Personal data processing and protection

Information on personal data processing

Ondřej Rozehnal, registered at Rataje nad Sázavou 18, 285 07, Company ID 143 64 441, is committed to protecting the personal data you provide to us. Your data is processed responsibly and transparently, and you are entitled to request information about the personal data we hold, and to have it corrected or erased where it was provided on the basis of your consent.

If you have any questions about the processing of your personal data, you can contact us at info@nabreckarne.cz.

Security of your personal data

We take the security of the personal data entrusted to us seriously. We have adopted appropriate technical and organizational measures to adequately protect your data. No unauthorized person has access to your personal data, and we do not pass it on to third parties for further processing without your consent, unless required by law or to protect our legitimate legal interests.

GDPR compliance

As the controller of your personal data, we declare that we meet all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016). This means that we process your personal data only on a valid legal basis — primarily legitimate interest, performance of a contract, a legal obligation, or given consent — that we fulfil our information duty before processing begins, and that we support you in exercising your rights under the Personal Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process personal data that you provide to us yourself, for the following reasons (purposes):

• Sending informational emails about new services
  Your personal data, to the extent of: email address, used to inform you about new services. We keep your personal data for the duration of the applicable statute-of-limitations periods, unless the law requires a longer retention period or we have stated otherwise in a specific case.
• Facilitating reservations
  To facilitate a reservation, we process your personal data to the extent strictly necessary. This mainly concerns contact details (name, phone, email), as well as identification details (address, ID card number, and signature).
• Bookkeeping
  We process your personal data (billing details) that we necessarily need in order to comply with the legal obligation to issue and keep records of tax documents.

Cookies

When you visit our website, you are informed that we use technology to collect and store information using cookies on your device. Cookies are small text files that we do not send anywhere or otherwise process. We use cookies necessary for the correct functioning of the website, and while browsing our website your IP address, how long you stay on a page, and which page you arrived from are recorded. We consider the use of cookies for measuring website traffic and adapting the display of web pages to be our legitimate interest as controller, as it allows us to offer you an even better service. Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable cookies on your computer, except for those necessary to ensure the website functions correctly.

Your rights regarding the protection of personal data

You have a number of rights in connection with the protection of personal data.

You have **the right to information**, which is already fulfilled by this information page describing our personal data processing policy.

Thanks to the **right of access**, you can ask us at any time and within 30 days we will show you which of your personal data we process and why. We may refuse requests for information that are unfounded, excessively repetitive, or that would require disproportionate effort to obtain, or would be difficult to obtain (typically from backup systems, archives, etc.). If anything changes for you, or you find your personal data to be outdated or incomplete, you have the right to have it completed and updated.

You may use the **right to restrict processing** if you believe we are processing inaccurate data about you, believe we are processing it unlawfully but do not want all the data deleted, or if you have objected to the processing.

**The right to erasure ("to be forgotten")** is another of your rights. We don't want to forget you, but if you wish, you have that right. In that case, we will erase all your personal data from our system as well as from the systems of all sub-processors and backups. Fulfilling the right to erasure takes us up to 30 days.

**Complaint to the Office for Personal Data Protection** — if you feel that we are not handling your data in accordance with the law, you have the right to lodge a complaint at any time with the Office for Personal Data Protection. We would appreciate it if you would inform us of any such concern first, so that we can address it and remedy any shortcoming.

Confidentiality

We assure you that our employees and collaborators who process your personal data are obliged to maintain confidentiality regarding personal data and the security measures whose disclosure would compromise the security of your personal data. This confidentiality obligation continues even after the end of our contractual relationship. Your personal data will not be disclosed to any other third party without your consent.