Privacy Policy
Bellevue Hotel Services, s.r.o., IČO: 09308644, with registered office at Švédská 635/8, 150 00 Prague 5, contact e-mail: jrihova@bellevuehotels.cz (hereinafter collectively referred to as the "Controller"), hereby informs all natural persons whose personal data may be processed by the Controller (hereinafter referred to as the "Person") of the facts pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").
Scope and purpose of the processing of personal data
(i) The Controller processes the personal data of all natural persons who have expressed interest in making a reservation through the "Reservation" form on the Controller's website https://www.restauracenakarlove.cz/rezervace, in the following scope: name, surname, e-mail address, telephone number of guests, date and time of the reservation and, if applicable, a note or additional information (if provided).
(ii) The Controller processes the personal data of all individuals who have expressed an interest in purchasing a gift certificate to Restaurant Na Karlově through the form provided on the Controller's website https://www.restauracenakarlove.cz/gift-certificates, in the following scope: first name, last name, email address, telephone number, value of the gift certificate, name of the gift recipient (if indicated), number of persons (if indicated) and a note (if indicated). The purpose of such processing is for the Administrator to contact the Individual in order to negotiate the terms and conditions of the purchase of the gift certificate (in particular the method of payment and delivery).
(iii) The Controller processes the personal data of all individuals who have purchased a gift certificate to Restaurant Na Karlově from the Controller, including : name, surname, email address, telephone number, value of the gift certificate, name of the recipient (if specified), number of persons (if specified) and remark (if specified), method of payment and delivery of the certificate. The purpose of such processing is to issue the gift certificate and to provide the services and goods offered at Restaurant Na Karlovu in the value of the gift certificate issued.
(iv) The Administrator also processes the personal data of Persons who have visited the Administrator's website https://www.restauracenakarlove.cz/, to the extent of: cookies. The purpose of the processing is the functioning of the website (so-called "essential cookies"), advertising, analysis and customization of content and offers (so-called "advertising, analytical and preferential cookies"). Information regarding the storage or processing of cookies, including information on their settings, is available on a separate page entitled Cookie Policy.
Legal basis and duration of processing of personal data
The personal data referred to above under (i), (ii) and (iv) in the case of advertising, analytical and preference cookies) are processed on the legal basis of the consent of the Person, which the Person has given to the Administrator by (i) submitting a request to the Administrator to make a reservation using the "Booking" form, by (ii) expressing an interest in purchasing a gift certificate or by (iv) allowing the collection of advertising, analytical and preference cookies in the cookie bar.
The legal basis for the processing of personal data in the case of the purchase of a gift certificate for the provision of services and goods offered at Na Karlově Restaurant in the value of the gift certificate issued under (iii) above is the fulfilment of the contract or contractual obligations of the Controller, so that the Controller is able to fulfil the obligations arising for it from the issue of the gift certificate.
All of the above personal data, i.e. the personal data referred to under (i) - (iv) above, are further processed on the legal basis of the legitimate interest of the Controller, which consists in the protection of its legitimate interests and rights, i.e. also for cases of exercising its rights or defending itself in the event of disputes, or to ensure the basic functions of the Controller's website (in the case of necessary cookies).
In the case of processing based on the consent of the Person, the Personal Data will be processed for the period necessary for (i) the creation of the reservation, i.e. until the time indicated as the requested time of the reservation, then (ii) until the Person is contacted by the Administrator to negotiate the terms of the purchase of the gift certificate, but for a maximum of 14 days, and (iv) in the case of advertising, analytical and preference cookies, for the period of validity according to the settings of the cookie, but always no longer than until the withdrawal of the consent of the Person.
A Person has the right to withdraw his or her consent at any time by submitting it in writing to the registered office of the Administrator (any of them) or electronically by email: jrihova@bellevuehotels.cz. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.
Personal data processed on the legal basis of the performance of a contract or contractual obligations of the Administrator (i.e. in the case of (iii) the issuance of a gift certificate to the Na Karlova Restaurant) are processed for the duration of the contract with the Person or the Administrator's obligation to provide goods and/or services to the Person in the Na Karlova Restaurant, i.e. until the gift certificate is redeemed or the gift certificate expires.
In the case of processing of personal data on the basis of the legitimate interest of the Administrator, personal data are processed for the period necessary to protect the legitimate interests and rights of the Administrator, i.e. for 4 years from the end of processing on the basis of other legal bases of processing, or for 4 years from the visit to the Administrator's website (in the case of necessary cookies).
The provision of personal data under (i), (ii) and (iv) above is neither a legal nor a contractual requirement, nor a requirement that is necessary for the conclusion of any contract, and the Person is under no obligation to provide such personal data. However, if the Person does not provide such personal data, it will not be possible (i) to make a reservation, (ii) to contact the Person to purchase a gift voucher and/or (iv) to visit and browse the Controller's website (in the case of cookies necessary for the functioning of the website) or to offer the Person personalized offers or improve the performance and functionality of the website (in the case of advertising, analytics and preference cookies). The provision of personal data under (iii) is a contractual requirement necessary to enter into a contract with the Controller for the purchase of a gift certificate and without the provision of personal data, the gift certificate cannot be purchased.
Categories of recipients of personal data
Personal data may be passed on to processors - business partners of the Administrator involved in the operation of the website, as well as to the Administrator's collaborators providing preparation and sending of newsletters or arranging weddings/company events.
If necessary, the Controller may also transfer the personal data of Persons to its legal, accounting and tax advisors.
Rights of Individuals in relation to the processing of personal data
Persons whose personal data are processed are entitled to all the rights provided for the protection of personal data under applicable and effective legislation.
A person has the right to:
Request information from the Company about the processing of personal data. This means any information about the processing of his/her data, e.g. information about the purpose of the processing, the identity of the controller, his/her legitimate interests, the recipients of the personal data.
to request access to personal data, i.e. to obtain information (confirmation) from the controller as to whether or not his or her personal data is being processed and, if it is being processed, the data subject has the right to obtain that personal data.
to request an explanation, restriction of processing, completion, rectification and erasure of personal data where the data is inaccurate or incomplete.
to the portability of the personal data, i.e. the right to obtain the data from the Data Controller in a structured, commonly used and machine-readable format, and the right to transmit the data to another controller, or to request that the Data Controller transmit the data directly to another controller.
The right to object to the processing of personal data on the basis of the legitimate interest of the Controller. Unless the Controller demonstrates compelling legitimate grounds for processing which override the interests or rights and freedoms of the Individual, or for the establishment, exercise or defence of legal claims, the Controller is not entitled to further process the data.
lodge a complaint with the supervisory authority, which is the Data Protection Authority.
The Person may contact the Controller in connection with the exercise of his/her rights in writing at the address of the registered office or by electronic communication at jrihova@bellevuehotels.cz.
In the event of unlawful processing of his/her personal data, the Person is entitled to lodge a complaint against such action by the Controller with the Office for Personal Data Protection (www.uoou.cz) or any other competent public authority.
Information about automated decision-making, including profiling
The processing of personal data does not involve automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.