GRH Ltd. with its registered office at Ostrovačická 936/65, Žebětín, 621 00 Brno, registered in the Commercial Register of the Regional Court Brno, Section C, File 92997, CRN: 04996364, as a personal data administrator (hereinafter referred to as a “Company“) in connection with providing its services and offering its products it processes personal data of Personal Data Entities (hereinafter referred to as “Clients“).
The purpose of the Statement for processing of personal data is to provide information, particularly on what personal data does the Company collect, how it handles the information, what resources is it collected of, what purposes is it used for, whom can it be provided to, where it can obtain the information about personal data it processes, and what are the individual rights of the Client in the field of personal data protection.
I. General information
Client’s personal data is processed by the Company in the least extent necessary for the purposes of offering its services and products.
When processing personal data the Company venerates and respects the highest standards of personal data protection and follows particularly these principles:
(a) personal data are always processed for intelligibly and comprehensibly determined purpose, by the established means, in a determined way, and only for a necessary period of time considering the purposes of their processing; only exact personal data are processed, whose processing is in accordance with established purpose and is indispensable for living up the purpose;
(b) personal data are processed in a manner that ensures the supreme security of such personal data possible and that prevents them from any unauthorized or accidental access, modification, destruction or loss, unauthorized transfer, unauthorized processing and other misuse;
(c) The Company always informs about processing of personal data comprehensibly, about demands on exact and complete data, about circumstances of their processing and about other related rights;
(d) The company follows appropriate technical and organizational measures to ensure the level of safety corresponding with all risks possible; all persons who come into contact with personal data are obliged to maintain confidentiality of information gained in connection with processing of such data.
II. Information on processing of personal data
a) Information about the Administrator
GRH Ltd., with its registered office at Ostrovačická 936/65, Žebětín, 621 00 Brno, registered in the Commercial Register of the Regional Court Brno, Section C, File 92997, CRN: 04996364, e-mail: info@gridhotel.cz, tel.: +420 775 877 817
b) The purposes of processing and the legal basis for data processing
On the basis of a voluntary consent the Company processes personal data for the purpose of a proper execution of the Contract and following law performance, offering services and products of the Company: particularly propagation of the information, offering services and products of the Company in the various manners, e.g. via post, electronic means (including electronic mail and messages sent into the mobile phone via a telephone number) or via a telephone call, via a website.
c) Extent of personal data processed
The Company processes the personal data in an extent necessary for fulfilment of above mentioned goal. It processes following identification data: Name and surname, birth, telephone number, e-mail address, permanent address, address of a main office, identity card number, driving license number, furthermore data from mutual communication between the contracting parties and data arisen from a contract performance.
d) Method of processing of personal data
The processing of personal data includes both manual and automated processing in the information systems of the Company. The data are processed only by employees of the Company.
e) Recipients of personal data
Personal data are only made accessible to employees of the Company in connection with the performance of their working duties, which require personal data to be handled, only to the extent that is necessary and simultaneously in compliance with all security measures.
f) Personal data transfer abroad
Personal data are processed only in the area of the Czech Republic.
g) Time of processing of personal data
The company processes the personal data only within a period necessary in view of the purpose of their processing. Continuously it considers whether the necessity of processing of personal data still persists. If the Company finds out the personal data are no longer necessary for the purpose they have been processed for, it disposes of such data.
h) Right to take back the consent
A Subject of personal data is not obliged to give consent to process his or her personal data and simultaneously he or she is entitled to revoke this consent.
i) Right to access the personal data
The Client has a right to gain permission from the Company whether the personal data related to him or her are or are not processed. If the personal data are processed the client has a right to gain an access to such data and further information in accordance with Article 15 of the General Data Protection Regulation.
j) Right of amendment
In accordance with Article 16 of the General Data Protection Regulation the Client is entitled to have his or her data corrected by the Company or completed if inaccurate, in short order.
k) Right of deletion
The Client is entitled to have all his personal data related to the subject deleted by the Company without undue delay, under the conditions of Article 17 of the General Data Protection Regulation, especially if such data are no longer necessary for the purpose they were collected for. This right also fulfills so-called right to be forgotten.
l) Right to limit processing
The Client is entitled to have his or her personal data processing limited by the Company in any of the cases stated in Article 18 of the General Data Protection Regulation
m) Right of data transmissibility
The Client is entitled in accordance with and under the conditions of Article 20 of the General Data Protection Regulation to gain all the personal data related to the subject from the Company in a structured, commonly used and device-legible format and is entitled to hand them or to another administrator without any obstruction of former AMD.
n) Right to file a complaint
In connection with processing of personal data is the Client entitled to file a complaint within the meaning of Article 77 of the General Data Protection Regulation with the Supervisory Authority. Supervision of compliance with personal data processing obligations is performed by the Office for Personal Data Protection with its main office at Pplk. Sochora 27, 170 00 Prague. More information on the rights of the data subjects is available on the website of the Office for Personal Data Protection (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276).
This Statement is valid and effective as of May 25, 2018. Current version of the Statement is published on the website www.gridhotel.cz.
