The company “Collection Hospitality s.r.o.”, Company Reg. No.: 19087349, with its registered office at Radlická 751/113e, Jinonice, 158 00 Prague 5, contact e-mail address: email@example.com (hereinafter referred to as “the Controller”), hereby informs all natural persons whose personal data may be processed by the Controller (hereinafter referred to as “the Data Subject”) about the facts pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as „GDPR“).
The scope, purpose, duration and legal basis of the processing of personal data
The Controller processes personal data of all natural persons who have contacted the Controller via the “Contact” form, or who subscribed to the Controller’s newsletter using this form, provided for on the Controller’s website www.collectionhospitality.com, to the following extent: first name(s), surname, e-mail address, telephone number (if there has been entered any). The purpose of such processing is to resolve the request or to answer the questions of the Data Subject which the Data Subject has sent to the Controller via the form or to send the newsletter to which the Data Subject has subscribed.
The Controller also processes personal data of natural persons who have expressed their interest in receiving The Controller’s newsletter by entering their e-mail address in a dedicated field on the Controller’s website www.collectionhospitality.com, to the following extent: e-mail address. The purpose of such processing is the sending of the newsletter.
The above-mentioned personal data is processed on the legal basis of the consent of the Data Subject, which the Data Subject has granted to the Controller (i) by submitting a request or question to the Controller via the form or (ii) by subscribing to the Controller’s newsletter via the form or (iii) by entering their e-mail address in a dedicated field on the Controller’s website. Personal data is also processed on the legal basis of the Controller’s legitimate interest consisting in protection of the Controller’s legitimate interests and rights, i.e., for the cases of exercising their rights or defending themselves in the event of litigations.
Personal data will be processed for the time period necessary for (i) resolving the request or answering the question, or (ii) for a period of 5 years in the case of interest in receiving newsletters, but always no longer than until the Data Subject’s consent is withdrawn. In the case of processing of personal data on the basis of a legitimate interest of the Controller, personal data shall be processed for the period necessary to protect the legitimate interests and rights of the Controller, i.e., for a time period of 4 years.
The Data Subject has the right to withdraw their consent at any time by means of a written submission to the address of the Controller’s registered office or electronically to the following e-mail address: firstname.lastname@example.org. The withdrawal of the consent does not affect the lawfulness of processing based on the consent granted before such withdrawal.
The provision of personal data is neither a legal nor a contractual requirement, nor a requirement which is necessary for the conclusion of any contract, and the Data Subject is under no obligation to provide such personal data. If The Data Subject fails to provide such personal data, it will not be possible to resolve their enquiry or request or to send them newsletters.
The information regarding the storage or processing of cookies, including the information on how to set them, is available in a separate website entitled “Cookies Policy”.
Categories of recipients of personal data
Personal data may be transferred to processors – business partners of the Controller involved in the operation of the website, as well as to the Controller’s cooperating partners involved in the preparation and sending of newsletters or in the processing of requests obtained from Data Subjects. If necessary, the Controller may also transfer personal data of Data Subjects to its legal, accounting and tax advisors.
Rights of Data Subjects in relation to the processing of personal data
Data Subjects whose personal data is processed are entitled to all the rights provided for the purpose of protection of personal data under applicable and effective legislation.
The Data Subject has the right:
to ask the Company for information about the processing of personal data;
to request access to personal data;
to ask for an explanation, restriction of processing, completion, rectification and erasure of personal data;
to the portability of personal data;
to raise objections against the processing of personal data on the grounds of legitimate interest of the Controller;
to lodge a complaint with the supervisory authority, which is the Office for personal data Protection in the Czech Republic.
The Data Subject may contact the Controller in connection with the exercising of their rights in writing at the address of their registered office provided for above or by means of electronic communication at email@example.com.
In the event of unlawful processing of personal data, the Data Subject is entitled to lodge a complaint against such processing by the Controller with the Office for Personal Data Protection in the Czech Republic (www.uoou.cz) or at any other competent public authority.
Information on automated decision-making, including profiling
The processing of personal data does not involve any automated decision-making processes, including profiling, as referred to in Article 22(1) and (4) of the GDPR.