Information
The controller of personal data is the company HOTEL SINGER s.r.o., which uses this reservation service and handles the data of the customers making reservations.
The processor of personal data is the company Bookolo system s.r.o., which, through the Booking Engine application, processes reservations and provides the data to the controller.
The data subject is a natural person who has provided the controller with their personal data on the basis of an accommodation agreement, a purchase agreement, a service agreement or another contract concluded with the controller, or on the basis of consent to the processing of personal data within the registration to receive news (newsletters) sent by the controller. The data subject may also be a natural person whose personal data the controller obtained from other lawful sources.
The controller processes personal data to the extent in which they are provided to it by the data subjects, or to the extent in which the controller obtains them from other lawful sources. This concerns: first name, surname, date of birth, residence, place of business, identification number, payment card number, tax identification number, email, telephone, signature.
The controller processes the personal data of data subjects for the purpose of performing the contract concluded between the data subject and the controller, electronically or in writing, fulfilling legal obligations and for the purpose of direct marketing (i.e. offering the controller's products and services), including the sending of commercial communications within the meaning of Act No. 480/2004 Coll., on certain information society services. The controller sends commercial communications only if the data subject has registered to receive news (newsletters) or if the controller obtained the details of the data subject's electronic contact in connection with the sale of its products or services. The data subject has the option to unsubscribe from receiving news (newsletters) in a simple manner and free of charge.
The controller takes care to protect the privacy of data subjects, and therefore processes only personal data that are strictly necessary for the stated purposes of processing.
The legal basis for processing carried out for the purpose of direct marketing is the consent of data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining an electronic contact in connection with the sale of the controller's product or service pursuant to Act No. 480/2004 Coll.).
In other cases, the legal basis for processing is the performance of a contract, the protection of the controller's legitimate interests (protection of property, exercise of contractual rights in court proceedings, etc.) and the fulfilment of a legal obligation.
In the case of personal data processed for the purpose of performing a contract, the controller processes the personal data for the duration of the contractual relationship and subsequently for a further 10 years, taking into account the length of the limitation period for compensation for damage or harm. In the case of processing for the purpose of fulfilling a legal obligation, the controller processes the personal data for the period stipulated by the legal regulations. In the case of personal data processed on the basis of the data subject's consent, the controller processes the personal data for a period of 10 years, unless the consent to the processing of personal data is withdrawn before then. This is without prejudice to the controller's obligation to process personal data for the period stipulated by, or in accordance with, the relevant legal regulations.
If the data subject has given the controller consent to the processing of personal data, they may withdraw their voluntarily given consent to the processing of personal data at any time free of charge. The withdrawal of consent is without prejudice to the lawfulness of processing based on the consent given before its withdrawal. The withdrawal of consent also has no effect on the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular where the processing is necessary for the performance of a contract, a legal obligation or for other reasons set out in the applicable legal regulations).
The controller, and possibly also third parties – recipients who provide appropriate safeguards and whose processing meets the requirements of the applicable legal regulations and ensures adequate protection of the rights of data subjects – have access to the personal data of data subjects.