Privacy Statement
This Privacy Statement (the “statement”) describes how we collect, process, use and otherwise handle personal data collected through the https://www.kapkaresort.cz web interface (the “web interface”).
Data Controller:
KOTRLA a.s., with registered office at Rokytnice 190, Rokytnice, 755 01 Vsetín;
Tax ID: 476 76 663;
VAT ID: CZ47676663;
registered: in the Commercial Register at the Regional Court in Ostrava, Section B, Insert 806.
How to contact us
For matters related to the processing of personal data, you can contact the resort’s reception at recepce@kapkaresort.cz
If you wish to exercise your rights under the General Data Protection Regulation in relation to the processing of your personal data, you may do so in the following ways:
By sending a data message to databox ID: 47hety8;
In writing to KOTRLA a.s., Rokytnice 190, Rokytnice, 755 01 Vsetín; your signature must be certified;
By emailing recepce@kapkaresort.cz with your electronic signature attached;
In person at the following address: Rokytnice 190, Rokytnice, 755 01 Vsetín.
Data protection is very important to us. Please read this statement carefully, as it contains important information regarding the handling of your personal data and related rights and obligations.
INTRODUCTORY PROVISIONS
The web interface is managed and operated by the multipurpose centre in Wallachia (hereinafter referred to as “kapkaresort”), which seeks to connect the world of sports, relaxation and great gastronomy.
What principles guide the processing of personal data at kapkaresort?
When dealing with personal data, we act in accordance with the laws of the Czech Republic and directly applicable regulations of the European Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”), Act No. 110/2019 on personal data processing, Coll No. 480/2004 Coll., on certain information society services and on amending certain acts, as amended, and Act No. 127/2005 Coll., on electronic communications and on amending certain related acts (Electronic Communications Act), as amended.
What is personal data?
Personal data means any information that identifies or can identify a specific natural person. Personal data includes, but is not limited to:
-identifying information, such as a name, a surname, an identification number, a tax identification number, a date of birth, a gender or a user account login;
-contact details such as a home address (or a delivery address), a telephone number or an email address;
-other data, such as information obtained through cookies, the IP address (network identifier) including browser type, device and operating system, time and number of accesses to the web interface and other similar information.
COLLECTION AND USE OF PERSONAL DATA
How do we obtain your personal data?
In particular, you provide us with your personal data:
-when you use our accommodation services; the vast majority of personal data (name, surname, date of birth, ID number, permanent address, e-mail address and telephone number) is obtained by the data controller directly from the data subject, already in the course of the booking process and then subsequently during the process of accommodation. In some cases, the data may be provided by the data subject’s organisation or the employer, who might have made the reservation for their employee. If the reservation is made in this manner, the data controller also obtains the data about the organisation (registered office, registration number, VAT number) including the bank account number or the organization’s credit/debit card number, which are obtained through the payment process for the services provided. With bookings made via booking portals, the controller obtains information on the data subject directly from the booking portal;
-In the fitness centre, the controller obtains personal data when data subjects fill out registration forms at the centre.
-At the restaurant, we collect only the telephone number, the name and the surname of data subjects and, where applicable, the e-mail address for the reservation;
Please let us know if there are any changes to your personal data.
-When visiting and using the web interface, some personal data may also be collected and stored via cookies. You can read more about cookies in Article 5 of this policy statement.
We always process your personal data on a legal basis, with legitimate purposes and using the titles provided for by law.
On what basis and for what purposes do we process your personal data?
We may process your personal data entered when you make an inquiry (in particular via the contact form) and when you order services. We may process this data without your explicit consent on the basis of and for the purpose of concluding and performing a contract, i.e. for the purpose of providing a service. Furthermore, we may process this data on the basis of and for the purpose of fulfilling our statutory obligations (in particular registration obligations, compliance with the Local Tax Act, the Act on the Residence of Foreigners in the Czech Republic, archiving of tax documents, etc.) and on the basis of our legitimate interest for the purpose of protecting our legal claims.
When you create a user account or a registration, we may process the personal data entered without your explicit consent on the basis of the performance of the contract and solely for the purpose of enabling access to, administration and management of the user account.
We may use your email address without your express consent on the basis of our legitimate interest to send you commercial announcements relating to our goods or services similar to those you have ordered from us. You may refuse to receive commercial announcements at any time (including during the process ordering goods or services).
If you give us your consent by confirming it on the web interface, we may process your personal data entered via this web interface, in particular when you complete an order or create a user account. We can process your personal data for the purpose of sending you commercial announcements and direct marketing or for other purposes to which you have expressly agreed. If you are under 15 years of age, your legal representative must give consent. If in doubt, we may ask for evidence of your age.
If personal data is processed via cookies, we process this personal data on the basis of and for the purposes of concluding and performing a contract (this concerns only essential cookies) or on the basis of your consent (which you provide in the relevant bar on the web interface, without which these cookies cannot be collected). In particular, we can process your personal data for the purposes of providing user support, analysing user behaviour, analysing information useful for marketing and for improving our services.
If you would like more information about the specific purposes and legal titles of the processing of your personal data, please contact the reception at recepce@kapkaresort.cz.
For how long do we keep the data?
We only process your personal data for as long as is strictly necessary for the purpose.
We therefore process your personal data:
-for the duration of our legitimate interest (e.g. for as long as we need to retain the data to defend our rights);
-for the duration of the contract we have entered into with you;
-for the period for which you have given us your consent or until you withdraw it (if you withdraw your consent, we will immediately stop processing);
-for as long as necessary to comply with our legal obligations.
Once the purpose for which the data is processed has ceased, we will stop processing your personal data, unless we have another legitimate reason to keep it. If we have no other purpose for processing your data, we will ensure that the data is destroyed.
If you would like to know more about the retention period of your personal data for a specific purpose, please contact the reception at recepce@kapkaresort.cz.
YOUR RIGHTS IN REGARD TO YOUR PERSONAL DATA
-right to withdraw consent to the processing of personal data
-you can withdraw your consent at any time if we process your personal data only on the basis of this consent (i.e. without any other lawful reason),
You can withdraw your consent to the processing of your personal data at any time by:
By sending a data message to databox ID: 47hety8;
In writing to KOTRLA a.s., Rokytnice 190, Rokytnice, 755 01 Vsetín; your signature must be certified;
By emailing recepce@kapkaresort.cz with your electronic signature attached;
In person at the following address: Rokytnice 190, Rokytnice, 755 01 Vsetín.
Withdrawal of consent does not affect the lawfulness of data processing carried out until the moment of withdrawal of consent to processing.
Right of Access to Personal Data
You have the right to ask us whether we process your personal data. If we do, you have the right to access this personal data. In particular, you have the right to ask the following information:
the purpose of processing;
categories of personal data processed;
the recipients or categories of recipients to whom the personal data will be disclosed;
the period for which the personal data will be stored.
Upon your request, we will provide you with a copy of the processed data. We may charge you an administrative fee for additional copies, not exceeding the cost of making and transmitting those additional copies.
Right to Correct
If your personal data is inaccurate or incomplete, you have the right to request immediate rectification, i.e. correction of inaccurate data and/or completion of incomplete data.
Right to object to data processing
You have the right to object at any time to the processing of your personal data if we process it for direct marketing purposes, including any automated processing of personal data. Once you have objected, we will no longer process your personal data for these purposes.
Right to erasure (“right to be forgotten”)
You have the right to request that we delete your personal data if:
-it is no longer necessary for the purposes for which it was collected or processed;
-you have withdrawn your consent to processing;
-you have objected to the processing of personal data;
-personal data have been processed unlawfully.
Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if:
-you deny the accuracy of your personal data;
-the processing is unlawful and you request restriction of the processing of personal data instead of erasure;
-you object to the processing.
-We no longer need your personal data for processing purposes, but you require it for the establishment, exercise or defence of legal claims;
If you restrict data processing, we are only allowed to store your personal data while further processing is only possible with your consent or for legal reasons.
If the processing of personal data is restricted due to an objection to processing, the restriction lasts for the time necessary to determine whether we are obliged to comply with your objection.
If the processing of personal data is restricted due to a denial of the accuracy of the data, the restriction lasts for the period of verification of the accuracy of the data.
Right to data portability
You have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and to have it transferred to another data controller.
How can you exercise your rights?
You can exercise your rights in relation to personal data by using our contact details. All information and services will be provided to you without undue delay.
While we want to make it as easy as possible for you to exercise your rights, we must eliminate the risk of unauthorised interference with the processing of your personal data. Therefore, if we are in doubt that you are making the request yourself, we have the right to refuse your request for the time being and ask you for further information(s) to verify your identity. However, should there be an abuse of your rights on your part, e.g. through repeated unjustified requests made within a short period of time, we are entitled to refuse your request or to charge you a fee for the administrative costs incurred.
MANAGEMENT AND PROCESSING OF PERSONAL DATA
Who processes your personal data?
The law stipulates that we are the data controller.
To the extent necessary for the performance of the contract or other obligations, we may also transfer your personal data to other parties, such as cloud storage providers, email campaign managers, a company providing a “Customer Verified” certificate, an external accountant or other parties involved in the performance of the contract or our obligations. Where appropriate, we may also entrust other processors and recipients with the processing of personal data. We will also tell you who specifically processes your personal data on the basis of your enquiry.
Your personal data will not be transferred to countries outside the European Union unless necessary for the performance of a contract or for any other reason in accordance with the rules on such transfers set out in the Regulation.
How do we process personal data?
Personal and other data collected are fully secured against misuse. Personal data will be processed in electronic form in an automated manner or in paper form in a non-automated manner.
COOKIES
What are cookies?
Cookies are text files that enable the web interface to function. They are stored on the computer or another electronic device of each visitor to a web interface.
Not all cookies collect personal data; some only allow the web interface to work properly. You can refuse the use of cookies by selecting the appropriate settings in your browser.
Please note that if you refuse the use of cookies, you may not be able to enjoy all of the functions of the web interface.
What cookies and for what purposes does the web interface use them?
The web interface uses session (temporary) cookies that are automatically deleted when you stop browsing the web interface. It also uses persistent cookies that remain on your device until they expire or you delete them.
The cookies used by the web interface are as follows:
First-party cookies – these cookies are set by our website domain; these are essential cookies and performance cookies that we use for the conclusion and performance of the contract (in particular essential cookies), wherever appropriate on the basis of the above-mentioned consent. These cookies may be temporary or permanent;
Essential cookies – they allow you to navigate the web interface and use the basic functions, they usually do not identify you in any way and are not personal data;
Performance cookies are used to analyze how visitors use the web interface (number of visits, time spent on a website etc.); the data collected by these cookies is usually anonymous, and their collection is based on your consent (which you grant in the relevant bar on the website interface; these cookies cannot be collected without your consent);
Third party cookies – these cookies are set on different domains than the domain of our website, even when you are visiting our website; with your consent (which you give in the appropriate bar located on the web interface and without which these cookies cannot be collected), these cookies allow us to analyze our website and display personalized advertising for you; third party cookies are functional cookies as well as advertising and targeting cookies;
Functional cookies – these cookies are used to personalize the content by remembering login details, geolocation, etc.; they may be used to collect and process personal data;
Targeting and advertising cookies – these cookies are used to serve targeted advertisements on and off the web interface; they may collect and process personal data. We may also share information about your use of our website with our social media and advertising persons as well as with partners who help us analyze our statistics.
Services that may process your cookies:
The Kapka resort web interface uses Google Analytics and where applicable, other services provided by Google LLC (“Google”). It also uses Facebook Pixel provided by Facebook Inc. and Sklik provided by Seznam.cz, a.s. All of these services work with the information obtained through cookies.
We use Google Analytics to obtain statistical information about your use of the web interface. The cookies collected by this service expire after 2 years at the latest, depending on your browser settings or until you manually delete them.
We use Google Ads to identify you within Google’s advertising network and to retarget advertising (retargeting and remarketing). Depending on your browser settings, the cookies collected by this service last until you manually delete them or until they expire, which is after 18 months at the latest.
The Facebook Pixel service is used to identify you within the Facebook Inc. advertising network and to retarget advertising (retargeting and remarketing). Depending on your browser settings, the cookies collected by this service last until you manually delete them or until they expire, which is after 2 years at the latest.
The Sklik.cz service is used to identify you within the Seznam.cz advertising network and to retarget advertising (retargeting and remarketing). Depending on your browser settings, the cookies collected by this service last until you manually remove them or until they expire, which is after 18 months at the latest.
If you are interested in how Google uses the data it receives from us and how to modify or disable its processing, please click on the following link: https://policies.google.com/technologies/partner-sites?hl=cs
Learn how to set and, if necessary, refuse the processing of cookies
For instructions on how to properly set and manage the processing of cookies in your internet browser, please click here:
Google Chrome – https://support.google.com/accounts/answer/61416?hl=cs
Internet Explorer – https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies
Microsoft Edge – https://support.microsoft.com/cs-cz/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
Mozilla Firefox – https://support.mozilla.org/cs/kb/vymazani-cookies-dat-stranek?redirectlocale=cs&redirectslug=vymazani-cookies
Opera – https://help.opera.com/cs/latest/web-preferences/#cookies
Safari – https://support.apple.com/cs-cz/guide/safari/sfri11471/mac
This Notice comes into force on September 19, 2022.