Consent to the processing of personal data

The aim of this statement is to inform and assure all our customers, suppliers, employees and other cooperating individuals of the principles and rules that our company follows in the protection of personal data according to Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as the "GDPR"). This GDPR regulation entered into force on 25 May 2018.
Link to source

I. Basic provisions

  1. The personal data controller pursuant to Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is Apartmány MERAN, PhDr. Lenka Dittlová Šebestíková, Company ID: 76122247, with registered office: Lázeňská 202, Svoboda nad Úpou, 76122247, EU - Czech republic (hereinafter referred to as "controller").
  2. Personal data controller
    Apartmány MERAN, PhDr. Lenka Dittlová Šebestíková,
    Company ID: 76122247, with registered office: Lázeňská 202, Svoboda nad Úpou
    VAT number: CZ7152250996 EU - Czech republic,
    email: web@apartmany-meran.cz,
    phone: + 420 606 391 731
  3. Personal data (hereinafter referred to as “Personal Data”) means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  4. The controller does not have a designated personal data management officer.

II. Reason for processing personal data

  1. The legal reason for processing personal data is the performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR. (hereinafter referred to as “Performance of contract”) - processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of measures taken prior to entering into a contract at the request of the data subject.
  2. The controller does not make any automatic individual decision-making within the meaning of Article 22 GDPR

III. Purpose of processing, categories and sources of personal data

We process personal data, including sensitive personal data, only in the area of ​​payroll and personnel affairs. For personal data such as an employee's photograph for presentation on the company's website, we have ensured free consent in accordance with the principles of the GDPR.
We process personal data of natural persons mainly in the areas and agendas:
  1. Accounting
  2. Business agenda
  3. Websites

IV. Data retention period

  1. The administrator stores personal data In the case of an order for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the administrator and to exercise claims from these contractual relationships. (for a period of 15 years from the termination of the contractual relationship).
  2. After the expiration of the personal data retention period, the administrator deletes the personal data.

V. Recipients of personal data (subcontractors of the administrator)

  1. The recipients of personal data are the following persons: The website operation services provider is Apartmány MERAN, PhDr. Lenka Dittlová Šebestíková. The personal data of the Data Subject may be provided to delivery service providers for the purposes of proper performance of the contract and to persons who provide legal, accounting and IT services to the administrator in order to ensure proper performance of the obligations set forth in generally binding legal regulations. The Administrator does not intend to transfer the personal data of the data subject to a third country, an international organization or to third parties other than those mentioned above.

VI. Other provisions

  1. You have the right to access your personal data
  2. You are entitled to update, correct or change your personal data at any time, or restrict the processing of personal data
  3. You may object to the processing of personal data.
  4. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

VII. Personal data security conditions

  1. The Administrator declares that it has taken all appropriate technical and organizational measures to secure personal data.
  2. The Administrator has taken technical measures to secure data storage and storage of personal data in paper form, in particular passwords, antivirus software, backups, locking.
  3. The Administrator declares that only authorized persons have access to personal data.

VIII. Final provisions

  1. By sending an order via the specified email, you confirm that you are familiar with the personal data protection conditions and that you accept them in full.
  2. The Administrator is authorized to change these conditions. The new version of the personal data protection conditions will be published on its website