(hereinafter referred to as the “Policy”)
The controller of personal data is Binio Praha s.r.o., with its registered office at Víta Nejedlého 506/11, Žižkov, 130 00 Prague 3, Company ID No.: 24688797 , registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 92958. As the data controller, it hereby provides information on the purposes, means, and methods of personal data processing, including information on the rights of individuals whose personal data is being processed.
(hereinafter referred to as the “controller”)
The controller ensures the processing of individuals’ personal data in accordance with applicable national legislation and European Union law, guided in particular by Regulation (EU) 2016/679 of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
1. Legal Basis for the Processing of Personal Data
We process personal data based on the following legal grounds:
- Performance of a contract: processing is necessary for the performance of a contract to which you are a party, or for taking steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR),
- Consent: to processing for the purposes of direct marketing (in particular for sending commercial communications and newsletters) pursuant to Article 6(1)(a) of the GDPR in conjunction with § Section 7(2) of Act No. 480/2004 Coll., on Certain Information Society Services,
- Compliance with legal obligations: processing is necessary for compliance with legal obligations to which the controller is subject pursuant to Article 6(1)(c) of the GDPR,
- Legitimate interest: where processing is necessary for our legitimate interests pursuant to Article 6(1)(f) of the GDPR
2. Purpose of personal data processing
We use your personal data primarily for the following purposes:
- Provision of our services: to conclude and fulfill contracts and provide the services you have requested (e.g., sending information about projects, responding to inquiries, processing orders).
- Improving our services and website: based on an analysis of our website usage and user interactions, we improve our products and services.
- Marketing and communication: if you have given us your consent, we may send you information about our news, events, and offers for services and products that may interest you.
- Compliance with legal obligations: for the purpose of complying with legal obligations, such as retaining documentation for tax purposes, or in the event of a request from legal or regulatory authorities.
3. What personal data do we process?
We process the following categories of personal data:
- Identification data: For example, first name, last name, academic title, date of birth, ID number, tax ID number, and information from identity documents
- Contact data: email address, phone number, home address.
- Data on the use of our website: Information about how you use our website, such as IP addresses, location, browser, operating system, and data collected via cookies.
- Data regarding your interactions with us: communications via email, phone calls, messages, or in-person meetings.
- Other data: bank account number, video recordings from CCTV systems.
4. Collection of Personal Data
We collect personal data in several ways:
- Directly from you: for example, when filling out forms on our website, registering for our services, or contacting us via email, phone, or other communication channels.
- Automatically: through cookies and other technological tools we use to analyze traffic on our website and improve the user experience.
5. Retention Period for Personal Data
- We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. This includes the period during which it is necessary to retain the data to comply with contractual or legal obligations. After this period, we will securely delete or anonymize the data.
- If you provide consent to the processing of personal data, the seller will retain your data only until such consent is revoked.
6. Recipients of Personal Data
- Your personal data is processed only by our employees and contractual partners, who are bound by confidentiality obligations. Your data may also be shared with third parties if necessary to fulfill our obligations or if permitted by law.
7. Right of access to processed personal data
- If you are interested in information about the personal data the controller processes about you, you have the right to contact the controller at any time and request details regarding the processing of this data.
- Upon your request, the controller will provide you with detailed information about the processing of your personal data free of charge or send you a copy thereof.
- The right of access to processed personal data is governed by Article 15 of the GDPR
8. Other Rights
- You have the right to rectify the personal data that the controller processes about you if it is inaccurate.
- You have the right to erasure of your personal data processed by the controller. You have the right to erasure of your personal data only if one of the following grounds applies:
- the data is no longer necessary for the purpose for which it was processed,
- if you have withdrawn your consent to the processing of the data,
- objections to the processing have been raised pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or objections to the processing have been raised pursuant to Article 21(2) of the GDPR,
- the data has been processed unlawfully,
- the data must be erased to comply with a legal obligation, or
- the data was collected in connection with the provision of information society services.
- You have the right to restrict the processing of personal data. For data processing to be restricted, one of the following cases must apply:
- you contest the accuracy of your personal data,
- the processing of the data is unlawful, but you oppose the erasure of such personal data,
- you will require the processing of personal data for the purpose of asserting your claims, even though the purpose for which the controller processed the data has already been fulfilled,
- you have objected to the processing and it has not yet been determined whether the controller’s legitimate interests override your legitimate interests.
- You have the right to object to the processing of personal data, in particular you have the right to object:
- against the processing of personal data that the controller processes regarding you to fulfill a task carried out in the public interest or in the exercise of official authority vested in the controller,
- against the processing of personal data that the controller processes based on its legitimate interest,
- against the processing of personal data, specifically if we process your personal data for direct marketing purposes. In such a case, your personal data will no longer be processed.
- You have the right to data portability, meaning you have the right to receive the personal data concerning you that you have provided to the controller, in a structured, commonly used, and machine-readable format, and the right to transmit this data to another data controller without the controller to whom the personal data was provided preventing this. Such data portability may only occur if:
- the processing is based on your consent or on a contract, and
- the processing is carried out by automated means.
- You have the right to withdraw your consent granted to the seller for the processing of personal data at any time.
- Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than the consent you have granted.
- If you exercise any of the above rights, the seller is entitled to request proof of your identity.
- If you wish to exercise any of these rights, please contact us using the contact details provided below.
9. Complaint Regarding Unlawful Processing of Personal Data
- If you believe that your right to personal data protection has been violated, you have the right to file a complaint against the seller with the Office for Personal Data Protection.
10. Personal Data Protection
- We take technical, organizational, and security measures to ensure the protection of your personal data against unauthorized access, misuse, loss, or damage.
11. Transfer of Personal Data to Third Countries
- We do not transfer your personal data to countries outside the European Union (EU) and the European Economic Area (EEA) unless it is necessary for the provision of our services. In the event that we need to transfer data to a third country, we will ensure an adequate level of protection for your personal data.
12. Changes to this Policy
- This Privacy Policy may be updated from time to time. We will notify you of any changes by publishing a new version on our website. We recommend that you check this page regularly to stay informed of any changes.
13. Contact
- If you have any questions regarding data protection or wish to exercise your rights, please do not hesitate to contact us at:
Email: info@vitalresort.cz
Phone: +420 777 525 495
Company Address: Víta Nejedlého 506/11, Žižkov, 130 00 Prague 3
This document serves to inform our customers and users about how we process personal data in accordance with applicable laws, particularly the GDPR.