GDPR and privacy

PRIVACY POLICY

 

In this document we would like to inform you about all important information concerning the processing of personal data in the operation of the Černá Louže campsite and the organisation of cultural and sporting events under the auspices of the Černá Louže campsite (www.kempcernalouze.cz).

The provider of the aforementioned services and also the administrator and processor of personal data is Emes Horeca, s.r.o., company ID 19877544, with registered office at 1.máje 868/11 Liberec III-Jeřáb, 460 07 Liberec (hereinafter referred to as the "provider").

Below you will find answers to the following questions in particular.

- Who can you contact in matters related to the processing of personal data?

- For what purpose does the provider process personal data?

- What personal data does the provider process and what authorization does it have to do so?

- Where does the provider obtain the personal data from?

- To whom does the provider pass on the personal data?

- How do you know that the provider is processing your personal data and what rights can you exercise in relation to data protection?

The provider takes a responsible approach to the processing of personal data and, in particular, takes care to keep it secure, all in accordance with generally binding legislation.

1. Who can you contact in matters related to the processing of personal data?

In the first place, you can always contact the provider directly, which is the controller of the personal data that it processes in connection with its business, in particular in connection with the operation of accommodation, catering and recreational services and in connection with the organisation of cultural and sporting events.

- E-mail: info@kempcernalouze.cz

- All contact details can be found on the website: wwww.kempcernalouze.cz

2. Does the operator have a data protection officer?

Yes, the operator has appointed a data protection officer.

You can contact the Data Protection Officer at info@kempcernalouze.cz.

 

3. For what purpose do we process personal data?

- 3.1 We process personal data in order to provide you with our services.

o If you use our accommodation and holiday services, we need to know your identification and contact details in order to enter into a contract with you to provide you with those services or goods. We also need to know this information when you book services with us.

o If you use our services repeatedly, we will remember your specific requirements so that we can provide you with services exactly as you wish next time. For example, if you regularly use an a la carte dinner instead of a buffet dinner, we will make a note of this next to your details. We would also do the same if you wish to always stay in a specific cottage, use specific services, indicate the business name on your invoice, exclude allergens from your diet, etc.

o In this case, we do not need your consent to process.

o However, we will collect your consent in certain cases of service provision if you choose to give it to us. For example, you may consent to the retention of sensitive information about your health if that information is relevant to the provision of the services. You may also give consent for us to remember your favourite food, drinks or services, or the date of your birthday or anniversary for the purpose of offering you services or attention.

- 3.2 We also process personal data for marketing purposes.

o In some cases we need your consent for such processing. If you give us your consent, we may contact you, by email or SMS, with an offer of our goods or services in the form of a newsletter. You may withdraw your consent to such processing of your personal data at any time.

o On the basis of legitimate interest, we are entitled to include you in a loyalty program if you have used our services. We do not need your consent for this.

- 3.3 We may send commercial communications (e.g. in the form of newsletters) to guests to whom we have provided our services or to customers at their email or telephone number.

o We do not need your consent to do this as it is a legitimate interest of the operator to offer additional goods or services to its guests. However, of course we do not want to bother anyone if they do not wish to do so. It is possible to cancel sending a commercial communication by clicking on the link at the very end of the communication or by emailing info@kempcernalouze.cz

- 3.4 When organising sporting events, we generally need to know the basic identification data of the participants in order to organise the sporting event, in particular to classify the athletes into the relevant categories, to register and present them before the event and also for the purpose of publishing the results of the sporting events.

o We also document the sporting events and the photographs are subsequently placed on the website and social media of the operator.  

- 3.5 The processing of certain personal data is directly imposed on us by law, e.g. we are obliged to keep tax documents for a statutory period of time.

- 3.6 According to the law, we are obliged to transmit selected personal data about the accommodation of foreigners to the Police of the Czech Republic and to register these data. Similarly, we are obliged to transfer personal data to the municipality for the purpose of paying the recreation and spa fee and to keep records of these data.

- 3.7 We are entitled to process your personal data in order to protect our rights and legitimate interests, typically in the event of any dispute. Therefore, in this case we do not need your consent to process your personal data and the processing time may be extended.

 

4. What personal data does the operator process?

- 4.1 We process identification data (name, surname, date of birth, permanent residence, ID number) and contact data (telephone number and/or e-mail address) about our guests and customers.

In the case of accommodation of foreigners, we also process other data (nationality, travel document number, visa number and permanent residence abroad) in accordance with the Foreigners' Residence Act.

We also process data on the stay of our guests, in particular the duration of their stay.

- 4.2 In connection with the organisation of sporting events, we process basic identification and contact data as well as data on the athlete's performance (e.g. time and location) and, where applicable, data on the athlete's physical appearance if they are captured in photographs or videos documenting the sporting event. At the request of the person concerned, these data will of course not be processed and, in particular, will be removed from the operator's website and social networks.

- 4.3 Security monitoring may result in the processing of physical form data on CCTV footage.

- 4.4 We obtain all personal data directly from the individuals concerned. The exceptions to this are where we obtain data from CCTV footage and where we obtain guest data from booking systems operated by persons we have appointed to do so.

 

5. What authorisations do we have to process your personal data?

We always process personal data on the basis of one of the lawful grounds for each processing purpose.

- 5.1 In the vast majority of cases, the processing of personal data is necessary for the conclusion and performance of the relevant contract, most often a contract under which the operator provides services and goods to its guests and customers. In this case, we do not need your consent for processing.

The performance of a contract is also involved if you participate in an event organised by us.

- 5.2 In some cases, we process personal data on the basis of our legitimate interest. This is, for example, to send you commercial communications or where the operator asserts its claims or protects its rights and its legitimate interests. The legitimate interest of the operator is also the case for monitoring by security cameras. Similarly, we consider documenting events to be our legitimate interest.

- 5.3 Another lawful reason for processing personal data is a legal obligation imposed on us by generally binding legal regulations. In cases where we transfer personal data concerning the accommodation of our guests, and in particular foreigners, to the Police of the Czech Republic or to a municipality, the lawful reason for such processing of personal data is the fulfilment of an obligation imposed on the operator by law.

- 5.4 In some cases, the processing of personal data is based on your consent, in particular for our marketing activities, in order to provide various benefits to guests or customers, or for the purpose of evaluating the quality of our services.

 

6. To whom do we pass on personal data?

The operator carefully considers and assesses whether the transfer of personal data to another recipient is necessary and, in particular, whether the potential recipient is able to ensure adequate protection of the personal data transferred. The transfer of personal data takes place exclusively on the basis of a written contract for the processing of personal data.

 

The operator may transfer personal data:

- 6.1 to payment service providers and payment processors for the purpose of securing the transfer of funds;

- 6.2 certain personal data may be transferred to a person who processes accounting records for the Operator;

- 6.3 security camera footage may be transferred to a person who provides services related to the operation of the security camera system for the operator;

- 6.4 certain personal data may be transferred to the competent public authorities on request. The persons to whom the data are transmitted are not authorised to process the data for any other purpose or to transmit them to any other person without the consent or instruction of the operator, unless they have a lawful reason to do so.

 

7. Do we transfer your data to another country outside the European Union?

We do not transfer your personal data to a country outside the European Union (or outside the EEA, i.e. the European Economic Area) where an adequate standard of data protection would not be ensured. We do not intend to transfer personal data outside the Czech Republic, let alone the European Union.

The only exception is if the data is processed by the operator of a booking system that stores data on a server located in another country. However, in no case are personal data transferred in this way to another country where an adequate level of data protection would not be ensured.

8. Do you want to know what personal data we process about you?

If so, you can contact us at any time to request details of the processing of your personal data and we will provide you with detailed information free of charge or provide you with a copy of the data processed.

This is your right to access your personal data.

However, we must advise you that in the event of repeated or unreasonable requests, we are entitled to charge you for the cost of providing the information or to refuse to provide the information.

 

9. What other matters can you contact us about?

- 9.1 You have the right to rectification of your personal data, i.e. you may contact the operator with a request for rectification if the data held about you by the operator is inaccurate, incomplete or out of date.

- 9.2 You have the right to have your personal data erased, i.e. you may contact the operator to request that your personal data processed by the operator be erased. In order for the data to be erased, it must be one of the following: (i) the data is no longer necessary for the purpose for which it was processed, (ii) you have withdrawn your consent to the processing of the data, (iii) the data has been unlawfully processed, (iv) the data must be erased to comply with a legal obligation, or (v) the data was collected in connection with the offering of information society services.

- 9.3 You have the right to restrict the processing of your personal data, i.e. you can ask the operator to restrict the processing of your personal data. In order for the processing to be restricted, it must be one of the following cases: (i) you contest the accuracy of your personal data, or (ii) the processing is unlawful but you refuse to erase such personal data, or (iii) you request the processing of your personal data for the purpose of pursuing your claims, even though the purpose for which the operator processed the data has already been fulfilled, or (iv) you have objected to the processing and it has not yet been verified whether the legitimate interests of the operator outweigh your legitimate interests.

- 9.4 You have the right to data portability, i.e. you can ask the controller to provide your personal data to you in a structured, commonly used and machine-readable format or to have it transferred directly to another controller. The transfer can only take place if the processing is based on a contract or your consent and is also automated processing.

- 9.5 You may withdraw the consent you have given to the processing of your personal data at any time.

 

10. When is it possible to object to the processing of personal data?

 

You have the right to object in the following cases.

- a) You can object to the processing of personal data carried out by the controller on the basis of its legitimate interest. In this case, your personal data will not be further processed unless the operator demonstrates to you that its legitimate interest overrides your interests.

- b) You may object to the processing of your personal data if we process your personal data for direct marketing purposes. In this case, your personal data will no longer be processed.

 

11. How long will we process your personal data?

 

The period of time for which we will process your personal data is determined by our obligations under the contract we have entered into with you and other obligations imposed on us by law, such as the obligation to archive statutory documents.

We are required by law to keep records of the accommodation of foreigners for a period of six years from the last registration.

We are also obliged to keep records of the accommodation of persons for the purpose of a holiday or spa stay for six years from the last entry in the register.

In some cases, the duration of the processing of personal data depends on the duration of your consent to the processing.

In other cases, the processing of personal data depends on the duration of our legitimate interest.

In any case, we destroy data that is not necessary to fulfil the purpose or for which we have no lawful basis for processing.

 

12. What can you do if you believe that the operator is processing your personal data unlawfully?

 

You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection.

 

13.Information for other natural persons whose personal data is processed by the operator

 

The operator also processes personal data of other natural persons, typically persons cooperating with the operator, business partners, customers, suppliers, etc.

These persons also have their personal data processed, most often for the purpose of concluding and performing a contract.

The processing of such personal data is subject to the above.

 

If any of your questions have not been answered above, you can contact us at the above-mentioned contacts.