In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR”, this document provides key information regarding the personal data processed by FK Slavoj Vyšehrad s.r.o., Company ID No.: 49197045, with its registered office at Mikuláše z Husi 1709/1, Nusle (Prague 4), 140 00 Prague, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 85610/MSPH (“Hotel Magnetit” or “we”).

1. Scope of data processed:

1. A)Clients’ personal data: Based on your booking (or stay without a booking), we process the following personal data:

• Identification and contact details: First name, surname, permanent address, ID card number or similar document number, and, where applicable, email address and telephone number.
• Self-employed individuals: Name of the self-employed individual, registered office, company registration number, VAT number, VAT payer details.
• Business trips by non-business individuals: Details of the organisation that booked or paid for the stay.
• Details of the stay and services used: Information on the services used, payment and account (in the case of cashless payment, bank account number or payment card details).
• Foreign nationals: In addition to the above details, also date of birth, nationality, travel document number, visa number and permanent address abroad.
• Guests with parking: Vehicle registration number.

1. Purpose of data processing:

Compliance with legal obligations:The provision and processing of all the personal data listed above (except for email address, telephone number and information regarding membership of the loyalty programme) is necessary to fulfil our legal obligations. These obligations arise in particular from the Local Fees Act, the Act on the Residence of Foreigners in the Czech Republic, and accounting and tax regulations.

Contractual relationship:The processing of identification data, data on your stay and services provided, as well as payment information, is necessary for the performance of the contractual relationship. This applies to your stay, bookings and the provision of accommodation, catering and related services.

Consequences of not providing data:Without the provision of the above-mentioned data, we cannot provide accommodation services. We do not require any personal data for catering and other services.

Legitimate interest:We process your personal data (first name, surname, email address) on the basis of a legitimate interest for the purposes of direct marketing. You may opt out of receiving marketing communications.

Satisfaction surveys:We use the same data to send out satisfaction surveys following your stay at our hotels.

Other situations:In the event of disputes or non-payment for services, we process data to the extent necessary to protect our rights.

1. Source of personal data
   • We obtain the above data either directly from you in connection with negotiations to conclude a contract and the provision of accommodation and catering services.
   • If your booking of our services was arranged by another person (typically an employer in the case of business trips), we obtain your identification and contact details directly from that person.
   • For bookings made via booking portals, your identification and contact details are provided to us by the booking portal.
2. Retention period for personal data
   • We process your personal data for the duration of your stay at our hotel.
   • After your stay ends, we process only:
     • Data required under relevant legislation, and only for the period specified by such legislation (e.g. accounting and tax documents).
     • Your first name, surname, email address and details of your stay for the purposes of direct marketing by Hotel Magnetit (sending information about news and discounts on our services) and for sending satisfaction surveys. We process data for satisfaction surveys only until the surveys have been evaluated.
     • Data necessary for the purposes of existing or potential disputes, until a final decision on the dispute has been reached and the obligations arising from the decision have been fulfilled.
     • We process data relating to cookies and log data only for the period specified in the cookie information on the individual websites of hotels belonging to Hotel Magnetit.

1. To whom do we disclose or transfer your personal data?
   • Disclosure to third parties:
     • We disclose your personal data to public authorities where required by applicable legislation (e.g. data processed under the Act on Local Fees or the Act on the Residence of Foreign Nationals in the Czech Republic).
   • Processors:
     • We work with processors for support services such as sending marketing communications, improving communication and online bookings. They process data exclusively on our instructions.
     • We ensure the reliability and quality of processors’ services and the security of personal data.
     • We will be happy to provide you with a list of current processors upon request.
   • Transfer to third countries:
     • Our processors are based in the Czech Republic or another EU country.
     • The exception is certain satisfaction surveys and booking systems, which use processors based in the USA. These are reputable companies providing services to hotels worldwide.
     • Apart from these cases, we do not transfer personal data outside the EU.

1. Ensuring the protection of personal dataAll persons who come into contact with personal data are obliged to maintain confidentiality regarding this data and the security measures taken to protect it. This obligation continues even after the termination of their legal relationship with Hotel Magnetit or with the data processor.
2. Your rights under current legislationUnder current data protection legislation, you have the following rights:

• The right to access your personal data that we process. This includes the right to obtain information from Hotel Magnetit such as:
  • Confirmation as to whether Hotel Magnetit is processing your personal data.
  • Access to this data.
  • Information about the purposes of processing.
  • The categories of personal data concerned.
  • Information about the recipients or categories of recipients to whom the data will be disclosed.
  • The envisaged storage period or the criteria for determining it.
  • The existence of the right to request the rectification or erasure of personal data, to restrict its processing, or to object to the processing.
  • The right to lodge a complaint with a supervisory authority.
  • Information available regarding the source of the personal data, if it has not been obtained from you.
  • Information on whether automated decision-making, including profiling, takes place.
  • Appropriate safeguards when transferring personal data outside the EU.
  • A copy of your personal data, provided this does not adversely affect the rights and freedoms of others.
• The right to have your personal data rectified if it is incorrect, inaccurate or incomplete. Hotel Magnetit will rectify the data without undue delay, taking into account technical feasibility.
• The right to request the erasure of personal datain the cases specified by the GDPR, for example, if consent to processing is withdrawn, an objection to processing is raised, data is processed unlawfully, or if the personal data is no longer necessary for the purposes for which it was processed. However, such erasure is not possible if processing is necessary to comply with a legal obligation or in other cases provided for by the GDPR.
• The right to request the restriction of the processing of personaldata in the cases provided for by the GDPR, for example if you contest the accuracy of the personal data or object to the processing.
• Right to data portability:You may request that your personal data be transferred in a machine-readable format or that it be transferred to another controller.
• Right to object:You may object to the processing of personal data based on legitimate interests, including marketing.
• Withdrawal of consent:You may withdraw your consent to the processing of personal data at any time.
• Right not to be subject toautomateddecision-making:You have the right not to be subject to decisions based solely on automated processing.
• Complaint to the supervisory authority:You may lodge a complaint with the Office for Personal Data Protection. The supervisory authority is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague.
• Our contact details

If you have any queries or concerns regarding the processing of your personal data, you may contact us at any time in writing at the following address: FK Slavoj Vyšehrad s.r.o., Company ID No.: 49197045, with its registered office at Mikuláše z Husi 1709/1, Nusle (Prague 4), 140 00 Prague, or by email to our Data Protection Officer atinfo@magnetithotel.cz.