SERVICED APARTMENT POLICIES
FOR Rubešova 7

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Introduction

As the visit to our accommodation’s web­site may involve the collection of personal data, we would like to provide you with clear and comprehensible information regarding the protection and handling of such data. We want you to know that we take personal data protection very seriously and comply with all obligations imposed on us by applicable legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “GDPR”).

The joint controllers of personal data are the following companies, which own and participate on operation of this accommodation facility: Rubešova 7, s.r.o., Company ID No.: 05163269, with its registered office at Marie Cibulkové 450/13, Nusle, 140 00 Prague 4; Retail Service, s.r.o., Company ID No.: 26482223, with its registered office at Marie Cibulkové 450/13, Nusle, 140 00 Prague 4.

At the same time, we would like to assure you that we have adopted the necessary technical and organizational measures to ensure the security of your data.

Who will process your data, how will it be processed, and what are your rights?

1. Contact details of the controllers, Retail Service, s.r.o., Company ID No.: 26482223, with its registered office at Marie Cibulkové 450/13, Nusle, 140 00 Prague 4, Rubešova 7, s.r.o., Company ID No.: 05163269, with its registered office at Marie Cibulkové 450/13, Nusle, 140 00 Prague 4, contact email: info@downtownsuites.cz;
2. If you have filled out a contact form and are requesting the provision of our services, we may process in particular the following data:

a. a. First name, last name, date of birth, residence address, payment information, identification document number

b. Email address

c. Telephone number

d. Vehicle registration number

3. Sources of personal data: Most of the data is obtained directly from you when you enter it into the relevant form on our website, or potentially during business negotiations (pre-contractual negotiations), during the provision of our services, or in the performance of the relevant contract. Some personal data may also be collected through the use of cookies.

4. Purpose and legal basis of processing: All personal data we process about you is necessary for the proper conduct of our legal relationship, or for the purposes of marketing and business communication. We need to process personal data, for example, in order to take steps at the request of the data subject prior to entering into a contract, to conclude the contract, and to subsequently perform it within the meaning of Article 6(1)(b) of the GDPR — typically, if you provide us with your contact details so that we can get back to you with an offer of our services, accommodation provision, etc. Furthermore, we may process personal data for the purpose of complying with legal obligations pursuant to Article 6(1)© of the GDPR (e.g., reporting to the immigration police, payment of municipal fees), as well as for conducting internal and external audits and for other similar purposes. Personal data obtained from you when you browse our website is processed and used primarily for the operation of our website and the improvement of our services. We do so on the basis of our legitimate interest within the meaning of Article 6(1)(f) of the GDPR. In certain specific cases and for a predetermined purpose, we may also process your personal data on the basis of your explicit consent pursuant to Article 6(1)(a) of the GDPR — such consent may be withdrawn at any time by sending an email to: info@downtownsuites.cz

5. Recipients or categories of recipients of personal data: The recipients of your personal data will be only the employees of the controllers or persons in a similar relationship with the controller. These include, in particular, the following categories of recipients: a. Persons providing legal services and operations, including cooperating individuals; b. Entities with whom we cooperate and who provide us with services (e.g., IT service or system providers); c. Tax or other advisors; d. Under the conditions set out in the relevant legal regulations, your data may be disclosed to the competent public authorities. All such persons are obliged to maintain confidentiality and to comply with strict organizational and technical measures aimed at ensuring the security of your personal data. In accordance with the principle of data minimization, each relevant recipient of personal data will be granted access to or provided only with such categories of personal data as are necessary for the fulfillment of the specific purpose.

6. Transfer of personal data abroad: Your personal data will not be transferred abroad, unless such transfer occurs in the context of data localization on cloud storage when using services provided by Google or Microsoft.

7. Retention period of personal data: Your personal data will be stored and processed for the duration of our mutual communication, negotiations, and any legal relationship, and for an additional 4 years after its termination, unless the applicable legal regulations require longer retention. If we process personal data based on your consent and no other period is specified in a particular case, we will process such data until the relevant consent is withdrawn.

8. Your rights regarding personal data protection.

a. You have the right to information regarding the processing of personal data pursuant to Articles 13 and 14 of the GDPR — such information is provided to you in this document. However, if anything is unclear, we will be happy to explain it to you further.

b. You have the right to request access to personal data concerning you as the data subject, and the right to rectification if the data is incomplete, inaccurate, or outdated, pursuant to Articles 15 and 16 of the GDPR.

c. You have the right to erasure of all personal data we process in the event that it is no longer needed or if we no longer have a legal basis for its processing, pursuant to Article 17 of the GDPR;

d. You have the right to restriction of processing pursuant to Article 18 of the GDPR, in the following cases: i. if you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data; ii. if the processing is unlawful and you, as the data subject, oppose the erasure of the personal data and instead request the restriction of its use; iii. if you have objected to the processing on the grounds of the controller’s or a third party’s legitimate interests, pending the verification of whether the legitimate grounds of the controller override those of the data subject.

e. You have the right to object to the processing in specific cases as set out in Article 21 of the GDPR;

f. You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data constitutes a breach of the GDPR. The complaint may be lodged with the supervisory authority, which in the Czech Republic is the “Office for Personal Data Protection” – https://www.uoou.cz/;

g. As your data is not processed by automated means, you do not have the right to data portability;

h. You have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such decision is based on an exception set out in Article 22 of the GDPR.

If you wish to exercise any of your rights, raise an objection, or ask a question, do not hesitate to contact us at: info@downtownsuites.cz, or in writing at the registered office address of the controllers.

Conclusion

We believe that everything is now clear. However, if there is anything you do not understand or are unsure about, please do not hesitate to contact us — we will be happy to explain everything to you: info@downtownsuites.cz