GDPR

According to Regulation * (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, Hotel, as Controller, processes the personal data of guests as well as Data subjects of dates as follows:

- Processing of personal data (email address, contact phone, contact address, cookie, IP address) on the basis of a legitimate interest of Controller is necessary to fulfill the contract to which Data subject is party:

at the moment of booking, during the provision of the accommodation service and other services of Controller, after departure of Data subject for eventual notification of forgotten things, sending invoices and other documentation. Storage period is 1 year from the date of check-in of Data Subject. If Data Subject does not give consent to the use of this data, we erase these data upon his departure.

- Processing of personal data on the basis of legal obligations. At the moment of check-in of Data Subject we register his in the Database of accommodated guests (house book and registration book) and data are used for reports for department of residence programs of the Foreign Police of the Czech Republic and for registration of the city accommodation fee. Mandatory data: name, surname, date of birth, home address, accommodation duration, number and type of identity document, visa, purpose of stay. Storage period is 6 years from the date of check-in of Data Subject.

- Processing is necessary to protect of vital interests of Data subject or other person:

the hotel building is guarded by camera system. Access to the momentary recording of camera system is only authorized for the staff and hotel management. The room where the computer with images of monitoring cameras is located is out of reach of guests and visitors. More information for guests is available at the reception.

- Processing is necessary for the fulfillment of a task carried out in public interest or in exercise of public authority entrusted to Controller.