Source: https://www.petithotelprague.com/privacy/
Timestamp: 2019-04-22 00:06:30+00:00

Document:
In particular, personal data provided voluntarily by the parties concerned by the processing shall be collected and processed, including by electronic means directly and/or through delegated third parties (company for the e-mail service, the company hosting the website) for the following purposes: checking the availability of the requested room against information in the booking form; to make and confirm the reservation by providing personal identification data and credit card data as a guarantee; activating eventual promotional and commercial activities pursuant to Art. 130 paragraph 4 of the Legislative Decree 196/2003; to comply with current administrative, accounting and tax obligations, as well as with laws and regulations; providing responses concerning our hotel services (room availability, prices, conference rooms, catering, etc.); registering for the newsletter to receive periodic commercial or promotional communications; assessing CVs that may be received for compatibility with any internal requirements; for action by the Controller in court or in the preliminary stages leading to possible legal action against abuses arising from the illicit use of the website or related services by the User; statistical purposes in anonymous form (to assess the number of visits, etc.).
Personal data for the reservations shall be processed in electronic and paper format for the sole purpose of guaranteeing the rooms are booked in the conditions agreed. The booking platform is owned by FastBooking, the external processor, which will communicate the data of the party concerned to the hotel for the normal activities related to managing the accommodation The data shall be recorded in our electronic databases accessible to staff properly instructed and trained in personal data security and confidentiality. To confirm the booking a credit card given as firm guarantee must be provided, it is understood that the customer can choose to pay in cash at the end of the stay.
This Statement prepared in accordance with Art. 13 of Legislative Decree no. 196/2003 can be used by the company MCV Hotels Group S.r.o including for eventual advertisements on sites or portals not directly managed by the company MCV Hotels Group S.r.o to recruit staff. The Company shall process the curricula received by e-mail or through third-party recruiting companies (publications on portals, etc.) to evaluate the potential applications inside the company or that might be made in the near future.
The processing occurs electronically excepting curricula received by post. The curricula considered “interesting” shall be stored at the company headquarters for a period not exceeding one year and shall be processed while fully complying with the minimum security measures referred to in Art. 33, 34 and 35 of Legislative Decree no. 196/2003. The curricula deemed irrelevant, as well as those retained over 12 months, shall be trashed.
The curricula shall be retained at the headquarters of the company and not disclosed to unauthorized third parties. The same may be assessed by the company’s employees or collaborators appointed to be responsible for the processing (Art. 30 of Legislative Decree no. 196/2003).
However, the applicants are still invited to respect the following rules in transmitting the curricula in electronic format: Fill in your own CV in European format; transmit the curriculum in pdf format; avoid putting sensitive data (relating, in particular, to state of health, religious, philosophical, or political beliefs) not relevant to the job offer in the curriculum; give consent to the processing. The company reserves the right to trash the curricula that do not meet the above requirements.
The Company shall provide appropriate information pursuant to Art. 13 of Legislative Decree no. 196/2003 during any interviews with the applicants. The purpose of the processing relating to managing the curricula shall concern activities closely relating to the appraisal, recruitment, or selection of personnel, for the purposes of collaboration, hiring on a temporary or permanent basis, internships, or rather to enable the successful applicant to prepare his degree thesis at our headquarters.
The society MCV Hotels Group S.r.o reserves the option of sending promotional and commercial e-mails in accordance with Art. 130 paragraph 4 of Legislative Decree no. 196/2003: “if in the context of a sale of goods or of a service the Data Controller uses the customer’s e-mail address, the same address may be used for sending commercial and promotional material without seeking prior consent, provided the customer is duly informed at every mailing of promotional and marketing material and that he is able easily and freely to exercise the right to discontinue this processing.” In that case, having received the first promotional message the data subject shall be able to cancel his subscription from the hotel newsletter with a simple click. Sending these messages is entrusted to a third-party provider of email services.
Personal data collected from the website in question can be treated only by persons officially appointed and trained in the field of personal data privacy and security. The contexts for communicating data subjects’ personal data may relate to: Organizations or Public Offices on the basis of legal and / or contractual obligations; FastBooking companies; external processors as companies or consultants who carry out activities for the proper functioning of the site and management of the information acquired through the same on the controller’s behalf; the Postal Police for determining whether any activities may be harmful to the company website; to employees or service-providing companies when the communication is necessary for the person concerned to use the hotel services. Personal data shall not be disclosed.
During their normal operation software applications designed to run this website acquire some personal data whose transmission is implicit in the normal IP protocol of Internet communication. While it is not collected to be associated directly with the data subjects, by its very nature through processing and subsequent correlation with data held by third parties (providers) this information could allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, the date and time of the request, the URI (Uniform Resource Identifier) of requested resources, the size of the files obtained in reply from the server, the digital code indicating the status of the response from the server (ok, error, etc..) and other parameters regarding the operating system and computer environment. This data is used only to obtain anonymous statistical information about website usage and to check the site is functioning correctly; they are deleted immediately after processing.
The personal data are processed in paper format and/or by automated tools for the time strictly necessary for the purpose for which they have been collected. In order to prevent data loss, abuse, incorrect use, and unauthorized access specific security measures are observed.
The data subjects have the right, at any time, to obtain confirmation of the existence or non-existence of the data concerned and to be informed of its content and origin, verify its accuracy or request it to be integrated, updated, or corrected (Art. 7 of Legislative Decree no. 196/2003). Pursuant to the same article, the data subjects have the right to request the deletion, transformation into anonymous form, or blocking of data processed in violation of the law, and in any event, to refuse its processing on legitimate grounds. Requests should be addressed to the Company MCV Hotels Group S.r.o Controller of the personal data. Below are the data subject’s rights in full. Art. 7 – Right to access personal data and other rights The data subject has the right to obtain confirmation of the existence or not of any personal data concerning him, even though not yet recorded, and to have them communicated in an intelligible form. 2. The data subject has the right to obtain the following information: a) the source of the personal details; b) the purposes and procedures of the processing; c) the logic applied in the case of processing with electronic instruments; d) the identity details of the controller, processors, and designated representative within the meaning of Article 5, paragraph 2; e) of the parties or categories of parties to whom the personal data may be communicated, or who can come to know them as appointed representatives in the territory of the State or as managers or employees. 3. The data subject has the right to obtain: a) the updating, editing or when he has an interest, the integration of the data; b) the deletion, anonymisation, or blocking of data processed unlawfully, including data that does not need to be retained for the purposes for which it has been collected or subsequently processed; c) certification that the operations under letters a) and b) have been notified, including as concerns their content, to the persons to whom the data have been communicated or disseminated, except where such performance proves to be impossible or entails an employment of resources obviously out of all proportion to the right protected. The data subject has the right to object, in whole or in part: a) on legitimate grounds to the processing of personal data concerning him, even if pertinent for the purposes for which they have been collected ; b) to the processing of personal data concerning him for the purposes of sending advertising material, direct sales, for carrying out market research or commercial communications.

References: Art. 130
 Art. 13
 Art. 33
 Art. 13
 Art. 130
 Art. 7