Consent to the provision of personal data
Personal data controller
The data controller is:
Klášterní hotel a restaurace Strahov s.r.o. with its registered office at Strahovské nádvoří 132/1, 188 00 Prague 1, ID No.: 10850376, registered at the Municipal Court in Prague, file No. C 349513.
The personal data of customers will be processed in connection with the reservation of a place in the Restaurant NA PEKLE, Strahovské nádvoří 133/3, 110 00, Prague 1, email: firstname.lastname@example.org,+420 225 341057
Text of the consent
Text of consent:
I consent to the collection, storage and processing of my personal data provided by me to the controller for the purpose of sending commercial communications and offers.
Consent will be given electronically prior to sending the booking confirmation by voluntarily ticking the box prior to sending the booking confirmation in accordance with Article 6(1)(a) of Regulation (EU) 2016/69 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR"), which entered into force on 25 May 2018.
What data will be processed
name and surname, business name, e-mail address, telephone number.
For what purposes personal data will be processed and stored
Personal data, which are:
- name and surname, or business name,
- e-mail address,
- phone number,
will be collected, stored and processed by the controller for the following purposes:
- to send you sales and marketing offers and notifications from the Administrator. The legal basis for processing is the legitimate interests of the controller.
Personal data will not be disclosed to any third party.
The period for which personal data will be retained
The controller will keep the personal data for as long as necessary or until the consent is withdrawn (withdrawal of consent). The longest the controller will keep personal data is 3 years/36 months.
How will personal data be processed and stored?
Personal data will be processed:
- machine (automated) via computers and computer programs, IT password security (security software) will be provided
Data subject rights, information and access to personal data
As a data subject, I have the right to access, rectify or delete my personal data or restrict processing. I have the right to request information on what personal data is processed and the right to request an explanation regarding the processing of my personal data.
I also have the right to object to processing as well as the right to data portability (i.e. the right to obtain personal data concerning me that I have provided to the controller in a structured, commonly used and machine-readable format, see Article 20 of the GDPR for more details).
I have the right to withdraw my consent at any time, without prejudice to the lawfulness of processing based on consent given before its withdrawal, if the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. This means that I do not have such a right in particular if the processing is necessary for compliance with a legal obligation to which the controller is subject (in particular, obligations relating to LVTČ).
As a data subject, I am informed that I can withdraw my consent to the provision of data by sending an e-mail to email@example.com, and I will be informed of this possibility when sending each individual message.
As a data subject, I have the right to request information about the processing of my personal data, which the controller is obliged to provide to me without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information.
As a data subject, I have the right to contact the controller or the Office for Personal Data Protection if I have any doubts about compliance with the obligations related to the processing of personal data.
The controller declares that the processing does not involve automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
The controller declares that personal data are not processed for scientific or historical research purposes or for statistical purposes.
As a data subject, I declare that I am aware of my rights under Chapter III of the GDPR.
I declare that all information provided is accurate and truthful and is provided voluntarily.
The Controller declares that it will collect personal data to the extent necessary for the fulfilment of the purpose and will process it only in accordance with the purpose for which it was collected.
This consent is a free and informed expression of the data subject's will, the content of which is the data subject's consent to the processing of personal data.
Monastery Hotel and Restaurant Strahov s.r.o.
Daniel Janáček, Managing Director