The company Alžbětiny Lázně, as, ID number: 26342421, VAT number: CZ26342421, with registered office at Smetanovy sady 1145/1, Karlovy Vary, 360 01, registered in the commercial register of the Regional Court in Pilsen, section B, insert 968, or the legal successor, as the administrator of personal data, hereby informs about other facts regarding the manner and reasons for processing personal data by this company.
The company Alžbětiny Lázně, as processes personal data in accordance with EU law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation ("GDPR") and other legal regulations.
Personal data provided by the customer and data generated during the provision of services or obtained during communication with the customer in accordance with legal regulations are collected and processed automatically in electronic form or manually in written form only for a specified purpose, within a defined scope, for the duration of the contractual relationship and subsequently for a specified period of time after its end, while if it is not possible to clearly determine the termination of the contractual relationship, then the specified period for archiving will begin to run no earlier than one year following the day when the company last provided the customer with a service, all for the purpose of fulfilling the obligations from the provision contract services, the provision of services itself, compliance with legal obligations and the legitimate interest of the company and the customer. The basic processing purposes and scope of personal data are individually listed in by the customer's consent itself.
The information provided by the customer to a limited extent can be recorded in the customer's electronic or paper documentation (the so-called personal card), while the personal card can be kept in the customer's possession for the purpose of providing services, if this card is always presented by the customer to the company's employees before starting the service provided service and subsequently returned to the customer's possession after the end of the performance. The customer acknowledges that he is obliged to identify the card with his person immediately after returning it. At the same time, the customer was informed that the company is not responsible for the loss or destruction of the card in the customer's possession and associated personal data.
The granting of consent does not condition the continuation of the contractual relationship and the provision of services based on already concluded contracts. However, if the customer does not provide consent to the processing of personal data, or this will not be complete, the company will not be able to continue processing the personal data provided, communicate effectively with each other and alert customers to new products and services, or provide products and services at a discounted rate.
List of processors:
The company processes personal data itself as a controller through its authorized employees and further through processors authorized by the company on the basis of personal data processing contracts, if this is necessary to fulfill their work and contractual obligations. Personal data can thus be made available if necessary:
- external company providing server, web, cloud or IT services: Ondřej Vránek, ID number 87557738, VAT number: 7909011891
- external accountant Martina Šmudlová, ID: 49216503,
- Formirex s.r.o. ID 2280261
We do not disclose personal data to entities outside the territory of the Czech Republic or in third countries.
Rights of the customer as a data subject:
The customer has the right to access his personal data processed by the company (in particular, to request information about the scope, purpose of processing, or categories of data, processors, etc.)
- the right to correct, update or delete them, or restrict processing
- the right to withdraw consent to processing at any time, as well as the right to portability of said personal data
- the right to object to processing and the right to file a complaint with a supervisory authority.
The right to erasure represents the company's obligation to dispose of the personal data it processes about the customer, if the customer withdraws their consent and there is no longer any other legal reason for processing. The customer thus acknowledges that the company will not be able to fully comply with the deletion request if there is a legal reason for processing personal data, in particular the fulfillment of contractual obligations, legal obligations or prevailing legitimate interests of the company.
The customer can exercise all of his rights, regulated in the previous paragraphs, with the company in writing by registered letter sent to the company's address, or in electronic form at the e-mail address info@spa5.cz with the fact that the company is entitled to verify the applicant's identity exceptionally also by personal identification, taking into account the sensitivity of the requested information.
The company will provide the requested information without undue delay, otherwise within one month of receiving the request, if there is no reason to extend it, free of charge, or for a reasonable fee not exceeding the costs necessary to provide such information.
If the customer believes that his personal data is being processed without authorization or that the company has not complied with his request without authorization, he may file a complaint with Office for Personal Data Protection at the address www.uoou.cz. with headquarters Pplk. Sochova 27, 170 00 Prague 7, phone: 234 665 111