Privacy Policy
Dear Client,
We would like to inform you about how SPV Hotel Diamant s.r.o. (hereinafter referred to as "we" or "our company") processes your personal data in connection with the performance of our business activities.
The purpose of this communication is to provide you with information, in particular about what personal data we collect, how we handle it, where we obtain it from, the purposes for which we use it, to whom we may provide it, where you can obtain information about your personal data, and what your individual rights are regarding data protection. When processing personal data, we comply with generally binding legal regulations, and the processing of personal data is always limited to the scope necessary for the particular service and/or processing purpose.
Please familiarize yourself with the content of this notice. Should you have any questions, we are happy to answer them at our headquarters at Na hutích 661/9, Bubeneč, 160 00 Prague 6, by email at fom@hoteldiamant.cz, or by phone at +420 387 008 800.
- General Information
Due to the nature of our business activities, our company is required to process certain personal data, primarily for the purpose of fulfilling legal and contractual obligations. Without your personal data, we would not be able to provide you with our products/services.
We may also process your personal data beyond these obligations in order to care for you and our other clients, to develop our business relationships, and to provide you with targeted offers of our products/services. To do so, we need your consent. In line with the nature of our products/services, we respect the age threshold for providing valid consent without the involvement of legal guardians.
1.1. Principles of Personal Data Processing
In processing your personal data, we observe the highest standards of data protection and follow the principles below:
- (a) We always process your personal data for clearly defined purposes, using defined methods and means, and only for the time necessary to fulfill those purposes; we process only accurate data and ensure that the processing is relevant and necessary for its purpose.
- (b) We protect your personal data as confidential information; therefore, we process it in a way that ensures maximum security and prevents unauthorized or accidental access, alteration, destruction, loss, transmission, or other misuse.
- (c) We clearly inform you about the processing of your data and your rights to accurate and complete information, as well as other related rights.
- (d) We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to all potential risks; all persons handling personal data are bound by confidentiality.
- Information on Personal Data Processing
2.1. Data Controller Information
SPV Hotel Diamant s.r.o., registered at Na hutích 661/9, Bubeneč, 160 00 Prague 6, Company ID: 231 14 673, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 421613.
2.2. Purposes and Legal Basis for Processing
2.2.1. Processing Without Your Consent
This includes situations where providing your personal data is a condition for receiving our products/services or when we are legally entitled to process data obtained otherwise. This includes:
- (a) Compliance with legal obligations:
- (i) Preventing damage to company property
- (ii) Fraud prevention
- (iii) Compliance with anti-money laundering and terrorism financing laws
- (iv) Compliance with the Foreigners’ Residence Act
- (v) Compliance with local fees legislation
- (b) Contract performance: Including execution of the contract and its negotiation or modification.
- (c) Protection of rights and legitimate interests:
- (i) Enforcing claims and securing rights
- (ii) Engaging third parties regarding claims
- (iii) Legal dispute management
- (d) Our legitimate interests: Especially where a contractual/customer relationship exists between you and us.
2.2.2. Processing With Your Consent
This applies when you voluntarily agree to the processing of your data. Based on your consent, we may process your data for:
- (a) Client care: Including market research, feedback collection, and website behavior monitoring.
- (b) Product and service offerings: Via mail, email, SMS, phone calls, or website.
- (c) Job offers: Processing data for recruitment.
Failure to provide data for client care may result in a lack of personalized service or contract.
2.3. Scope of Processed Personal Data
We process only the data necessary for the above purposes: contact details (addresses, phone numbers, emails), identification data (name, surname, birth date, permanent address, ID type, number, validity; for entrepreneurs also company ID and VAT ID), and CCTV recordings.
2.4. Method of Data Processing
We process your personal data manually and automatically, both digitally and physically. Our staff and authorized third parties process this data. Before sharing data with a third party, we sign a contract guaranteeing data protection in line with our legal obligations.
2.5. Data Recipients
Your data is accessible to our employees, only to the extent necessary. It is also shared with:
- (a) Our legal advisors
- (b) Data processors providing server, web, cloud, and IT services
All such third parties are contractually bound to uphold our data protection standards.
2.7. Data Transfers Abroad
Your data is processed within the Czech Republic and is not transferred outside the European Union.
2.8. Data Retention Period
We retain personal data only as long as necessary. If no longer needed, data is deleted. For example:
- (a) Contracts: Retained for 10 years after the end of the relationship, unless legal obligations require longer retention.
- (b) Marketing: Retained during the client relationship and for 10 years after.
- (c) Client care: Same as above.
- (d) CCTV recordings: Retained for 30 days.
- (e) Job applications: Retained for 1 year after the hiring process.
2.9. Right to Withdraw Consent
You are not obliged to give consent and can withdraw it anytime. If you withdraw your consent, we will cease processing for that purpose, but may still be legally allowed or obliged to process the same data for other purposes (e.g., reservation confirmation emails).
To withdraw your consent, contact us at Na hutích 661/9, Bubeneč, 160 00 Prague 6, by email at fom@hoteldiamant.cz.
2.10. Sources of Personal Data
We obtain personal data from:
- (a) The clients themselves
- (b) Public registers and databases
- (c) Marketing events
- (d) Our own activities (analysis)
- (e) CCTV footage
2.11. Your Rights in Connection with the Processing of Your Personal Data
You may exercise all your rights at our registered office located at Na hutích 661/9, Bubeneč, 160 00 Prague 6, or via email at fom@hoteldiamant.cz. You may also file a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
2.11.1. Right of Access means that you may request confirmation at any time as to whether or not your personal data is being processed, and if so, for what purposes, to what extent, who it has been disclosed to, how long it will be processed, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained your personal data from, and whether your personal data is subject to automated decision-making, including profiling. You also have the right to obtain a copy of your personal data; the first copy is provided free of charge, and a reasonable administrative fee may be charged for additional copies.
2.11.2. Right to Rectification means that you can request at any time the correction or completion of your personal data if it is inaccurate or incomplete.
2.11.3. Right to Erasure means that we must delete your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are required to do so by law.
2.11.4. Right to Restrict Processing means that until any disputed issues concerning the processing of your personal data are resolved, we may only store your data and use it solely for the establishment, exercise, or defense of legal claims.
2.11.5. Right to Object means you may object to the processing of your personal data when it is being processed for direct marketing purposes or on the basis of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.
- Electronic Communication Tools
Our company uses various technologies in its business operations to provide you with the most convenient access to us and our products/services. These primarily include internet-based services and the use of social media platforms.
3.1. Social Media. You can contact us through various social media platforms. We use these communication channels mainly as marketing tools; currently, they are not used to provide our products/services.
3.2. Cookies. We also use cookies in the provision of our products/services. These are small text files that are stored on the user's computer when our website is first loaded. These files help us better understand how visitors interact with the content on our website. This enables us to communicate more effectively with our visitors and to target our marketing more efficiently. You can delete cookies at any time through your browser settings.
- Final Provisions
4.1. This notice is issued for an indefinite period and becomes effective on April 25, 2025.
4.2. We may amend this notice at any time by issuing a new full version. The current version is published on our company's website and is also available at our registered office.
4.3. Unless explicitly stated otherwise, all information provided herein also applies to the processing of personal data of potential clients, i.e., individuals with whom we have not yet established a contractual relationship but are already in contact. The information also reasonably applies to the processing of personal data of other individuals with whom our company is directly in contact, even though we do not have a contractual relationship with them (e.g., representatives of legal entities).