the data subject has subscribed to receive newsletters and has given a separate consent to the processing of personal data for marketing purposes.

Purpose of Personal Data Processing – Consent for Marketing Purposes

The controller processes personal data of data subjects for the purpose of fulfilling a contract concluded between the data subject and the controller, either through electronic remote communication means or in written form, for compliance with legal obligations, and for the purposes of direct marketing, special offers, and information about the apartment and its activities. The data subject may unsubscribe from newsletters easily and free of charge at any time.

Assessment of Processing Necessity

The controller respects the privacy of data subjects and therefore processes only the personal data that is strictly necessary for the specified purposes of processing.

Legal Basis for Personal Data Processing

The legal basis for processing carried out for the purpose of direct marketing is the data subject’s consent to the processing of personal data (e.g. newsletter subscription), or the controller’s legitimate interest (obtaining an electronic contact in connection with the sale of the controller’s product or service in accordance with Act No. 480/2004 Coll.).
In other cases, the legal basis for processing is the performance of a contract, the protection of the controller’s legitimate interests (e.g. property protection, enforcement of contractual rights in legal proceedings), and compliance with legal obligations.

Personal Data Retention Period

In the case of personal data processed for the purpose of fulfilling a contract, the controller processes the data for the duration of the contractual relationship and for an additional period of ten years, taking into account the statute of limitations for claims for damages or harm. For personal data processed to comply with legal obligations, the controller retains the data for the period specified by the applicable legislation. For personal data processed based on the data subject’s consent, the controller processes the data for a period of ten years, unless the consent is withdrawn earlier. This does not affect the controller’s obligation to retain personal data for the period prescribed by or in accordance with the applicable legal regulations.

Withdrawal of Consent to Personal Data Processing

If the data subject has given consent to the controller for the processing of personal data, they may withdraw their freely given consent at any time, free of charge. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on another legal basis than consent (i.e., where processing is necessary for the performance of a contract, compliance with a legal obligation, or for other reasons provided by applicable law).

Access to Personal Data

The controller and, where applicable, third parties – recipients who provide appropriate guarantees and whose processing complies with the requirements of applicable legal regulations – have access to the personal data of data subjects. These third parties ensure the proper protection of the rights of the data subjects.