Reservation

Processing of personal data

+420 608 713 778
info@praguerivercruises.com

Information on Personal Data Processing

PLAVBY LODÍ PRAHA, s.r.o. (hereinafter referred to as the “controller”) informs the customer, as the data subject (hereinafter referred to as the “customer”), in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), about the processing of their personal data:

Purpose of Personal Data Processing

Personal data are obtained directly from the customer at the moment of order submission. The controller undertakes to process accurate personal data solely for the purpose of: performance of the contract (service provision agreement) [in accordance with Article 6(1)(b) of the GDPR] and its subsequent fulfillment, including handling any claims by the customer for defective performance. Processing the customer’s personal data is also necessary to fulfill a legal obligation applicable to the controller. The controller is required to meet legal obligations arising from legislation governing consumer protection and accounting. The reason for the customer providing personal data to the controller is to identify the contracting parties necessary for concluding and fulfilling the contract (contractual requirement), which would not be possible without providing this data. Failure to provide personal data may result in failure to fulfill or termination of the service by the controller. sending commercial communications (direct marketing) [in accordance with Recitals 47 and 70a and Article 6(1)(f) of the GDPR]. In this case, the controller has a legitimate interest in promoting the services it offers. The reason for providing personal data to the controller is the customer’s interest in receiving commercial communications, which would not be possible without providing such personal data. The controller undertakes not to process personal data in a manner incompatible with the above purposes.

Scope of Personal Data

The controller undertakes to process personal data only to the extent necessary in relation to the above purposes for which the data are processed. The scope of personal data is as follows:
  • First name and last name
  • Phone number
  • Email address
  • Residential address in case of sending gift vouchers by Czech Post
  • Billing information of individuals and legal entities (hereinafter referred to as “personal data”).

Data Retention Period

The controller undertakes to process personal data for the purpose of contract fulfillment for a period of 5 years from the date of obtaining the personal data from the customer. The controller is obligated to retain such data under generally binding legal regulations, specifically Act No. 235/2004 Coll., on Value Added Tax. After this period, the controller is obliged to dispose of the personal data. The controller undertakes to process personal data used for sending commercial communications (direct marketing) for a period of 3 years from the date of obtaining the personal data from the customer. After this period, the controller is obliged to dispose of the personal data. In accordance with Recital 70 and Article 21 of the GDPR, the controller explicitly informs the customer that with regard to personal data processed for direct marketing purposes (including profiling related to such direct marketing), the customer has the right to object at any time, free of charge, to such processing to the extent that it relates to such direct marketing, whether it is initial or further processing. If the customer objects to the processing of personal data for the purposes of sending commercial communications (direct marketing), the controller undertakes that the personal data will no longer be processed for these purposes.

Categories of Personal Data Recipients and Data Transfers

The controller declares that personal data will be accessible only to the relevant employees of the controller, who are obliged to maintain confidentiality about such data, as well as about security measures, the disclosure of which could compromise the protection of this personal data. The controller declares that the personal data – email address – will be transferred for the purpose of sending commercial communications (direct marketing) to PLAVBY LODÍ PRAHA, s.r.o., which will store the data, as this company manages the distribution of commercial communications for the controller. The obligation of confidentiality about personal data also applies to the relevant employees of the data processor. The controller also declares that personal data will not be transferred to third countries or to any international organization.

Automated Decision-Making

Customer personal data will not be subject to automated decision-making under Article 22 of the GDPR. The controller notifies the customer that profiling will occur (a form of automated personal data processing involving the use of personal data to evaluate certain aspects relating to the customer, particularly to analyze or predict aspects related to personal preferences and interests). The controller uses profiling solely for the purpose of personalizing service offers (targeted advertising). If the customer objects to profiling, the controller undertakes to cease profiling in relation to the customer.

Data Subject Rights

The controller informs the data subject of the rights arising from the GDPR, in particular:
  • The right to access personal data (the data subject has the right to obtain confirmation from the controller whether or not personal data concerning them is being processed, under Article 15 of the GDPR);
  • The right to rectification (the data subject has the right to have inaccurate personal data concerning them corrected by the controller without undue delay, as well as the right to have incomplete personal data completed, under Article 16 of the GDPR);
  • The right to erasure (the data subject has the right to have the controller erase personal data concerning them without undue delay where one of the reasons listed in Article 17 of the GDPR applies);
  • The right to restriction of processing (the data subject has the right to have the controller restrict processing in the cases set out in Article 18 of the GDPR);
  • The right to data portability (the data subject has the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to whom the personal data were provided, as per Article 20 of the GDPR); this right may be exercised only where personal data are processed for the purpose of contract performance in accordance with Article 20 of the GDPR.
  • The right to object (the data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them that is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on these provisions, under Article 21 of the GDPR); the customer may exercise the right to object only in relation to the processing of personal data for the purpose of sending commercial communications (direct marketing), which includes profiling related to such direct marketing under Article 21 of the GDPR (see above);
  • The right not to be subject to a decision based solely on automated processing (the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, under Article 22 of the GDPR);
  • The right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochora 727/27, 170 00 Prague 7, Czech Republic.

Data Protection Officer

In accordance with Article 30(1)(a) of the GDPR, the controller provides the customer with contact information for the Data Protection Officer. All your questions, suggestions, or other inquiries related to the processing of your personal data can be sent to: dotazy@plavbylodipraha.cz

Conclusion

The customer hereby declares that they have been duly informed by the controller about the processing of personal data in accordance with Article 13 of the GDPR and that the personal data provided are accurate and truthful.
ship-red

PLAVBY LODÍ PRAHA, s.r.o.

Antala Staška 1859/34
140 00 Praha 4

Tel: +420 608 713 778

E-mail: 

Facebook-f Instagram

Sightseeing Cruises:

Boat hire:

Gift Vouchers
Special Cruises

Language Versions:

© All Rights Reserved.

Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies to provide you with the best possible user experience. Cookie information is stored in your browser and performs functions such as recognizing you when you return to our website and helping our team understand which sections of the website you find most interesting and useful.