PRIVACY POLICY
PRIVACY POLICY
PRIVACY POLICY
You grant consent to the company Graffin s.r.o., with its registered office at Hvězdova 870/39, 140 00 Prague, Company ID: 26765951, registered in the public register maintained by the Municipal Court in Prague, Section C, Insert 92250 (hereinafter referred to as the “Controller”), to process the following personal data in accordance with Act No. 101/2000 Coll., on the Protection of Personal Data (hereinafter referred to as the “Personal Data Protection Act”):
- Name and surname
- The name, surname, and email address are required for the purpose of sending feedback. These data are securely protected by passwords at both the user and system levels. User data is backed up in folders secured by standard technological procedures. The backup device is located in a different part of the building than the server.
- By agreeing to the above processing, you give your explicit consent. This consent can be withdrawn at any time, for example, by sending an email or letter to the company’s contact details at hotelkacov@graffin.cz or to the address Kácov 332, 285 09 Kácov.
- The processing of personal data is carried out solely by the Controller.
- Please note that, under the Personal Data Protection Act, you have the right to:
-
- Withdraw your consent at any time.
- Request information about which of your personal data we process.
- Request an explanation regarding the processing of personal data.
- Request access to your personal data and request their update or correction.
- Request the deletion of your personal data.
- In case of doubts regarding compliance with obligations related to the processing of personal data, you may contact us or the Office for Personal Data Protection.
- It is important to distinguish whether the processing of a particular piece of personal data is necessary or not—it is not permissible to process personal data that is not essential for the stated purpose.
Withdrawal of consent does not necessarily mean immediate deletion. It is necessary to consider whether there are other reasons for processing and whether deletion would cause disproportionate harm to the Controller—personal data will be handled accordingly, and the applicant will be informed.