Private Policy
Effective Date: 01/04/2024
Korunní Praha s.r.o., Company ID No.: 07437676, registered office at Písecká 486/14, Vinohrady, 130 00 Prague 3, registered in the Commercial Register maintained by the Municipal Court in Prague, File No.: C 300999 (hereinafter referred to as the “controller,” “company,” or “we”), cares about the protection of your personal data. Please read how the company processes and handles your personal data.
The company processes personal data in accordance with applicable legal regulations, such as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), and Act No. 110/2019 Coll., on the processing of personal data.
Contents
- Who does this Privacy Policy apply to?
- What personal data do we process and why?
- Are you required to provide us with personal data?
- Do you always need to give consent for the processing of personal data?
- How long do we retain your personal data?
- Do we disclose your personal data to third parties?
- What rights do you have regarding the processing of your personal data?
- Where can you find more information about personal data processing and your rights?
Who does this Privacy Policy apply to?
These principles (hereinafter referred to as the “Policy”) apply to the processing of personal data of our guests and business partners. They also apply to you when visiting our website www.zlaty-kopec.cz (the “website”) or when contacting us via email.
What personal data do we process and why?
We are aware that proportionality is one of the principles of data protection laws, and therefore we only process your personal data to the extent necessary for the relevant purpose.
Scope of processed personal data
If you are our guest, we process the following data:
- Identification data: academic title, first name, surname, date of birth, personal ID number, business ID (IČO), VAT ID (DIČ)
- Address data: permanent residence address, mailing address, company seat
- ID card, passport, or other identity document number
- Contact data: email address, phone number
- Payment details for transactions through payment terminals or gateways
- Bank account number and account holder’s name
- Accommodation price, including any booking portal fees
- Digital signature
- Information about your stay (duration, additional services like cleaning or laundry)
- Communication related to booking and services provided
Payments may be processed via payment terminal or gateway provided by Československá obchodní banka, a.s., Company ID: 00001350. We process data necessary for the execution of such payments.
For foreign guests, we also process data required by law, such as nationality, passport number, visa number, and permanent residence abroad.
CCTV recordings may include your physical appearance.
All personal data are collected directly from our guests, except for CCTV footage and bookings made through online booking portals.
If you are a business partner, we process:
- Identification data: name, surname, business ID, VAT ID
- Address: mailing address, registered office
- Contact details: email, phone number
- Bank account number, issued and received invoices
If you contact us via the inquiry form or email, we process:
- Name, surname, email address, phone number
- Communication related to your inquiry
When you visit our website, we store necessary cookies for its functionality, statistical cookies to analyze user behavior and improve experience, and marketing cookies to display relevant ads. More details, including how to change cookie settings, are available at: www.coru-house.com
Purposes and legal bases for processing
We process personal data for several reasons. Each reason must be supported by a legal basis under the relevant laws:
For guests, data are processed for:
- Preparation, execution, registration, and conclusion of booking contracts, based on contract performance or pre-contractual measures
- Tax and accounting purposes (invoicing, payment processing, accounting), based on legal obligations
- Legal obligations related to accommodation services, such as guest records and reporting to local authorities or the Foreign Police
- Fulfillment of other statutory obligations
- Communication related to booking and accommodation services
- Debt collection and legal claims, based on our legitimate interest
- Sending promotional offers for advantageous stays or related services, based on our legitimate interest
- Property protection through CCTV, based on our legitimate interest
For business partners, data are processed for:
- Preparation, performance, and registration of contracts, based on contract performance or pre-contractual steps
- Tax and accounting (invoicing, accounting), based on legal obligations
- Legal obligations applicable to the company
- Debt collection and protection of legal rights, based on our legitimate interest
For inquiries via email, data are processed for:
- Handling and responding to your message, based on pre-contractual steps (this does not mean a formal contract is created, but it’s required to respond to your inquiry)
We do not use your data for automated decision-making or profiling.
Are you required to provide personal data?
Yes, if you wish to book accommodation or enter into a business relationship, providing personal data is necessary. Without it, we cannot conclude contracts or provide services.
The same applies if you contact us with an inquiry—we need your data to respond.
Do you always need to give consent?
In some cases, consent may be required for specific processing, but we currently do not process any data based on consent. If this changes, we will inform you, including how to withdraw consent.
How long do we keep your data?
If you booked accommodation or entered into a contract:
- We keep your data for 6 years after the end of the contract
- For business partners, the retention is 10 years
- This retention covers claims, disputes, or damages even after the end of the contract
For foreigners or recreational guests, data are stored for 6 years, as required by law.
Tax documents are retained for 10 years after the end of the tax period.
Data from inquiries are retained for 1 year unless we enter into cooperation.
Data are stored only as long as necessary, based on:
- Contract duration
- Protection of company rights
- Legitimate interests (if proportionate)
- Legal requirements
- Defense of legal claims
Do we share your data with others?
Only authorized employees and collaborators have access. We may also share your data with:
- External accountant
- IT specialist
- Tax and legal advisors
- Contractors involved in property construction or services
For accommodation bookings, we use:
- Airbnb (Airbnb Ireland UC)
- Booking.com (Booking.com B.V.)
- Previo (booking/reception system by PREVIO s.r.o., Kolbenova 882/5a, 190 00 Prague 9, Company ID: 25975234)
Some data (e.g., Airbnb) may be transferred outside the European Economic Area with appropriate safeguards in place.
We may also provide data to service providers for extra services (e.g., laundry, airport transfer, repairs) to the extent necessary.
We may share data with public authorities or banks (e.g., local municipality, Czech Police), and our legal representatives, always under applicable laws. If such third parties act as processors, we have appropriate contracts in place.
What rights do you have regarding your personal data?
You have the right to:
- Request information on the data we process about you and receive a copy
- Request correction of inaccurate or incomplete data
- Request erasure of data (in certain cases only)
- Request restriction of processing (e.g., if data accuracy is disputed)
What rights do you have in connection with the processing of your personal data?
Below is a list of the rights you have in connection with the processing of your personal data:
- You may ask us to inform you about which of your personal data we process, and you may also be granted access to such data, i.e., provided with a copy of the personal data being processed.
- You may also request the rectification of inaccurate or the completion of incomplete personal data.
- You may request the erasure of your personal data; under certain conditions we are obliged to delete them. However, this does not apply in all cases—we may retain your data in some situations.
- Under certain conditions, you also have the right to request restriction of processing, e.g., if you contest the accuracy of the personal data and we are verifying that accuracy.
- You also have the so-called right to data portability—under certain conditions, you have the right to receive your data in a structured, commonly used, and machine-readable format.
- You have the right to withdraw your previously given consent to data processing at any time, without needing to give a reason.
- If you suspect that your personal data is being processed in violation of the law or applicable regulations, you have the right to lodge a complaint with the Office for Personal Data Protection and the right to effective judicial protection in this area.
- You may also exercise other rights as set out in applicable legal regulations.
In addition to the above rights, you also have the right to object to processing concerning your particular situation, for example, if we process your personal data based on our legitimate interests.
Where can you find more information about personal data processing and your rights?
You will always find the most up-to-date information regarding the processing of your personal data in this Privacy Policy. The effective date is listed on the first page, and if we update this Policy, we will send you the updated version.
If the above information is not sufficient for you or you have additional questions regarding the protection of your personal data, we will be happy to answer them. You can contact the company at the address listed above or via the email address: info@gmail.com.