Information on the processing of personal data

Information on the processing of personal data and instructions pursuant to Act No. 101/2000 Coll., on the protection of personal data, as amended (hereinafter referred to as the “Personal Data Protection Act”) and consent to the use of electronic contact details for the purpose of disseminating commercial communications by electronic means within the meaning of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts, as amended (hereinafter referred to as the “IS Services Act”)

Amenity Resorts s.r.o., with its registered office in Prague 4-Kunratice, Ratajova 1113/8, ID No.: 27650626, e-mail contact: marketing@amenity.cz (hereinafter referred to as the “Company”) processes or will process your personal data as a personal data controller, all within the meaning of the Personal Data Protection Act, which you have provided or will provide to the Company in connection with the provision of accommodation services by the accommodation provider (the Company) in the facilities it operates (complex of accommodation and recreational sports facilities – Amenity Resorts and Hotel Bouda Helena).

In accordance with Section 5(4) and Section 11 of the Personal Data Protection Act, we hereby inform you that:

1. Your personal data, as well as that of your fellow travelers, which must be filled in (or is automatically filled in according to the data entered) in the reservation form located on the website www.amenity.cz (hereinafter referred to as the “reservation form”) is provided for

i. the purposes of negotiating, concluding, and fulfilling the accommodation contract and for the possible enforcement of claims arising therefrom (except for the personal data of fellow travelers), and if you choose trip cancellation insurance, then also for

ii. the purposes of keeping a record book and fulfilling the Company’s obligations as an accommodation provider in accordance with Act No. 565/1990 Coll., and in the case of foreigners, also for

iii. the purposes of keeping a house book and fulfilling the Company’s obligations as an accommodation provider in accordance with Act No. 326/1999 Coll. and for

iv. business and marketing purposes, in particular offering business and services, providing information about offers, events, and activities of both the Company and third parties—the company GOLF EXPLOITATION, s.r.o., ID No. 25154010, with its registered office in Prague 4 – Kunratice, Postal Code 14800, Ratajova 1113/8, e-mail contact info@golf-exploitation.cz and persons forming a group with the Company within the meaning of the relevant legal regulations, in particular the company 3M Developer, a.s., ID No. 27196585, with its registered office in Prague 4 – Kunratice, postal code 14800, Ratajova 1113/8, e-mail contact: info@3mdeveloper.cz, namely offers made by both the Company and these third parties, as well as the sending of commercial communications in accordance with the Act on Information Society Services (excluding the personal data of fellow passengers) by the Company and third parties listed in this paragraph, which will include commercial communications relating to the products, services, and activities of both the Company and third parties listed in this paragraph;

2. Scope of data provision:

1. For the purposes of point 1) i.-name, surname, address, date of birth, e-mail and telephone number, date of arrival and departure, amount for accommodation and services related to accommodation,

2. for the purposes of point 1) ii. – for a natural person who is a payer of local tax, the period of accommodation, purpose of stay, first name, last name, address of permanent residence or place of permanent residence abroad, and identity card or travel document number,

3. for the purposes of point 1) iii. – name and surname of the accommodated foreigner, day, month, and year of birth, nationality, travel document number, start and end of accommodation, and

4. for the purposes of point 1 iv. – name, surname, address (including telephone number and email address);

2. given the nature of existing (and potential) mutual relationships (contractual relationships), the provision of the above data and/or consent to its processing (if required) is voluntary. However, refusal to provide the data to the extent required will generally result in the inability to conclude the relevant contract (data provided for the purposes set out in point 1 i.-iv.). The company may process personal data and distribute commercial communications only with the consent of the person to whom the data relates, unless otherwise provided by law. The Personal Data Protection Act and the IS Services Act provide for exceptions where consent to the processing of personal data is not required. The Personal Data Protection Act does so in Section 5(2), where the processing of data is necessary for the conclusion and performance of contracts or for the protection of the rights and legally protected interests of the Company (data under point 2)(a) and b) or to comply with a legal obligation imposed on the Company by law (data under point 2) letters c) and d)), and further in Section 5(5), where the Company, if it has obtained personal data from you in connection with its activities, may use the data for marketing purposes—offering goods or services—to the extent of the data name, surname, and address. The IS Services Act provides for an exception in § 7, where consent is not required for sending commercial communications relating to own similar products and services, if the Company or companies have obtained electronic contact details for e-mail from their client in connection with the sale of a product or service in accordance with the requirements of the IS Services Act, provided that the customer has the option to refuse consent in the manner prescribed by law, if they have not already done so. The client/customer may revoke their consent to the processing of the personal data provided at any time in writing, with the processing of data for commercial and marketing purposes and the sending of commercial communications by e-mail to marketing@ amenity.cz or by clicking on the hyperlink “Unsubscribe” located in the footer of the newsletter sent from the domain amenity.domainmail.cz or amenity.cz, you can express your disagreement at any time, thereby refusing consent to the use of your email address. Given that the Company, or companies forming a group within the meaning of applicable law (in particular 3M Developer, a.s., ID No. , with its registered office in Prague 4 -Kunratice, postal code 14800, Ratajova 1113/8) and GOLF EXPLOITATION s.r.o., ID No. with its registered office in Prague 4 – Kunratice, postal code 14800, Ratajova 1113/8, which, like the Company, operate in the field of accommodation and sports and recreational services (a complex of accommodation and recreational sports facilities – Amenity Resorts and Hotel Bouda Helena) intend to send you electronic communications and offers in the field of marketing, offers, and sales support relating to their entire range of services and products, the client’s consent is required for these purposes. If the client does not refuse consent to the sending of commercial communications and the processing of personal data for these purposes within the Order in accordance with the General Terms and Conditions (in the registration form or by other explicit and demonstrable expression of the client’s will of the same content if the Order is not made via the website www.amenity.cz or www. hotel-bouda-helena.cz), the client grants this consent for commercial and marketing purposes—offers of goods, services, and products and information about events and activities of both the Company and the companies listed in this point 3) sent by these companies electronically using the client’s email address and for the processing of personal data for these purposes (including the transfer of data between these persons as processors or persons cooperating within the meaning of Section 14 of the Personal Data Protection Act to the extent necessary for the given purpose);

3. Personal data may be processed for the period necessary to achieve the specified purposes for which the personal data are processed, but no longer than for the duration of the relevant contract or until the rights and obligations arising from the contract have been fully settled (or for the period specified by the relevant legal regulations). in the case of data processing for business and marketing purposes, including the sending of commercial communications in accordance with the Information Society Services Act, for an indefinite period;

4. As a personal data controller, the company is entitled, on the basis of a contract pursuant to Section 6 of the Personal Data Protection Act, to entrust the processing of personal data to another person as a processor, including the transfer of personal data for a defined purpose and scope of processing. In the case of data under point 2) letter e) processed for the purposes specified in point 1) letter v), these are companies forming a group within the meaning of the applicable legal regulations (in particular 3M Developer, a.s., ID No. 27196585, with its registered office in Prague 4 – Kunratice, postal code 14800, Ratajova 1113/8), e-mail contact info@3mdeveloper.cz, and GOLF EXPLOITATION s.r.o., ID No. 25154010, with its registered office in Prague 4 – Kunratice, postal code 14800, Ratajova 1113/8, e-mail contact info@golf-exploitation.cz The Company may also disclose and transfer the provided data to persons pursuant to Section 14 of the Act cooperating with the Company as a controller on the basis of a contract, only to the extent and under the conditions specified by the controller or processor; these persons have a legal or contractual obligation of confidentiality;

5. The personal data provided will be processed (manually or using computer technology) by persons specifically authorized to do so. This personal data will be stored securely in electronic or paper form with secure access;

6. The company is obliged (and, on the basis of its instructions, the processor is also obliged) to destroy personal data as soon as the purpose for which it was processed ceases to exist, or at the client’s request in accordance with § 21 of the Personal Data Protection Act;

7. The client has the right under Sections 11, 12, and 21 of the Personal Data Protection Act, in particular the right to access their personal data, and upon written request from the client, the personal data controller will provide information about the personal data processed about them free of charge;

8. If the client believes that the personal data controller or processor is processing their personal data in violation of the protection of their private and personal life or in violation of the Personal Data Protection Act, they have the right to:

i. request an explanation from the personal data controller or processor;

ii. request that the personal data controller or processor remedy the situation; the personal data controller or processor is obliged to remedy the situation immediately if the client’s request is found to be justified;

9. The client has the right to contact the Office for Personal Data Protection (www.uoou.cz) with a suggestion or complaint if the personal data controller or processor does not comply with your request under the previous paragraph; you can also contact this office directly.

10. The company declares that it will collect personal data to the extent necessary to fulfill the specified purpose and process it only in accordance with the purpose for which it was collected.