As part of dealing with OREA HOTELS, s. r. o., reg. no.: 27176657, reg. address: Praha 4, Na Pankráci 1062/58, 140 00, Czech Republic, (“Controller”), regarding the provision of its services, the following personal data are or will be processed:
| Personal data | Category | Purpose of processing | Time of storing | Categories of entities authorised to view the data | Processing title |
|---|---|---|---|---|---|
| Name and surname: | Personal data | Statutory obligations, identification | up to 6 years (guest register) | Employees in charge and business partners | Statutory obligation, contract performance |
| Date (and place) of birth | Personal data | Statutory obligations, identification, business activities | up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Address and permanent address (registered address) | Personal data | Statutory obligations, delivery of documents | Up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Sex | Personal data | Statutory obligations, identification | up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Birth identification number | Personal data | Statutory obligations, identification | Up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Citizenship | Personal data | Statutory obligations, identification | Up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Number of proof of identity | Personal data | Statutory obligations, identification | Up to 6 years (guest register) | Employees in charge | Statutory obligation, contract performance |
| Email address | Personal data | Communication, marketing purposes | Up to 6 years (guest register) or for the time period of consent | Employees in charge, business partners | Contract performance, consent (if given) |
| Telephone number | Personal data | Communication | Up to 6 years (guest register or internal record) | Employees in charge | Contract performance |
| Photographs | Special categories pursuant to Article 9 of the GDPR | Promotion, marketing purposes | For the time period of consent | Employees in charge, business partners | Consent, if given |
| IP address | Personal data | Statutory obligations, identification, electronic systems management | Until the end of stay at the hotel | Employees in charge, business partners | Statutory obligation, contract performance |
| Signature | Special categories pursuant to Article 9 of the GDPR | Statutory obligations, communication, business activities | Up to 6 years (guest register) | Employees in charge, business partners | Statutory obligation, contract performance |
| Camera recordings | Special categories pursuant to Article 9 of the GDPR | Protection of life, health and property | 3 days | Employee in charge or a business partner in the area of security | Protection of interests |
| Bank account number | Personal data | Statutory obligations | Up to 15 years (contract / order) | Employee in charge | Statutory obligation, contract performance |
| Bank card number | Personal data | Performance of contracts and its securing | Up to 10 days (tax document, accounting records) | Employee in charge | Statutory obligation, contract performance |
Contact information of the person authorised by the Controller in the area of personal data protection: osobni-udaje@cimex.cz
We hereby inform you that you have the right:
- to ask for confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
- to have inaccurate data concerning you rectified.
- to have inaccurate data concerning you deleted.
- to the restriction of processing of the personal data concerning you.
- to receive the personal data concerning you in a structured (electronic or printed) format and to transmit those data to another controller.
- to withdraw your consent to personal data processing at any time.
We also inform you that you have the right to object to the processing of the personal data concerning you and lodge a complaint with the Office for Personal Data Protection at any time.
Contact forms for exercising the data subject’s rights: http://kontakt.cimex.cz/
Personal data may be processed manually or in an automated way. The personal data shall not be transferred outside the Czech Republic.
Where the reason for processing is not marked as “consent,” the aforementioned data must be processed by the data controller in order to achieve the objective of the relevant legal transaction, and therefore, if such personal data are not provided, the legal transaction cannot be performed.
Where the reason for processing is marked as “consent,” you have the right not to provide the aforementioned data without affecting the possibility of performance based on the legal transaction for which you have been asked to give consent to personal data processing.
If you have given and/or give the Controller consent to processing your personal data for marketing purposes, you may be sent commercial communication or other marketing materials at the Controller’s discretion.