Personal data processing principles
Effective date: 01.04.2024
The company Korunní Praha s.r.o., ID No.: 07437676, with registered office at Písecká 486/14, Vinohrady, 130 00 Prague 3, registered in the Commercial Register kept at the Municipal Court in Prague, file No.: C 300999 (hereinafter referred to as "the controller", "the company" or "we") is concerned about the protection of your personal data, so please read how the company processes your personal data and how it handles them.
The Company processes personal data in accordance with relevant legislation, such as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 110/2019 on the processing of personal data.
Table of Content
Who is affected by this privacy policy?
What personal data do we process about you and why do we process it?
Do you have to provide us with personal data?
Do you always have to give us consent to process your personal data?
How long will we keep your personal data?
Do we pass on your personal data to any other parties?
What rights do you have in relation to the processing of your personal data?
Where can you find out more about the processing of personal data and your rights?
Who is affected by this privacy policy?
This company data processing policy (the "Policy") applies to the processing of personal data of our guests and business partners. In addition, this Policy applies to you when you visit our website www.coru-house.cz (the "Website") or contact us via email.
What personal data do we process and why do we process it?We are aware that one of the rules of the relevant data protection legislation is proportionality, which is why we only process your personal data to the extent necessary for the purpose in question.
Scope of the personal data processed
If you are our guest, we process your following personal data:
Identifying personal data such as academic title, first name, surname, date of birth, birth number, ID number, VAT number, address data, such as permanent address, mailing address, registered office, ID card, passport or other identification document number,contact details such as e-mail address and telephone number, the data necessary to make a payment via a payment terminal and/or payment gateway,the bank account number and the name of the holder,the amount of the accommodation price, including any charges to the booking portal provider,digital signature,details of the guests' stay, in particular the duration of the stay and the extent of any additional services ordered (cleaning, dry cleaning, etc.),communications related to the reservation and the services provided.
Payments can be made through a payment gateway or a payment terminal, both provided by Československá obchodní banka, a. s., ID No.: 00001350. In this context, we process the data necessary to make the payment.
In the case of accommodation of foreigners, we also process data on nationality, travel document number, visa number and permanent residence abroad in accordance with the relevant legal regulations.
In connection with the placement of security cameras, data on the physical form on the camera footage may also be processed.
We collect all personal data directly from our guests, except for security camera footage and bookings made through booking portals.
If you are our business partner, we process your following personal data:
identifying personal data such as, first name, last name, ID number, VAT number,address data, such as correspondence address, registered office, contact details such as e-mail address and telephone number,bank account number, identification of invoices issued and received.
If you have sent us an enquiry via e-mail on our website, we process your personal data in the scope of name, surname, e-mail address and telephone number and we also process communication regarding the sent enquiry.
When you visit our website, we also store various cookies, namely necessary cookies for the operation of the website, statistical cookies to help us map your behaviour on the website and then improve the website and your experience, and marketing cookies so that we can subsequently show you relevant advertising. For more information about cookies, including how to change your settings at any time, please visit: www.coru-house.com
Purposes and legal basis for processing
We process your personal data for several reasons, which we describe below. However, each of these reasons must still be supported by a legal basis for processing in order for the processing of personal data by the company to be lawful and in accordance with the relevant legislation.
Below we have prepared an overview of the so-called legal bases and purposes, i.e. the reasons why we process personal data.
the preparation, performance, registration and conclusion of a reservation contract and the provision of accommodation services, based on the legal title of the performance of the contract or the taking of measures prior to the conclusion of such a contract,tax and accounting purposes, in particular the issue of invoices, the processing of payments for the provision of accommodation services, bookkeeping, on the basis of the legal title of fulfilling the legal obligations to which the company is subject as a data controller,fulfilling the obligations laid down by law in connection with the provision of accommodation services, such as keeping a house register, a registration book and reporting the stay of guests to the relevant municipality or the stay of foreigners to the Police of the Czech Republic, fulfilling other public law obligations that apply to the company, based on the legal title of fulfilling the legal obligations that apply to the company as a personal data controller,the management of all communications related to the booking and provision of accommodation services, the performance of obligations under such contracts, based on the legal title of the performance of the contract or the adoption of measures prior to the conclusion of such a contract,
recovery of debts if you have not paid us what you should have paid under the contracts you have entered into with us, or protection of our rights and enforcement of our rights in any litigation, based on our legitimate interest, sending offers to our guests for advantageous stays or services related to their stay, based on our legitimate interest in promoting the accommodation and services provided,the protection of our property by means of security cameras, on the basis of our legitimate interest.
If you are our guest, we process your personal data for the purposes of:
If you are our business partner, we process your personal data for the purposes of:
the preparation, performance, registration and conclusion of a contract, on the basis of the legal title of the performance of the contract or the taking of measures prior to the conclusion of such a contract,
tax and accounting purposes, in particular the issuing of invoices, processing of payments, bookkeeping, on the basis of the legal title of the performance of legal obligations to which the company is subject as a data controller,
the performance of public law obligations to which the company is subject, based on the legal title of the performance of legal obligations to which the company is subject as a data controller,
the recovery of debts if you have not paid us what you should have paid under the contracts you have entered into with us, or the protection of our rights and the enforcement of our rights in any litigation, based on the legal title of our legitimate interest.
If you have contacted us by sending us an e-mail, we process your personal data for the purposes of processing and sending you a reply to your enquiry, based on the legal title of the performance of the contract and the implementation of the measures taken prior to the conclusion of the contract at your request. This is a legal concept, such a legal basis does not mean that we enter into a contract with you, when you contact us, it is clear to us that you are only interested in something or want to discuss something.If you have sent us an enquiry via email, we process your personal data for the purpose of processing and sending you an offer related to your enquiry, based on the legal title of the performance of the contract and the implementation of the measures taken before the conclusion of the contract at your request.
We do not use your personal data for decision-making based on automated processing or profiling.
Do you have to provide us with personal data?
If we are to provide you with accommodation services, including the provision of all related services, we will need your personal data, unfortunately we cannot do without it. The provision of personal data is therefore a contractual requirement and we cannot enter into the relevant contracts with you without it.
In case you want to enter into a contract with us as our future business partner, we still need your personal data in order to cooperate with you and fulfil our obligations under the contract. The provision of your personal data is therefore also a contractual requirement in this case and we cannot conclude a contract with you without it.
Also, when contacting us by e-mail with an enquiry or question, you must provide us with personal data so that we can contact you back on the basis of the enquiry or question sent, the provision of personal data is thus a contractual requirement.
Do you always have to give us consent to process your personal data?
In some cases, we may need your consent to process your personal data. However, processing is not always based on consent and therefore we will only require your consent where it is necessary for us to process your personal data. We do not currently require your consent for any processing, but if we did, we would always tell you how to withdraw consent and provide you with further information regarding such processing.
How long will we keep your personal data?
If you have booked accommodation, have already stayed with us or we have entered into a contract together as business partners, we need to keep your personal data not only for the duration of this contract, but also after we have terminated our contract (we have ended our cooperation, the accommodation has been terminated and you have left). This is for example due to withdrawal from the contract, claims, claiming damages, therefore we keep your personal data for 6 years from the date of termination of the contract, in the case of business partners 10 years from the date of termination of the contract (sometimes it may happen that we withdraw from the contract if you do not fulfill your obligations under the contract or we agree on a different termination of our cooperation and thus the contract). Therefore, we cannot delete your personal data immediately after the conclusion of the contract or your departure.
We are also obliged by the relevant legislation concerning the accommodation of foreigners or persons for the purpose of holiday accommodation to keep this data for a period of 6 years.
We are also obliged under the relevant legislation to keep, for example, tax documents for 10 years from the end of the tax year in which the transaction took place, including your personal data contained therein.
We keep personal data from enquiry emails and enquiries for 1 year after the enquiry was sent, unless we have established a relationship with you and you have become our guest or business partner.
We always keep personal data for the time necessary and proportionate to the purpose, i.e. the reason why we process your personal data. The retention period is determined in particular by the following logic:
For the duration of the contractual obligation with you,
for as long as necessary to protect the company's rights,
for the duration of the company's legitimate interests, provided that such period is appropriate for the purpose of the processing,
for the period specified by law,
for the period necessary for the establishment, exercise or defence of legal claims.
Do we pass on your personal data to any other parties?Only authorised employees and associates within the company have access to personal data. In order to ensure the operation of our company, we also pass on your personal data to an external accountant to the extent necessary for her activities, and some personal data is also accessible to our IT specialist, tax advisor, legal advisor and possibly to construction contractors and persons cooperating with us in the construction of the subject property.
In connection with the booking of accommodation, we also use the booking portals Airbnb (Airbnb Ireland UC) and Booking (Booking.com B.V.) through which we offer our services and thus have access to your personal data. We also use the Previo platform (reception and booking system) operated by PREVIO s.r.o., based at Kolbenova 882/5a, 190 00 Prague 9, ID No.: 25975234. In some cases, for example when booking through Airbnb, personal data may be transferred outside the European Economic Area, while ensuring an adequate standard of data protection security.
We may also pass on your personal data to service providers when ordering specific additional services such as dry cleaning, airport transfers, room repairs during your stay, or other extra services arranged, but we will only pass on personal data to the extent really necessary to provide the service to your satisfaction.
We may also pass on your personal data to the relevant governmental authorities, public authorities or banking institutions, in particular to the relevant municipality and the Police of the Czech Republic in connection with the obligations imposed on accommodation service providers. We may also transfer personal data to our legal representatives and other persons for the purpose of protecting our rights. All such recipients of your personal data are obliged to protect your personal data in the same way as we do, i.e. in accordance with applicable law. If these recipients process personal data as processors, we have entered into appropriate contracts with them.
What rights do you have in relation to the processing of personal data?
Below you will find a list of the rights you have in relation to the processing of personal data.
You have the possibility to ask us to tell you what personal data we process and you may also be given access to this data, i.e. a copy of the personal data we process.
You can also ask us to correct inaccurate or incomplete personal data.
You can also ask us to delete your personal data, under certain conditions we are then obliged to delete this personal data, but not always, in some cases we may continue to retain the personal data.
You also have the right to request a restriction of processing under certain conditions, for example if you dispute the accuracy of the personal data and we verify its accuracy.
You also have the so-called right to data portability, i.e. under certain conditions you have the right to have us provide you with data in a structured, commonly used and machine-readable format.
Last but not least, you have the right to withdraw your consent to the processing of your personal data at any time without giving any reason.
If you suspect that we are violating the law or other applicable legislation in processing your personal data, you have the right to file a complaint with the Data Protection Authority and the right to effective judicial protection in this area.
Other rights set out in the relevant legislation.
Where can you find out more about the processing of personal data and your rights?
You can always find out up-to-date information about the processing of your personal data through this policy. The first page shows the effective date and if we update the information in this policy, we will send you the updated version.
If the above is not sufficient for you and you have further questions about the protection of your personal data, we will be happy to answer them. You may contact the Company at the above headquarters address or via email at info@coru-house.com.
8">