rezervace@bbvillahotel.cz Anglická 116/23, 35301 Mariánské Lázně
cs de en

Terms and Conditions/Accommodation Rules

  • Home
  • Terms and Conditions/Accommodation Rules

GDPR (General Data Protection Regulation)

PRINCIPLES OF PERSONAL DATA PROCESSING in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter also referred to as “GDPR”)

Dear guests, in accordance with the GDPR, this page provides you with the most important information about your personal data processed by MFCZ s.r.o., a limited liability company based at Lidická 125/10, 353 01 Mariánské Lázně, IČO: 27976301, registered under number C 19671/KSPL at the District Court in Pilsen (hereinafter also referred to as the “controller” or “company”).

The purpose of this notice is to inform you about the processing of personal data in connection with your visit to the website https://bbvillahotel.cz/, as well as certain other cases of personal data processing in which the company's activities involve the processing of personal data of other individuals (e.g., hotel guests, journalists, etc.; hereinafter referred to as “data subjects”).

 

I. Processing of personal data from contact forms

When you submit a request via the request form, personal data is also collected in an encrypted interface. This includes the following data:

  • Date and time of submission of the request form;
  • Data from the submitted request form;
  • Any questions from the visitor.

These log files are processed by the company itself.

Personal data of visitors to the controller's website that is processed in connection with the administration of the controller's website, the administration of the controller's reservation system, if applicable, and/or the implementation of internet marketing is only processed on condition that the data subject has given their consent to this processing within the meaning of Article 6(1)(a) GDPR for the period for which the consent in question is valid. If the data subject has not given their consent within the meaning of Article 6(1)(a) GDPR, the personal data of the data subjects will be processed at the request of the data subject within the meaning of Article 6(1)(b) GDPR.

 

II. Processing of personal data for the purpose of sending the newsletter

If a website user is interested in receiving newsletters and other advertising communications, the Company will process the personal data provided by such user for these purposes, based on consent, always at least to the extent of the email address, first name, and last name. The content of the newsletter and other advertising communications may be personalized based on the data provided and other data for personalizing content that the Company obtains from the user's behavior on the website or in the newsletter.

 

The Company will only start processing the user's personal data after the user fills in the relevant form for ordering the newsletter and other advertising messages with their data and then confirms their order and consent to the processing of personal data by responding according to the instructions in the email message received. If the order is not confirmed, the data entered will not be stored anywhere.

The personal data provided will be processed until the consent is revoked. The processing of the personal data provided will be carried out by the Company itself or by a specialized processor.

Consent to this processing of personal data is entirely voluntary, and the user may revoke it at any time by sending a written notice of revocation of consent to the Company's registered office (see below).

The user may also revoke their consent by clicking on the "Unsubscribe" link in the newsletter or advertising message sent to them.

 

III. Processing of personal data in connection with photo documentation from organized events

At events organized by us, we take photo documentation (situational shots from events) to a reasonable extent for the purpose of subsequent publication of selected photographs on our website for promotional purposes of the B&B Villa Hotel. In this way, it is not primarily the visitors to a specific event that are shown, but rather the overall atmosphere of the event; the shots are not published in high resolution, nor do we attach descriptions of specific visitors to the event. According to the expert opinion of the Office for Personal Data Protection, in such cases it is not primarily a matter of personal data protection, but of privacy protection under the Civil Code; therefore, consent to the processing of personal data for "illustrative" images is not required.

Visitors are notified in advance of the taking of photographs by means of a camera pictogram, our photographers are clearly identified, and photographs are taken only in the main area of the event, so visitors always have the option of staying in areas where no photographs are taken. If you have any doubts or questions about the taking of photographs, you can contact us at the contacts listed below.

 

IV. Processing of data based on a reservation or stay

Based on your reservation (or stay without a reservation), we process clients' personal data to the following extent:

  • identification and contact details (first and last name, permanent address, ID card number or similar document, and possibly also email address and telephone number);
  • in the case of self-employed individuals, also the name of the self-employed individual, registered office, ID number, VAT number, and VAT payer information;
  • in the case of business trips for non-business persons, also information about the organization that ordered or paid for the stay);
  • information about the purpose of the stay, or information that the client is a person who is not subject to a spa or recreational stay fee;
  • information about your membership in the loyalty program;
  • information about your stay and the services used, and the amount and method of payment for the services provided (in the case of cashless payment, bank account number or payment card details);
  • in the case of foreign nationals, in addition to the above information, also date of birth, nationality, travel document number, visa number, permanent address abroad;
  • in the case of guests who use parking at our hotel, also the license plate number of the car.

A. Processing for the purposes of complying with legal obligations

The provision and processing of all the above personal data, with the exception of your email address, telephone number, and information about your membership in the loyalty program, is necessary for the purposes of fulfilling the Company's legal obligations, in particular those arising from the Local Fees Act and the Act on the Residence of Foreigners in the Czech Republic, as well as from accounting and tax regulations.

B. Processing necessary for the performance of a contractual relationship

The processing of your identification data and data about your stay and the services provided and the amount and method of payment is necessary for the purposes of fulfilling the contractual relationship relating to your stay, i.e. securing orders and reservations, concluding and fulfilling contracts relating to the accommodation, catering, and related services offered and provided by the Company.

C. Processing necessary for the purposes of legitimate interest

We process your personal data in the scope of your name, surname, e-mail address, and information about your stay on the basis of the Company's legitimate interest for the purposes of direct marketing. The purpose of processing is exclusively to send you marketing and commercial communications, i.e., information about interesting news, discounts, etc.

We also process personal data to the same extent for sending satisfaction questionnaires after your stay, in order to verify your satisfaction with the Company's services and to continuously improve the quality of the Company's services for you.

There are no cases of our guests questioning the services provided at the hotel. If there were a case of questioning the services provided by the Company, the Company would be forced to process data on the services provided to the extent necessary to conduct such a dispute, solely for the purpose of protecting the Company's rights in such a dispute. Similarly, the Company would also be forced to process the necessary data in the event of non-payment for services or in the event of damage caused to the Company.

D. Automated processing of your data

Under no circumstances do we carry out automated decision-making or other automated processing of your personal data that would have legal effects on you or would significantly affect you in a similar way.

V. Processing of personal data in connection with handling requests and inquiries related to accommodation services on the website

 

In the event of a request for services on the website of the B&B Villa Hotel https://bbvillahotel.cz/ via the request form or by sending an inquiry to the relevant email address listed on the website, the Company will process the personal data of the potential customer, namely their first name, last name, email address, telephone number, or company name, only with your consent. You can revoke your consent at any time by sending an explicit message to rezervace@bbvillahotel.cz.

After processing the relevant request, the Company may, with your consent, use the above-mentioned data for its marketing purposes related to its accommodation services. In this case, the data subject has the right to revoke the consent at any time by sending an explicit message to rezervace@bbvillahotel.cz.

The processing of the provided personal data will be carried out by the Company itself or through a processor.

 

VI. Processing of personal data in connection with accommodation services

The personal data of customers (name, surname, date of birth, ID card or passport number, address, signature) who stay at the B&B Villa Hotel are processed by the Company on the legal basis imposed by Act No. 565/1990 Coll., on local fees (§3g), as amended, and Act No. 326/1999 Coll., on the residence of foreigners (§101), as amended. This processing is therefore necessary for compliance with a legal obligation in accordance with Article 6(1)(c) of the GDPR, and the consent of the accommodated person (data subject) is therefore not required for such processing.

Based on consent, the Company stores the first name, last name, and email address of its customers for the purpose of verifying customer satisfaction or commercial offers of the same nature or services that were the subject of the order. In this case, the Data Subject has the right to revoke the consent granted at any time by sending an explicit message to rezervace@bbvillahotel.cz.

The Company will collect feedback and thus process customers' email addresses by sending a questionnaire on satisfaction with their stay at the B&B Villa Hotel, i.e., a commercial communication, to these email addresses in accordance with the above. The questionnaire will be sent to customers only once in connection with the relevant purchase of services. The Company will collect feedback and process customer email addresses itself or through a contractually bound third party (processor).

 

VII. Google Analytics and Google Adwords

The Company uses Google Analytics, developed and operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to analyze websites using cookie files.

Google will not associate the transmitted data, including IP addresses, with any other data. Google's privacy policy can be viewed here.
Visitors to the website can prevent the collection and analysis of cookie files by Google Analytics by changing their browser settings as described above, and also by:

by clicking on the following link, which will place an opt-out cookie on your computer that will prevent future storage of data about your visit to the website;

by installing a browser plugin available here. This plugin only works in the relevant browser on the relevant computer and must not be deactivated or deleted after installation in order to maintain the deactivation of Google Analytics.

As part of Google Analytics, the Company also uses related advertising features provided by Google, such as Google Display Network reports, enhanced reporting of anonymous demographic data (e.g., age, gender, interests), and displaying ads on the content network based on products viewed (so-called remarketing), including the Google AdWords service used to personalize advertising and improve ad targeting and remarketing.

 

VIII. Information text about the camera system in the premises of the B&B Villa Hotel

The purpose of processing is to protect property and increase personal safety. The scope of processing includes only video recordings from the camera system, without audio recordings. The Company is the controller of these recordings. The CCTV recordings are stored on an HDD device/hard drive operated by the Company; no other processor is used for this CCTV system. The place of processing is the B&B Villa Hotel and its premises at Anglický 116/23, 35301, Mariánské Lázně, Czech Republic.

The recipients of data from the camera system may only be law enforcement authorities or administrative authorities for the purposes of misdemeanor proceedings.

The cameras cover the entrance area and reception area, corridors and underground garages, parking spaces in front of the hotel, entrances/exits, staff entrances, supply and handling areas, terraces, entrances to the fitness/wellness area, hall/foyer, access to conference rooms, ramp, courtyard/inner courtyard.

The maximum retention period for recordings is 72 hours, after which the data is automatically deleted and overwritten by new recordings, as the camera system is based on a loop mode.

The cameras operate continuously (or are based on an automatic motion sensor).

Contact details for receiving requests for information are provided below.

IX. Period of personal data processing

 

We process your personal data for the duration of your stay at our hotel. After your stay, we only process:

 

Data that we are required to process under relevant legal regulations, and only for the period necessary under these legal regulations. (For example, the accounting and tax documents we issue to you also contain some of your personal data (name and surname, type of service provided, date of issue of the document). We store these documents only for the purpose of fulfilling the obligations set out in the relevant accounting and tax legislation, for the period specified by these regulations.)

Your first name, last name, email address, and information about your stay for the purposes of direct marketing of the hotel (sending information about interesting news or discounts on our services, etc.) and for sending satisfaction questionnaires. We process data for sending satisfaction questionnaires only until the questionnaires are evaluated (maximum 1 month after your stay). For direct marketing purposes, we process your data listed above until you inform us of your possible disagreement with further such processing.

Data necessary for the purposes of existing or imminent disputes. We process this data only until a final decision on the dispute has been made and the obligations arising from the decision have been fulfilled, or until the period during which disputes over the services provided may arise under applicable law.

After the above-mentioned periods have expired, we regularly destroy your personal data, both in paper and electronic form.

 

X. Other rights related to personal data protection

Data subjects whose personal data is processed by the Company are entitled to the following rights related to the processing of their personal data, provided that the conditions set out in the legal regulations are met:

the right to access personal data, consisting of the right to receive, free of charge, upon request, information about which of their personal data the Company processes;

  • the right to correct their processed personal data;
  • the right to delete their processed personal data;
  • the right to restrict the processing of their personal data;
  • the right to the portability of personal data;

the right to withdraw consent to the processing of personal data at any time, if consent is the legal basis for the relevant processing of personal data (i.e., for sending newsletters and other advertising communications).

Data subjects whose personal data is processed by the Company also have the right, subject to the conditions set out in the legislation, to object to the processing of their personal data if the legal basis for the processing is the legitimate interests of the Company. If personal data is processed for direct marketing purposes, the data subject has the right to object to such processing at any time.

Data subjects whose personal data is processed by the Company may exercise the above rights in writing or by e-mail to the Company as the personal data controller via the contacts listed below.

The controller can be contacted:

  • in writing at Anglická 116/23, Mariánské Lázně, 35301;
  • by telephone at +420 704 615 161; and
  • electronically by email at rezervace@bbvillahotel.cz.

The above rights of the data subject are not absolute rights. The Company will assess the exercised rights individually and with regard to its rights or the rights of third parties.

If the Data Subject believes that there has been a violation of the law in relation to the protection of their personal data, they have the right to lodge a complaint with a supervisory authority. The supervisory authority for the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).