INFORMATION ON PROCESSING PERSONAL DATA

In connection with the processing of personal data, we provide you with the following information in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

I.

BASIC PROVISIONS

II.

SCOPE OF PERSONAL DATA

We minimise the scope of personal data we process so that it is sufficient to properly fulfil the services you expect from us, to meet legal obligations, and to protect our legitimate interests. We process the following categories of personal data of our customers:

• • Basic data, namely your first and last name
• • Contact details, such as your e‑mail and telephone number
• • Records of e‑mail and chat communication, or any other communication with you in electronic or written form.
• • Transaction data, especially information about your payments and payment methods.
• • Personal data processed automatically: When you visit the website https://www.spiritaccommodation.com/ we may collect certain information about you, such as IP address, date and time of access to our website, browser information, operating system or language settings. We may also process information about your behaviour on our web pages, e.g. which links you visit.
• • Cookies are also processed automatically. A cookie is a small text file created when you visit a website. It is used to store information about how our pages are used. We distinguish (but do not identify) individual users and tailor content to specific preferences.

III.

PURPOSES AND LEGAL BASES OF PROCESSING

We process your personal data to enable you to make convenient online accommodation reservations. We process your personal data in accordance with the law, based on the following legal bases:

• 1. Processing on the basis of contract performance under Art. 6(1)(b) GDPR
  • • For the purposes of online accommodation booking or ordering other supplementary services (preparation and execution of distance sales contracts)
• 2. Processing on the basis of legal obligation under Art. 6(1)(c) GDPR
  • • For the purposes of handling complaints
  • • For the purposes of maintaining accounting and tax records
  • • For the purposes of dealing with requests by data subjects relating to the exercise of their rights under the GDPR
• 3. Processing on the basis of consent under Art. 6(1)(a) GDPR
  • • For marketing purposes
  • • For improving the services we provide

IV.

STORAGE PERIOD OF PERSONAL DATA

If we process your data on the basis of contract performance, we will process it for the duration of the contract and 5 years after its termination. If we process your data on the basis of consent, we will process it for the duration of your consent, but for no longer than 3 years. After this period we will destroy it. If we process your data on the basis of legal obligation, we will process it for the period specified by the relevant legislation.

• • For accounting, this period is 10 years
• • For complaints, this period is 2 years from the complaint date
• • For cyber security, this period is 12 months

V.

CATEGORIES OF RECIPIENTS

Your personal data may be provided to the following categories of recipients in the course of processing:

• • ČSOB payment gateway
• • Online reservation partners Previo and Booking.com
• • Public authorities, where the controller is obliged to provide personal data by law or a decision of a public authority.

VI.

YOUR RIGHTS RELATING TO PERSONAL DATA PROTECTION

When processing your personal data we are ready to exercise your rights.

• • You have the right to access your personal data, as well as the right to know the purpose of processing, who the recipients are and the storage period.
• • You have the right to rectification if your personal data is incorrect or has changed; contact us and we will correct it.
• • You have the right to erasure if your data is incorrect or unlawfully processed.
• • If your data is processed on the basis of consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• • You have the right to restriction of processing; if you wish, we will process only on the most necessary legal grounds or not at all.
• • You have the right to data portability; if you wish to transfer it to another controller, we will provide it in an appropriate format, unless other technical or legal obstacles prevent this.
• • You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) located at Pplk. Sochora 27, 17000 Prague 7, Czech Republic
  ID: 70837627
  tel.: +420 234 665 800
  e‑mail: posta@uoou.cz
  https://www.uoou.cz