Company Holiday Pro, s.r.o., Donatellova 2003/6, Strašnice, 100 00 Praha 10, ID No.: 06286763, registered with the Municipal Court in Prague C 278641 (the “Controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and other legal regulations.

The Controller processes data obtained primarily from the data subject, and also data obtained from third parties (e.g., travel agencies, online portals, discount portals, etc.) who are authorized to share such data with the Controller. The Controller processes data provided by third parties only to the extent necessary for the performance of contracts or legal obligations as specified below.

Personal data including name, surname, arrival date, departure date, telephone number, email address, permanent address, and date of birth may be processed for the purpose of concluding and fulfilling an accommodation contract or similar agreement (hereinafter referred to as the “Agreement”) and for the purpose of exercising the Controller’s rights arising from the agreement.

Personal data including name, surname, arrival date, departure date, permanent address, purpose of stay, and ID card number or travel document number (passport) may be processed for the purpose of fulfilling the Controller’s obligations imposed by Act No. 565/1990 Coll., on local fees, as amended.

Personal data including name, surname, arrival date, departure date, permanent address, date of birth, travel document number (passport), nationality, visa number, and purpose of stay may be processed for the purpose of fulfilling the Controller’s obligations under Act No. 326/1999 Coll., on the Residence of Foreigners in the Czech Republic and on Amendments to Certain Acts, as amended.

The Controller will process personal data both manually and automatically, directly through its authorized employees and further through processors authorized by the Controller based on Personal Data Processing Agreements.

Personal data including name, surname, arrival date, departure date, permanent address, date of birth, ID card number, travel document number, nationality, visa number, and purpose of stay may be disclosed by the Controller to state administration or self-government authorities in accordance with the aforementioned laws.

Personal data including name, surname, arrival date, departure date, permanent address, room number, and date of birth may be disclosed to entities with whom the Controller will assert its rights under the agreement (especially courts, notaries, bailiffs).

The aforementioned personal data, in accordance with the principle of data minimization and other principles arising from GDPR and related regulations, represent the minimum required by the Controller for the purpose of fulfilling its rights and obligations, which stem from the agreements described above concluded with data subjects and from the laws cited above.

By providing an email address, the accommodated person voluntarily grants the Controller consent to process this personal data for the purpose of sending commercial and marketing offers and communications. This consent is granted for an indefinite period from the conclusion of the agreement until its withdrawal and may be revoked at any time. The email address will be automatically processed by the Controller’s employees and will not be disclosed to third parties. For sending transactional emails, newsletters, marketing, and commercial offers, we use the services of Previo and Ecomail.

The Controller generally does not process sensitive data and therefore does not request it from data subjects. An exception may be data concerning the data subject’s health, which the data subject voluntarily provides to the Controller (for example, when communicating a need to adjust diet due to potential health restrictions). The Controller may then use such data to offer the data subject higher quality services and fulfill specific wishes.

The data subject has the right to access their personal data processed by the Controller, the right to rectification or erasure, or restriction of processing, and the right to object to processing. The data subject also has the right to withdraw their consent to the processing of personal data if the data is processed by the Controller based on this consent.

The data subject also has the right to obtain from the Controller personal data concerning them that the data subject has provided to the Controller. Upon the data subject’s request, the Controller will provide the data to the data subject without undue delay in a structured, commonly used, and machine-readable format, or, at the data subject’s request, will transmit it to another clearly designated controller. This right does not apply to personal data that is not processed automatically.

The Controller does not intend to transfer personal data to third countries.

If the data subject believes that their personal data is being processed unlawfully, we would appreciate being notified, and we will promptly correct any error. The data subject can always lodge a complaint with the supervisory authority, which for the territory of the Czech Republic is the Office for Personal Data Protection (www.uoou.cz).

Controller’s Contact Details:

Holiday Pro, s.r.o., Donatellova 2003/6, Strašnice, 100 00 Praha 10, ID No.: 06286763, email recepce@zizkovabouda.cz