Privacy policy | Hotel Diana Karviná

This is a courtesy translation. Only the Czech version is legally binding.

The controller of personal data, i.e. the entity that determines the purposes and means of processing your personal data, is SW Kosmos s.r.o., registered office at Univerzitní náměstí 1935/1, 733 01 Karviná, Czech Republic, company ID (IČO) 281 46 166, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 57483 (the “controller”). In accordance with Article 6(1)(a) and Article 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, the “GDPR”), I give my free and unambiguous consent to the processing of my personal data (the “consent”) under the following conditions:

The controller undertakes to process accurate personal data only for the purpose of:

Concluding and duly performing the obligations arising from the accommodation contract
Fulfilling legal obligations relating to the collection of local fees (accommodation and spa fees), which we are required to pay for each guest.
Reporting data on guests who are not citizens of the Czech Republic to public authorities, in particular the Foreign Police, under Section 102 of Act No. 326/1999 Coll., on the Residence of Foreign Nationals in the Czech Republic.
Personal data contained in receipts and invoices, to meet legal obligations towards the tax office.
Statistical use of the system with a view to improving it
Keeping records of guests in the form of a guest book – this allows us to duly perform our contractual obligations (e.g. monitoring hotel occupancy).
The information collected is not used for any other purpose; in particular, it is never passed on to third parties without consent

Scope of personal data

The controller undertakes to process personal data only to the extent necessary for the purpose for which it is processed. The personal data provided on the basis of consent comprise:

identification data (first name, surname, date of birth, permanent address, identity document number) and
contact details (telephone number, e-mail address, postal address, or others)

Period of processing

The controller undertakes to process personal data only for a period of 10 years from the date consent is given. After this period, the controller is obliged to erase the personal data.

Categories of recipients and transfer of personal data

The controller declares that personal data will be made available to the relevant employees of the controller, who are bound by confidentiality regarding this data and the security measures whose disclosure would compromise its security.

Withdrawal of consent

The data subject has the right to withdraw consent to the processing of personal data at any time, without any restriction or detriment, either at the controller’s registered office or by e-mail at info@hotelkarvina.cz

The controller informs the data subject of their rights under the GDPR, in particular:

Right of access – you have the right to ask us to tell you, in the form of a statement, what personal data we process about you.
Right to rectification – you have the right to have the personal data we process for the above purposes be accurate, up to date and complete. If you find that this is not the case, please ask us to correct or update it – we will put it right without delay
Right to erasure (also known as the right to be forgotten) – we are obliged to erase personal data if we process it for longer than stated above, or if we have no valid legal basis for such processing. Please note that we cannot erase data where processing is based on the performance of a contract or a legal obligation, even at your request – in that case we will inform you of the reason within one month.
Right to restriction of processing – you are entitled to have us restrict the processing of your personal data if you contest its accuracy, if the processing is unlawful and the data has not been erased, or if you have objected to the processing – in that case we will restrict processing until your objection has been assessed.
Right to object – you are entitled to object where processing is carried out on the basis of legitimate interest. If you object in connection with receiving marketing communications, we will always comply. Unless we demonstrate that our legitimate grounds for processing your personal data override your interests, rights and freedoms, we will no longer process your personal data.
Right to withdraw consent – you are entitled to withdraw your consent to processing at any time where your consent is required (e.g. for marketing communications).
Right to lodge a complaint with a supervisory authority – if we fail to act for more than one month, you may contact the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, Czech Republic.

You can exercise all the rights described above in person at our hotel reception, where an authorised employee will verify your identity using a valid identity document and tell you when your request will be handled. If you would prefer to exercise your rights electronically, we need to be sure that it really is you. In that case you can send your request to info@hotelkarvina.cz with a valid electronic signature, which is sufficient proof of the applicant’s identity, or, if you have a Czech data box, send it to our data box ID: isgabqw.

Our company does not carry out any processing based on automated decision-making.

Cookies and website analytics

Cookies are small files that a website stores in your browser. On www.hotelkarvina.cz we only use the following:

Necessary – the cc_cookie cookie stores your choice in the cookie bar so the website does not ask you on every visit. It is stored without consent, because otherwise your choice could not be remembered. It is valid for 6 months.
Map and reviews – the map (Google Maps, Google Ireland Limited) and guest reviews (Trustindex) are loaded only with your consent, either in the cookie bar or by clicking the “Show map” / “Show reviews” button. These services see your IP address and may set their own cookies under their own policies.
Website analytics – only with your consent we use Google Analytics 4 (Google Ireland Limited). It gives us aggregate statistics: which pages people visit, how long they stay, where they came from and how many of them click through to booking. Google Analytics sets the _ga and _ga_* cookies, valid for up to 2 years. We keep the data for no longer than 14 months. Google Analytics 4 does not store IP addresses. Google may also process the data in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis for the map, reviews and analytics is your consent (Art. 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications). Without consent none of them is loaded. You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer.

The website runs on Cloudflare (Cloudflare, Inc.), which processes your IP address for security and to deliver the pages. We use its anonymous aggregate statistics (Cloudflare Web Analytics) to see the number of visits; these statistics use no cookies and do not identify individual visitors. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Conclusion

The data subject hereby declares that they have been duly informed by the controller about the processing of personal data in accordance with Article 13 of the GDPR, and that the above personal data is accurate and true and is provided to the controller voluntarily.