Privacy Policy

Dear Clients,

Hotel Helios s.r.o. operating the Helios Wellness and Congress Resort (Hotel Helios, Hotel TOČ, Pension Chiranka) is committed to protecting and respecting your right to privacy.
This Policy sets out the basis on which we will process any personal data we collect from you or that you provide to us.

A number of obligations concerning the protection of your personal data arise for us from the applicable legislation of Act No. 101/2000 Coll. on the protection of personal data, as amended, and in particular from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), which comes into force on 25 May 2018.

Information we collect about you:

1. Booking accommodation, check-in (information contained in the client’s registration card):
   • name and surname, title if applicable,
   • date of birth,
   • address of permanent residence,
   • telephone and e-mail contact details,
   • in the case of foreigners, the data required by law for reporting the stay of foreigners (nationality, travel document number, visa number)
2. Details of the payment of the stay:
   • account number
   • credit card number
3. Marketing purposes (sending news, events):
   • telephone and e-mail contact

On what basis and for what purpose we process your personal data:

1. In order to complete and manage your reservation and, based on it, to fulfil the accommodation contract.
2. For marketing activities based on your consent. These activities include, in particular, the use of your contact details for the purpose of sending you news about products and services related to your visit to our hotel, the creation of a reservation by you or the creation of a user account. You can quickly and easily stop receiving these marketing communications at any time, i.e. withdraw your consent to the processing of your personal data for marketing purposes, using the unsubscribe link included in each newsletter.
   In some cases, we may contact you by email, telephone or SMS, depending on the contact details you have provided. These other communications may be for the following reasons:
3. Processing and responding to all requests that come from you regarding accommodation and reservations.
   • If you do not complete your online booking, we may send you an email reminding you that you have an incomplete booking. We believe this is a useful service as it allows you to continue with your booking without having to fill in your booking details again.
   • If you use our services, we may send you a questionnaire or ask you to rate your experience with our company.
   • We may need to send you other administrative messages, which may include security alerts, even though you have no upcoming booking.
4. We also process personal data because of legal obligations that we must fulfil, in particular Act No. 326/1999 Coll., on the residence of foreigners in the Czech Republic, as amended, and Act No. 565/1990 Coll., on local fees.
5. For our legitimate interest, and we believe also your interest, we also process personal data in the form of taking video recordings by CCTV, which helps us to protect our and your property, especially to prevent or solve theft. We only keep the footage for the necessary period of time and for the purpose it fulfils, and therefore it is deleted after 10 days of taking it.

To whom we disclose or transfer your personal data:

1. We may transfer your personal data to third parties providing support activities for us – mailing, debt collection, or legal services. These third parties are in the capacity of data processors and we only transfer to them the personal data necessary for the purpose (mailing, debt collection or legal services) and only the data of those clients to whom the specific support activity relates. We carefully select the personal data processors providing the above activities, we also change and supplement them on an ongoing basis, and in view of these updates and changes, we are ready to provide you with an up-to-date list of such
   entities to which the transfer of your above data is relevant upon your written or e-mail request.
2. In the case of foreigners, we transmit personal data contained in the registration form to the foreign police in accordance with our legal obligation.
3. We do not transfer your personal data to other countries.

Length of retention of your personal data:

We only keep your personal data for as long as is strictly necessary, i.e. in particular for the purpose of fulfilling the contract and legal obligations. For the purposes of archiving contracts (and any claims that may arise from the contract after its termination) and in view of legal requirements, we retain data for a maximum of 10 years after the termination of the contractual relationship. For the purposes of contract performance and legal obligations, we may process the necessary personal data without the data subject’s consent. We retain personal data processed on the basis of consent for the period for which the consent was given or until the consent is withdrawn.

Your rights under current legislation:

1. The right of access to the personal data we process in your case.
2. Right to rectification of your personal data.
3. If you feel that we are processing your personal data in a way that is contrary to the protection of your private life or in breach of the law, in particular if your personal data is inaccurate with regard to the purpose of its processing, you have the right to ask us for an explanation and also to request that we remedy the situation (e.g. by blocking, correcting, supplementing or destroying your personal data).
4. The right to object to processing in order to assess whether there has been a breach of the obligations imposed on us by applicable law.
5. You have the right to withdraw your consent to the processing of your personal data.
6. You have the right to have your personal data erased, provided that
   • are no longer necessary for the purposes for which they were processed,
   • you withdraw your consent to the processing of your personal data and there is no other legal basis for the processing,
   • you object to processing for which there are no overriding legal grounds for processing,
   • personal data have been unlawfully processed,
   • erasure is necessary to comply with a legal obligation; or
   • personal data has been collected in connection with the offer of information society services to a child under 13 years of age.
7. You also have the right to limit the processing of personal data, namely
   • if you contest the accuracy of the personal data, for the period necessary to verify the accuracy of the personal data,
   • if the processing is unlawful and you refuse the erasure of the personal data and request instead a restriction on its use,
   • if we no longer need the personal data for the purposes of the processing but you require it for the establishment, exercise or defence of legal claims, or
   • if you object to processing until it is verified that our legitimate grounds outweigh your legitimate grounds.
8. If you choose not to provide us with your personal data, or withdraw your consent or request deletion, this means that we can no longer process your personal data, which may result in you not being able to use our services and us not being able to provide them to you.
9. You also have the right to the portability of your personal data, which means the right to receive your personal data in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller, or to have this data transmitted directly from one controller to another controller, if technically feasible.
10. The processing of your data does not take the form of automated processing of personal data or profiling.
11. In addition to the above, you also have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.

If you would like more information about your personal data that we process, please contact us,
the controller of your personal data:

Hotel Helios s.r.o., ID No. 27742776, with registered office at Křenová 299/26, Trnitá, 602 00 Brno,
and at the email address info@heliosjeseniky.cz or at the address Hotel Helios, Lipová-lázně 25, Postal Code 790 61.

In Lipová-lázni on 24.5.2018