Privacy Policy

Information on the processing and protection of personal data

With effect from 25 May 2018, the processing of your personal data is subject to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation), the so-called GDPR. In connection with this, we provide you with the following information about the processing and protection of your personal data.

I. Administrator of personal data

The administrator of your personal data is the company JE plus EM 2016 s.r.o., with its registered office at Barborská 37/4, 284 01 Kutná Hora, IČ 05320127, registered in the commercial register of the Municipal Court in Prague, section C, insert 261821 (hereinafter referred to as  Administrator ), which is the operator of the Barborský dvůr hotel, at the address Komenského náměstí 38/17, Vrnitňi Město, 284 01 Kutná Hora (hereinafter referred to as  the Hotel ).

II. What personal data we process

The personal data we process about you, the scope of which varies according to the type and scope of services provided, includes your:

• first and last name, title
• birthdate
• citizenship
• home address
• number of travel document
• visa number, if indicated in the travel document
• duration of stay
• purpose of stay in the territory of the Czech Republic
• e-mail address
• telephone number
• type, number and expiration date of the payment card
• motor vehicle registration plate
• other data, if necessary in connection with the provision of services by the Administrator.

We obtain personal data directly from you or from the intermediaries of your accommodation when concluding a contract for booking accommodation, or accommodation contract and further in the course of our contractual relationship. The provision of your personal data is voluntary. If you decide not to provide us with your personal data, it will not be possible to conclude an accommodation reservation contract, or accommodation contract.

No automated decision-making takes place when processing your personal data.

To ensure the security and confidentiality of your personal data, which is extremely important to us, we use technical and organizational measures, especially to protect against unauthorized access to personal data and their misuse, including ensuring the security of our IT systems. We regularly evaluate and update all measures.

III. Purpose of processing and legal basis for processing personal data

We process your personal data for the purposes of:

• provision of services on the basis of a contract for booking accommodation, or the contract for accommodation in the Hotel, i.e. especially for the purpose of concluding the contract, managing our contractual relationship and communicating with you. 
  The legal basis that allows us to process your personal data in this case is given by the fact that the processing of your personal data is necessary for the purpose of concluding or fulfilling a contract with you.
• fulfillment of our legal obligations, i.e. especially for the purposes of keeping a house register and reporting the accommodation of a foreigner in the sense of legal regulations governing the stay of foreigners in the territory of the Czech Republic.
  The legal basis that allows us to process your personal data in this case is given by the fact that the processing of your personal data is necessary to fulfill a legal obligation that applies to us as a personal data administrator.
• protection of our legitimate interests, i.e. especially for the purposes of assessment, exercise and enforcement of our legal claims, protection of the rights, property or safety of us, our clients or other persons.
  The legal basis that allows us to process your personal data in this case is given by the fact that the processing of your personal data is necessary for the purposes of our legitimate interests as a personal data controller.
• marketing and sending you marketing communications and business offers that we think may be of interest to you in order to improve our services, if you have given us your consent to direct marketing.
  The legal basis that allows us to process your personal data in this case is given by the fact that you have given us your consent to process your personal data, which can be revoked at any time for this purpose.

IV. Recipients to whom we may provide your personal information

To ensure the proper operation of the Hotel, when providing services and fulfilling our contractual obligations, we use the professional and specialized services of other entities, e.g. providers of gastronomic services, IT services, accountants, auditors and other entities that provide us with their services. If these entities process your personal data provided to them by the Administrator, they have the status of personal data processors and process them only within the framework of our instructions and cannot use them otherwise. We carefully select each such entity and conclude a personal data processing contract with each one, in which such entity as a processor has strict obligations to protect and secure personal data.

V. The period for which we will process your personal data

We keep your personal data only for as long as one of the above processing purposes lasts, i.e. especially for the duration of the contract and for the duration of your consent to the processing of personal data. Subsequently, after the termination of your contract or the withdrawal of your consent, we retain your personal data only for the period and under the conditions required by law, in accordance with general limitation, archiving and shredding periods.

VI. Your rights related to the processing of your personal data

In connection with the processing of your personal data, you have:

• the right to brief, clear, transparent and understandable information  about how we handle your personal data and what your rights are related to the processing of your personal data (this document is also for this purpose)
• the right to access your personal data,  including the right to obtain confirmation as to whether or not we are processing your personal data and the right to request information about what personal data we are processing
• the right to correct  inaccurate and incomplete personal data
• the right to have  your personal data deleted if:
  – your personal data is no longer needed for the purposes for which it was collected or processed;
  – you have withdrawn your consent to the processing of your personal data;
  – you have objected to the processing of your personal data and our legitimate interest in the further processing of your personal data does not take precedence in the given case, or you have objected to the processing of your personal data for direct marketing purposes;
  – your personal data has been processed unlawfully;
  – your personal data must be deleted according to legal regulations.
• the right to restrict the processing  of your personal data if:
  – you dispute the accuracy of your personal data until we verify their accuracy;
  – the processing of your personal data is illegal and you only request a restriction of its use instead of erasing your personal data;
  – we no longer need your personal data, but you require it to exercise your legal claims;
  – you have objected to the processing of your personal data until we have verified whether our legitimate interests outweigh your interests.
• the right to data portability  including your right to obtain your personal data and your right to decide on its transfer to another service provider
  (to another personal data controller)
• the right to object to the processing  of your personal data if we process it for the purposes of protecting our legitimate interests or for direct marketing purposes
• the right to file a complaint with the supervisory authority , which is the Office for the Protection of Personal Data, Lt. Col. Sochora 27, 170 00 Prague 7; www.uoou.cz
  
  If you have questions or comments about the processing of your personal data or wish to exercise your rights listed in point VI., you can do so in writing at the address of the Administrator, i.e. JE plus EM 2016 s.r.o., with registered office Barborská 37/4, 284 01 Kutná Hora, or electronically at the e-mail address: manager@hotelbarborskydvur.cz