Privacy Policy

 

On this website, you can find all information relating to the protection of personal data in the company Benet Holding s.r.o.

This makes it possible for you to become familiar with the way we collect, process, use, and protect your personal data. At the same time, you will learn about how to proceed if you have any questions or claim your rights.

The company Benet Holding s.r.o. runs the recreational complex on the principle of an accommodation facility. That is why we consider the protection of privacy and of personal data while providing our services as our primary duty. In this document, you can find an overview of the main principles of the processing and protection of personal data within the company Benet Holding s.r.o.

1. Who processes my personal data?

We are the company Benet Holding s.r.o., Company Number: 49550489, having its registered office at: Do Čertous 2622/14, Horní Počernice, CZ-193 00 Prague 9, registered in the Commercial Register maintained by the Municipal Court in Prague under the reference number C 23623 (hereinafter referred to as “Benet Holding”), phone number: +420 722 980 760, E-mail: info@vilacapek.cz. Within the scope of our activities, we process your personal data, thus becoming a controller of your personal data. This applies even if you have provided some of your personal data even before concluding the contract (you are interested in our services, have sent an order, etc.).

2. Why and on what legal basis do we process your personal data?

We process your personal data particularly within the process of entering into, or performance of, a contract. Thus, the legal basis is conclusion and performance of a contract. We process personal data on this legal basis for the following purposes (when it is appropriate, we mention the scope of processing in parentheses):

  • Making a booking of accommodation, catering, sporting and leisure, and the other supplementary services (identification data and contact details, data on the nature of the required service, the beginning and end of provision of services, special demands and preferences);
  • Provision of accommodation or other services including keeping a record of guests (identification data and contact details, data on the nature of the required service);
  • Confirmation of legal representative’s liability for the purposes of the use of services by children (the child’s first name and surname, date of birth, the child’s legal representative’s name, and service specification).

Beyond the terms of contract, we must fulfil our statutory obligations, which consist especially of:

  • Running a register book in accordance with the local charge act (encompassing the first name, surname, domicile address or permanent address abroad, the identity card number or passport number, duration of accommodation, purpose of stay);
  • For foreigners, running a house register pursuant to Act No. 326/1999 Coll., on the Residence of Aliens in the Territory of the Czech Republic (encompassing a foreigner’s first name and surname, date of birth, nationality, permanent address abroad, passport number or visa number, the beginning and end of accommodation);
  • Performance of the obligations arising from tax regulations;
  • Performance of the obligations arising from the accounting act;
  • Performance of the duty to provide coordination to public authorities within the scope and on the terms set out in legislation;
  • Handling complaints and requirements, and complaints procedure.

We cannot avoid processing based on our legitimate interest (you are entitled to object to such processing):

  • We use a camera system (camera recordings) for the purpose of protection of the Benet Holding company’s property and property of our customers.
  • In case of delayed payment for our services, we are entitled to ask you for payment, or to exact our claims if applicable.
  • We also process some data for our statistical purposes.

To the extent specified above, submission of the personal data is obligatory; without them, we would not be able to enter into a contract with you, or to render the required services. We do not need your consent in order to process these personal data. Nevertheless, you can object to the processing based on our legitimate interest (for more detail see Clause 7.7).

We process further personal data on the basis of your consent based on which:

  • We can approach you offering you our services and informing you about regular and special events held by the company Benet Holding even through commercial communication (first name and surname, date of birth, address, phone number, e-mail address, your preferences, and the types of services used so far).

3. What personal data do we process while providing services?

Within the scope of our activities, we process the following categories of personal data:

  • Identification data: First name; surname; the address of your domicile or permanent residence abroad; date of birth; identity card No. or passport number; or visa number as the case may be; nationality; signature; in the event of a natural person who is a sole trader, further a business firm, place of business, company registration number, and VAT registration number.
  • Contact details: Above all, the address where you could be contacted, telephone number, and e-mail address.
  • Data on the nature and parameters of the services rendered: Above all, duration of accommodation (the beginning and end of accommodation), purpose of stay, data on the services required and used, and special demands and preferences.
  • Data that make it possible for us to account for the services rendered: Above all, identification of a payer of an amount charged for, the customer address, bank account number, payment card number, method of payment or currency in which you want to pay, and information on payment.
  • Data that make it possible for us to take care of our customers: Our mutual communication (verbal, written or electronic) and personal data resulting from this communication.
  • Data we process on the basis of your consent: Based on the given consent to marketing approaches, we process the first name and surname, date of birth, address, telephone number, e-mail address, preferences and the type of services used so far.
  • Camera recordings: We make security camera footage in order to ensure security of our clients and employees as well as of the property of both the company Benet Holding and our clients.

 

4. For how long do we store the personal data?

While providing accommodation services, we are obliged, pursuant to Act No. 565/1990 Coll., on local fees, as amended, to process and keep personal data for the purposes of running the so-called register book, encompassing the hotel guest’s first name and surname, domicile address or permanent place of residence abroad, identity card number or passport number, duration of accommodation, purpose of stay, all of which for a period of 6 (six) years after making the last entry in this book.

When providing accommodation services to foreigners, we are obliged, under Act No. 326/1999 Coll., on the Residence of Aliens in the Territory of the Czech Republic, to keep personal data in the so-called house register, encompassing the foreigner’s first name a surname, date of birth, nationality, permanent place of residence abroad, passport or visa number, the beginning and end of accommodation, all of which for a period of 6 (six) years after making the last entry in this book.

Pursuant to the value added tax act, invoices issued by the company Benet Holding are archived for a period of 10 (ten) years after invoicing. We are obliged to prove a legal ground for invoicing, which is why we file relevant related documents for a period of 10 (ten) years after completion.

In our client database, we process our customers’ identification data and contact details, data on the services rendered and mutual communication data throughout the duration of providing services, and further for 10 (ten) years after the termination of the last contract between the company Benet Holding and this customer.

Camera footage is processed for 10 (ten) days after the date of recording. If any incident is captured, the appropriate footage is kept for a necessary period of time.

We keep the personal data processed on the basis of given consent for a period for which the consent has been given, or until this consent is cancelled, unless we have another legal basis for processing the data.

 

5. To whom do we transfer the personal data?

We carefully choose partners whom we disclose your personal data to, and who are capable of ensuring appropriate security of the personal data using technical or organisational measures in order to prevent unauthorized or accidental access or another abuse. The company Benet Holding transfers personal data to the following categories of recipients:

  • Persons who ensure operation of some services provided by us;
  • Persons who provide us with services in the area of IT support and security;
  • Persons who provide us with services in the area of security and protection of property;
  • Persons who provide us with services in the area of bookkeeping and tax consultancy;
  • Payment gateway providers (credit card providers)
  • Marketing support service providers and advertising campaign managers;
  • Legal advisers for debt recovery.

The processors are companies based both on the territory of the Czech Republic and a European Union member state or of the so-called safe countries. In the non-EU countries, personal data are always transferred and processed in accordance with the current legislation.

Furthermore, we are obliged to transfer some of your personal data to public authorities, and that only within the scope and on the terms set out in legislation.

6. What do we do to ensure the security of your personal data?

We have taken all the possible technical and organisational measures necessary for ensuring sufficient protection of personal data processed taking into account the nature, extent, context and purposes of the processing as well as for the risk to the rights and freedoms of natural persons, of varying likelihood and severity.

We apply a system of control and checking procedures in order to prevent unauthorized or accidental access to data, a change, destruction or loss of the data, unauthorised transfer, another unauthorised processing as well as another abuse.

Any and all persons who come into contact with our customers’ or potential customers’ personal data when performing their professional or contracting obligations, are bound by statutory or contractual duty of confidentiality.

However, we point out that it is impossible to guarantee 100% safety for any data transmission through the Internet or data storage technologies.

 

7. What are your rights with regard to the processing of your personal data?

With regard to the processing of your personal data, you have all rights under the applicable law (since 25 May 2018, it has been, above all, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (or the General Data Protection Regulation, GDPR). In accordance with this regulation, you shall have the following rights:

  • right to withdraw your consent to the processing at any time;
  • right of access to personal data;
  • right to rectification and to have incomplete personal data completed;
  • right to erasure;
  • right to restrict the processing of personal data;
  • right to object;
  • right not to be subject to a decision based solely on automated processing;
  • right to data portability;
  • right to lodge a complaint.

7.1. The right to withdraw consent

At any time, you can withdraw the consent you had given, and that either using the corresponding link in every commercial communication sent, or sending a request to the following e-mail address: info@vilacapek.cz. Withdrawal of the consent is free of charge.

Withdrawing the consent does not alter the fact that the personal data provided had been processed legitimately and under the legislation until the consent was cancelled. Withdrawal of the consent has no effect on the processing of personal data, which we process based on legal basis other than the consent (this means that we will continue to process your personal data if the processing is necessary for example for fulfilment of a contract or fulfilment of a legal duty).

7.2. The right of access

When asked, we will tell you whether or not we process any personal data concerning you. And, where that is the case, we shall particularly let you know the purpose of such processing, the categories of personal data concerned, categories of recipients or the envisaged period for which the personal data will be stored. Provided that the rights and freedoms of others are not adversely affected, we shall provide a copy of personal data being processed and concerning you free of charge. However, we can charge a reasonable fee corresponding to our administration expenses for more copies.

The right to obtain confirmation of the processing of personal data and other information as part of the right of access can be exercised at the following address: info@vilacapek.cz.

We be to warn you that in case of the exercise of the right of access to personal data, we can require that you should prove your identity in a proper way to verify your identity. This is a preventive safety measure so that we may prevent unauthorised persons from accessing to your personal data.

7.3. The right to rectification and to have incomplete personal data completed

You are entitled to ask for rectification of inaccurate personal data concerning you. Furthermore, you have the right to submit supplementary personal data if necessary.

You can send your request to for rectification or completion of your personal data to the following address: info@vilacapek.cz.

7.4. The right to erasure

Our systems are set to ensure automatic erasure or anonymisation of personal data we do not need any more for the purpose for which they have been processed.

However, if you assume that the data have not been erased regardless, or that we process some of your personal data without authorisation, you can approach us with a request for deleting your personal data. We are not obliged to delete your personal data for example if we need them for the establishment, exercise or defence of our legal claims, or if the processing of such data is under the legislation. There are more such exceptions, and all of them can be found in paragraph 3 of Article 17, GDPR.

You can exercise the right to erasure at the following address: info@vilacapek.cz.

7.5. The right to restrict the processing of personal data

Upon your request, we shall restrict the processing of personal data if:

 

  • You assume that the personal data concerning you and processed by us are inaccurate. Then we shall restrict such processing until we verify the accuracy of the personal data;
  • The processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead;
  • We no longer need the personal data for our purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
  • For personal reasons (i.e., on grounds relating to your particular situation), you have objected to processing of personal data that are based on our legitimate interest. Then we are obliged to restrict such processing of personal data pending the verification whether our legitimate interest overrides your personal reasons (i.e., on grounds relating to your particular situation).

In case of restriction of processing, we are only entitled to:

  • store these personal data;
  • further process them with your consent;
  • further process them for the establishment, exercise or defence of legal claims;
  • further process them for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

It is possible to exercise the right to restrict the processing of personal data at the following email address: info@vilacapek.cz.

7.6 The right not to be subject to a decision based solely on automated processing

You have the right not to be subject to a decision based solely on automated processing, which produces legal effects concerning you or significantly affects you.

7.7 What does the right to object to processing mean?

If the processing of personal data is necessary for the purposes of our legitimate interest in a particular case (that is, not processed on the basis of a consent, for the performance of a contract, etc.), you are entitled to object to such processing on grounds relating to your particular situation. If we do not demonstrate that our legitimate interest in the particular processing overrides your interests or rights and freedoms, we shall stop such processing.

You are also entitled to object to your personal data being processed for the purposes of direct marketing. In such a case, we shall no longer process your personal data for these purposes.

You can make an objection in the above-mentioned sense at the following email address: info@vilacapek.cz.

7.8. The right to data portability

You have the right to personal data portability. Where processing is based on your consent or it is necessary for the performance of a concluded contract and the processing is carried out by automated means, you are allowed, in accordance with Article 20, GDPR, to receive personal data concerning you which you have provided to us, and that in a structured, commonly used, machine-readable and interoperable format. However, it is impossible to act on the request if the exercise of this right could adversely affect the rights and freedoms of others.

You can exercise the right to data portability at the following address: info@vilacapek.cz.

7.9. The right to lodge a complaint

If you assume that there is unauthorised processing of your personal data, you can lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection on the territory of the Czech Republic (www.uoou.cz).

 

8. Sending commercial communication

Commercial communication we send means business messages within the meaning of current legislation. From our commercial communication, it is always evident who is the sender.

Only persons aged over 16 years are entitled to give us consent to the sending of commercial communication.

 

9. Whom can I ask a question?

If you have any queries, please contact us at the following address at any time: info@vilacapek.cz.

We beg to warn you that in case of the exercise of the right of access to personal data or any other rights, we may require that you should prove your identity in a proper way for the purpose of identity verification. This is a preventive safety measure to prevent unauthorized persons from access to your personal data.

Any communication with you is monitored and archived for the purpose of keeping records of the performance of our duties arising out of legal regulations.

 

10. Change in the privacy protection rules

These privacy protection rules become effective on 1 January 2020. We are entitled to change these rules unilaterally. In such a case, we are obliged to advise you of the change in advance.

 

Consent to the processing of personal data

I hereby give the company Benet Holding s.r.o., Company Number: 49550489, having its registered office at: Do Čertous 2622/14, Horní Počernice, CZ-193 00 Prague 9, registered in the Commercial Register maintained by the Municipal Court in Prague under the reference number C 23623 (hereinafter referred to as “Benet Holding”), consent to the processing of my personal data for the purpose of presenting offers of services and informing about both regular and special events carried out by the company Benet Holding, including the sending of commercial communication,

encompassing your first name and surname, date of birth, address, telephone number, e-mail address, type of services used so far, and that for a period of 10 years commencing on the date of giving the consent.

Giving consent is voluntary. I am allowed to take back my consent any time either using a link destined for this purpose in every commercial communication or sending a requirement to the following e-mail address: info@vilacapek.cz.

We will process your personal data based on your voluntary consent to the processing.

We will process your personal data directly through our authorised employees and further through processors authorised by the company Benet Holding on the basis of data processing agreements. The categories of the processors to which the personal data may be disclosed include a marketing service provider, an advertising campaign manager, and a server operator. We will not transfer your personal data to third countries as part of the above-mentioned processing.

Within the framework of the above-mentioned processing, there are no decisions based solely on automated processing, which would produce legal effects concerning data subjects or similarly significantly affect them.

 

Your rights with regard to the processing of your personal data

 

  1. The right to withdraw your consent to the processing of personal data

You can withdraw your consent at any time either using a link destined for this purpose in every commercial communication or sending a request to the following e-mail address: info@vilacapek.cz.

  1. The right of access

When asked, we will tell you whether we process any personal data relating to you. And, if so, then we will inform you, in particular, about the purpose of such processing, the categories of personal data concerned, categories of recipients of the personal data, or a planned period of storage. Provided that this will not affect other persons’ rights and freedoms, we will provide free of charge a copy of your personal data undergoing processing. However, we may charge a reasonable fee based on our administrative costs for any further copies requested.

We beg to warn you that in case of the exercise of the right of access to personal data, we may require that you should prove your identity in a proper way for the purpose of identity verification. This is a preventive safety measure to prevent unauthorized persons from access to your personal data.

  1. The right to rectification, and the right to have incomplete personal data completed

You can ask for rectification of inaccurate personal data concerning you. Furthermore, you have the right to submit supplementary personal data if necessary.

  1. The right to erasure

Our systems are set to ensure automatic erasure or anonymisation of personal data that are no longer necessary in relation to the purpose for which they were processed.

However, should you assume that the data have not been erased yet, or that we process any of your personal data without authorisation, you can approach us with a request for erasure of your personal data. We need not erase your personal data if, for example, we need them for the establishment, exercise or defence of our legal claims, or if the processing of such data is required by legislation.

  1. The right to restriction of processing

Upon your request, we shall restrict the processing of personal data if:

  • You assume that data concerning you and processed by us are inaccurate. We shall restrict such processing until we verify the accuracy of these personal data;
  • The processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
  • We will no longer need the personal data for our purposes, but you require them for the establishment, exercise or defence of legal claims;
  • For personal reasons (i.e., on grounds relating to your particular situation), you have objected to processing of personal data that are based on our legitimate interest. Then we are obliged to restrict such processing of personal data pending the verification whether our legitimate interest overrides your personal reasons (i.e., on grounds relating to your particular situation). 

In case of restriction of processing, these personal data may only be:

  • Stored;
  • Further processed with your consent;
  • Further processed for the establishment, exercise or defence of legal claims;
  • Further processed for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

 

  1. The right not to be subject to a decision based solely on automated processing

You have the right not to be subject to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you.

  1. What does the right to object to processing mean?

Where personal data might be processed in a particular case, which would be necessary for the purposes of our legitimate interest (that is, not processed on the basis of a consent, for the performance of a contract, etc.), you are entitled to object to such processing on grounds relating to your particular situation. If we do not demonstrate that our legitimate interest in the particular processing overrides your interests or rights and freedoms, we shall stop such processing.

You are also entitled to object to your personal data being processed for the purposes of direct marketing. In such a case, we shall no longer process your personal data for these purposes.

  1. The right to data portability

Furthermore, you shall have the right to receive from the company Benet Holding the personal data concerning you, which you have provided to the company on the basis of this consent. Based on your request, the data shall be disclosed to you without undue delay in a structured, commonly used, and machine-readable format, or we shall disclose the data to another uniquely determined controller upon your request. This right does not apply to personal data that are not processed by automated means.

You can exercise the above-mentions rights at the following email address: info@vilacapek.cz.

  1. The right to lodge a complaint

If you assume that there is unauthorised processing of your personal data, you can lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection on the territory of the Czech Republic (www.uoou.cz).

 

You can contact us at:

Benet Holding s.r.o.
Do Čertous 2622/14

CZ-193 00 Prague 9 – Horní Počernice
E-mail: info@vilacapek.cz
Tel: +420 722 980 760