Harmony Hotel Špindlerův Mlýn - Parkování 0

Privacy Policy

Dear customer,

Please allow us to inform you how we at HARMONY Špindlerův mlýn, a.s. ("we" or "our company") process your personal data in connection with the conduct of our business activities.

With this notice we would like to inform you about which personal data we collect, how we handle it, from which sources we receive it, for what purposes we use it, to whom we may pass it on, where you can obtain information about your personal data and what rights you have in the area of ​​personal data protection. When processing personal data, we adhere to generally binding legal provisions and only process personal data to the extent determined by the specific service and/or the purpose of the processing.

Please familiarize yourself with the contents of this notice and we will be happy to answer your questions at our headquarters at Bedřichov 106, 543 51 Špindlerův Mlýn, by e-mail sales@harmonyhotel.cz and/or by phone at +420 499 469 111.

1. General information

Our company is obliged to process certain personal data as part of its business activities, in particular to fulfil legal and contractual obligations. In this respect, we would not be able to provide you with our products/services without your personal data.

We also process your personal data beyond the scope of our obligations in order to serve you and our other customers, to further develop our business relationship and to address you with a targeted offer of our products/services. For this we need your consent. In view of the focus of our products/services, the age limit for granting valid consent to the processing of personal data without the consent of the legal representatives of the data subjects is observed.

1.1 Principles of processing personal data

When processing your personal data, we observe and respect the highest possible standards of data protection and in particular adhere to the following principles:

  • (a) we always process your personal data for a clearly and intelligibly specified purpose, by the specified means, in the specified manner and only for the period necessary for the purposes of the processing; we only process accurate personal data of our customers and have ensured that the processing is relevant to the specified purposes and necessary to fulfil those purposes;
  • (b) We protect your personal data as classified information; therefore, we process our customers' personal data in a manner that ensures the highest possible security of that data and prevents unauthorized or accidental access, alteration, destruction or loss, unauthorized disclosure or other unauthorized processing or other misuse of our customers' personal data;
  • (c) we will always inform you in an intelligible manner about the processing of your personal data and about your rights to accurate and complete information about the circumstances of such processing as well as your other related rights;
  • (d) we have implemented and maintain appropriate technical and organizational measures to ensure a level of security appropriate to all possible risks; all persons who come into contact with our customers' personal data are obliged to keep confidential any information received in connection with the processing of that data.

2. Information on the processing of personal data

2.1 Information about the administrator

The controller of your personal data is us, i.e. HARMONY Špindlerův mlýn, a.s., with its registered office at Bohdalecká 1490/25, Michle, 101 00 Prague 10, ID No. 215 39 065, a company registered in the Commercial Register maintained by the Municipal Court in Prague under number B 28856.

2.2 Purposes of processing and legal basis for processing

2.2.1 Processing of personal data without your consent

These are generally situations where you are required to provide us with certain personal data so that we can provide you with our product/service, or where we are authorized to process your personal data obtained through other means.

  • (a) We are legally entitled to process your personal data without your consent in order to comply with our legal obligations, in particular
    • (i) prevent damage to our company property;
    • (ii) preventing fraudulent conduct to which our business may be exposed;
    • (iii) compliance with the obligation to identify and control the customer under the Law on Certain Measures Against the Legalisation of Proceeds from Crime and Terrorist Financing;
    • (iv) fulfilment of the identification obligation with regard to the customer on the basis of the Aliens Residence Act;
    • (v) the fulfilment of the identification obligation towards the customer on the basis of the Local Taxes Act.
  • (b) entering into or performing a contract with you.

    This is in particular the actual implementation of the contractual relationship or other fulfillment of the contract between our company and you. The personal data is required, among other things, to enable the implementation of the contractual relationship without unreasonable legal risks, including negotiations on the conclusion or amendment of the contract with you, i.e., for example, in the course of booking the services before concluding the contract for their provision.
  • (c) Protection of rights and legally protected interests, in particular for
    • (i) protection of the rights and legally protected interests of our company, collection of claims, realisation of securities or other enforcement of claims, development and further development of the services offered;
    • (ii) negotiations with interested parties regarding the assignment of our company's claim against the customer or other forms of transfer or assignment of the claim, including the related implementation, as well as other related negotiations with third parties, in particular informing the providers of relevant securities, etc.;
    • (iii) the settlement of disputes, particularly with regard to litigation or other disputes.
  • (d) Our legitimate interests.

    This is particularly the case if a contractual/customer relationship exists between you and our
    company.

2.2.2 Processing of personal data with your consent

Typically, these are situations where you give us your voluntary consent to process your personal data. Based on your consent, our company processes your personal data for the following purposes:

  • (a) customer support; these are activities that do not constitute the performance of a contract or other lawful framework for the processing of personal data and include the following activities
    • (i) market research;
    • (ii) obtaining feedback on the Administrator’s products and services;
    • (iii) monitoring the behaviour of customers on our company's website in relation to the services offered (this purpose does not therefore refer to the mere collection of information on the behaviour of users who visit our company's website through cookies, described below in the article on electronic communications);
  • (b) offering products and services; this includes in particular the dissemination of information, offering our company products and services through various means (by post, electronically, including email and messages to mobile devices, telephone calls and via websites);
  • (c) Offer of employment.

    The provision of personal data for the purposes of providing you with care is a contractual obligation of ours and failure to provide this data may result in us not being able to enter into a contract or provide appropriate care.

2.3 Scope of processing of customers’ personal data

Our company processes your personal data to the extent necessary to fulfil the purposes mentioned above. We process contact details (contact addresses, telephone numbers, email and fax addresses or other similar contact details) identification data (first name, last name, date of birth, permanent address, type, number and validity of identity card; in the case of a natural person - customer - entrepreneur, also the ID number and the VAT identification number) and camera recordings..

2.4 Nature of processing of personal data.

The way our company processes your personal data includes manual and automated processing in our company's information systems and in physical form.

Your personal data will be processed primarily by our employees and, where necessary, by third parties. Before sharing your personal data with third parties, we will always conclude a written contract with them that contains the same guarantees for the processing of personal data that our company itself observes in accordance with its legal obligations.

2.5 Recipients of personal data

In particular, your personal data will be passed on by customers to our employees in connection with the performance of their work tasks that require the handling of personal data of customers, but only to the extent necessary and in compliance with all security measures. In addition, the following

Your personal data will be disclosed to third parties involved in the processing of personal data of our customers or may be disclosed to them for other reasons in accordance with the law. The disclosure will be made in particular to:

  • (a) our law firm; and
  • (b) Data processors who provide us with server, web, cloud and IT services. Before we transfer your personal data to third parties, we always conclude a written contract with that party regulating the processing of personal data, so that it contains the same guarantees for the processing of personal data that our company itself observes in accordance with its legal obligations.

2.7 Transfer of personal data abroad

Your personal data will be processed in the Czech Republic and will not be transferred to countries outside the European Union.

2.8 Duration of processing of personal data

Our company processes our customers' personal data only for as long as it is necessary for the purposes of the processing. We continuously assess whether the processing of certain personal data required for a specific purpose is still necessary. If we determine that it is no longer necessary for one of the purposes for which it was processed, we destroy the data. However, internally we have already assessed the normal useful life of personal data in relation to certain purposes of personal data processing, at the end of which we particularly carefully assess the necessity of processing the personal data in question for that purpose. In this context, it also applies that personal data that is required for the purposes of:

  • (a) we process the performance of the contract for the duration of the contractual relationship with the customer; in addition, the corresponding personal data can generally be used for a period of ten years, unless longer processing is based on generally binding legal provisions;
  • (b) we process the offer of products and services for the duration of the contractual relationship; in addition, the corresponding personal data can generally be used for a period of ten years;
  • (c) Customer support is processed for the duration of the contractual relationship with the customer; beyond that, the personal data concerned can normally be used for ten years;
  • (d) the protection of rights and legally protected interests in the form of video surveillance recordings; in addition, the personal data concerned can normally be used for a period of thirty days;
  • (e) we will continue to process the offer of employment for one year after the completion of the selection process for a new employee.

2.9 Right to withdraw consent

In this notice, we have explained the reasons why we need your personal data and that we may only process it for specific purposes with your consent. You are not obliged to give our company your consent to process your personal data and you have the right to withdraw your consent. We would like to remind you that we are entitled to process certain personal data for specific purposes even without your consent. In this case, if you withdraw your consent, we will no longer process the personal data in question for the purposes for which the respective consent is required, but we may be entitled or even obliged to continue processing the same personal data for other purposes (e.g. we may continue to use your contact details to send you service messages related to your reservation, etc.).

If you wish to withdraw your consent to the processing of your personal data, please contact our registered office at Bohdalecká 1490/25, Michle, 101 00 Prague 10 or by email at sales@harmonyhotel.cz.

2.10 Sources of personal data

We mainly collect personal data from our customers:

  • (a) by the customers themselves;
  • (b) from publicly available sources (public registers, records or lists);
  • (c) from potential customers interested in our company’s services in the context of marketing events and campaigns;
  • (d) from its own activities by processing and evaluating other personal data of customers;
  • (e) from video surveillance recordings.

2.11 Your rights in connection with the processing of your personal data

You can exercise all your rights at our headquarters at Bohdalecká 1490/25, Michle, 101 00 Prague 10 or by email at sales@harmonyhotel.cz.You can also file a complaint with the supervisory authority, the Office for Personal Data Protection (www.uoou.cz).

2.11.1 The right to information means that you can ask us at any time for confirmation as to whether the personal data concerning you are being processed, and if so, for what purposes, to what extent, to whom they are disclosed, for how long we process them, whether you have a right to rectification, erasure, restriction of processing or objection, where we obtained the personal data from and whether automated decision-making, including possible profiling, takes place on the basis of the processing of your personal data. You also have the right to receive a copy of your personal data, whereby the first provision is free of charge and we may charge reasonable compensation for administrative costs for subsequent provision.

2.11.2 The right to rectification means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.

2.11.3 The right to erasure means that we must erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are legally required to do so.

2.11.4 The right to restrict Processing means that we must restrict the processing of your personal data until we have resolved any contentious issues relating to the processing of your personal data, so that we can only retain it and, where necessary, use it to establish, exercise or defend legal claims.

2.11.5 The right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or based on a legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Electronic means of communication

Our company uses numerous technologies in the course of its business activities to make access to us and our products/services as convenient as possible for you. This includes in particular services related to the use of the Internet and the use of social networks.

3.1 Social networks. You can contact us through various social networks, among others. We use these communication channels mainly as marketing tools, we do not currently offer our products/services through them.

3.2 Cookies.When providing our products/services, we also use cookies, which are small text files placed on the user's computer when they first visit our website. These files make it easier for us to see how visitors interact with the content of our website. This helps us to communicate more helpfully with visitors to our website or to target our marketing more effectively. Cookies can be deleted in your browser settings.

4. Final provisions

4.1. This notice is issued for an indefinite period and comes into force on 01.07.2024.

4.2. We may change this notice at any time by issuing a new, more complete version; the current version will be posted on our website and can also be inspected at our registered office.

4.3. Unless expressly stated otherwise, all information provided here also refers to the processing of personal data of potential customers, i.e. persons with whom we have not yet entered into a contractual relationship but with whom we are already in contact. Where applicable, the information provided here also applies to the processing of personal data of other persons with whom our company is in direct contact, although we do not have a contractual relationship with them (e.g. representatives of legal entities).