Personal Data Processing and Protection
Information Memorandum of the accommodation facility Hotel Mirra in accordance with the GDPR

Data Controller: HorKr s.r.o.
Registered Office / Address: náměstí J. A. Alise 235, Příbram VI č.p. 235 - Březové Hory
Company ID (IČO): 284 63 803
Tax ID (DIČ): CZ284 63 803
E-mail: recepce@hotelmirra.cz
Phone: +420 730 116 611

Please take the time to read the following information regarding the processing and protection of your personal data by HorKr s.r.o.
 

1. WHAT PERSONAL DATA DO WE PROCESS?
   In principle, we process personal data based on the following legal grounds pursuant to the GDPR:
    
   1. Based on performance of a contract and legal obligations:
       
      1. Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
          
      2. Article 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
          
   2. Based on your consent:
       
      1. Article 6(1)(a) GDPR: The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
          
   3. Based on the controller's legitimate interest:
       
      1. Article 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
          
2. TYPES OF PERSONAL DATA COLLECTED AND PROCESSED
   We collect the following data about users of our services and accommodated guests:
    
   1. Contact forms: Name, e-mail, phone number, and where applicable address, company name, registered office, and Company ID.
       
   2. Registration forms and service subscriptions: Name, e-mail, address, date of birth, geographical location, or company details obtained when registering for Hotel events or services.
       
   3. Cookies: Data about users obtained via cookie files during visits to the Hotel website.
       
   4. Competitions and questionnaires: Data from consumer competitions, surveys, and questionnaires voluntarily filled out by the user.
       
   5. Careers: In the case of a job applicant, personal data related to the recruitment process.
       
3. PURPOSES OF PROCESSING AND COLLECTING PERSONAL DATA
   The provided data is collected primarily for the purpose of:
    
   1. Provision of services: Use of services and products provided by the Hotel and settlement of all rights and obligations arising from an order or accommodation reservation.
       
   2. Competitions: Awarding and delivery of prizes in consumer competitions organized by the Hotel.
       
   3. Communication: Management of contact forms and communication with customers.
       
   4. Personalization: Tailoring services to the needs and interests of individual users and participation in Hotel events.
       
   5. Marketing and commercial communications: Sending newsletters in accordance with Act No. 480/2004 Coll. Unsubscribing is possible in the footer of every e-mail or by contacting recepce@hotelmirra.cz.
       
   6. Delivery of shipments: Sending gifts, goods, or prizes ordered via the Hotel's web portals.
       
   7. Anonymous targeted advertising: Online behaviorally targeted advertising in an anonymized form without the possibility of identifying a specific natural person.
       
   8. Recruitment: Evaluation of job applications and verification of information during the recruitment process.
       
   9. Statistics: Anonymous statistical recording of traffic and usage of the website.
       
   10. Dispute resolution: Resolution of potential disputes arising from accommodation, recruitment, or business relationships.
        
   11. Compliance with legal obligations: Fulfilling tax, accounting, and accommodation duties (e.g., Act on Local Fees, Act on the Residence of Foreign Nationals).
        
   12. Data minimization: The Hotel does not collect excessive amounts of personal data that are not relevant to the stated purposes.
        
4. CONDITIONS FOR EXPRESSING CONSENT TO PERSONAL DATA PROCESSING
    
   1. Demonstration of consent: The controller is able to demonstrate that the data subject has consented to processing.
       
   2. Clarity: A request for consent in a written declaration is presented in a clear, understandable manner and distinguishable from other matters.
       
   3. Withdrawal of consent: The data subject has the right to withdraw their consent at any time as easily as it was given.
       
   4. Free will: Consent must be freely given, specific, informed, and unambiguous.
       
5. WHAT RIGHTS YOU HAVE IN CONNECTION WITH PERSONAL DATA PROTECTION
   In relation to your personal data, you have the following rights:
    
   1. Right to information: Information about the identity of the controller, processing purposes, and data recipients.
       
   2. Right of access: The option to request information about processed data via e-mail at recepce@hotelmirra.cz.
       
   3. Right to rectification and completion: Correction of inaccurate data or completion of incomplete personal data.
       
   4. Right to erasure (right to be forgotten): Erasure of data if it is no longer necessary or was processed unlawfully.
       
   5. Right to restriction of processing: Restriction of the scope or methods of personal data processing.
       
   6. Right to notification: Being informed about rectifications, erasures, or restrictions of processing.
       
   7. Right to data portability: Obtaining and transferring data to another controller in a structured format.
       
   8. Right to object: Objecting to processing carried out on the basis of a legitimate interest.
       
   9. Right to withdraw consent: Withdrawal of granted consent at any time with future effect.
       
   10. Right to be informed: Notification in the event of a high-risk personal data breach.
        
   11. Right to lodge a complaint with a supervisory authority: Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
        
6. RETENTION PERIOD OF PERSONAL DATA
    
   1. Retention period: Personal data is retained for the period necessary to fulfill the purpose for which it was processed, for a maximum of 10 years, unless special legal regulations (tax, accounting) stipulate otherwise.
       
   2. Statutory disclosure: Based on legal provisions, we are obliged to provide data in the following cases:
       
      1. Request by a court, the Police of the Czech Republic, or other law enforcement authorities.
          
      2. Enforcement of the terms of a contract with the user.
          
      3. Protection of the security and integrity of the Hotel's website and systems.
          
      4. Protection of the rights, property, and safety of customers and other persons.
          
7. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
    
   1. Non-sharing principle: HorKr s.r.o. does not share personal information with third parties without a legal ground or user consent.
       
   2. Processors: Verified processors in the following categories may have access to personal data:
       
      1. Data centers, hosting, and reservation accommodation systems.
          
      2. Providers of marketing, survey, and analytical services.
          
      3. Legal, tax, accounting, and auditing firms.
          
      4. Providers of IT management and information security services.
          
   3. Transfer outside the EU/EEA: Data transfers outside the EU/EEA take place strictly in accordance with the GDPR and on the basis of appropriate safeguards (e.g., standard contractual clauses).
       
8. AUTOMATED PROCESSING AND PROFILING
    
   1. During the processing of your personal data, no automated decision-making or profiling takes place that would have legal effects on you or similarly significantly affect you.
       
9. PERSONAL DATA SECURITY
    
   1. Technical measures: All personal data is secured using standard procedures and modern technologies.
       
   2. Security inspection: We regularly test security measures and systems that protect data against unauthorized access, loss, or misuse.
       
   3. User cooperation: We recommend users keep their access passwords confidential, as standard e-mail communication may not always be encrypted.
       
10. CONTACT INFORMATION
    In case of questions, requests, or withdrawal of consent, you may contact us:
     
    1. E-mail: recepce@hotelmirra.cz
    2. Phone: +420 730 116 611
    3. Address: HorKr s.r.o., náměstí J.A. Alise 235, Příbram VI č.p. 235 - Březové Hory
        
11. BASIC DEFINITIONS OF TERMS
     
    1. Personal data: Any information relating to an identified or identifiable natural person.
        
    2. Processing: Any operation performed on personal data (collection, storage, adaptation, erasure, etc.).
        
    3. Controller: The entity determining the purposes and means of personal data processing (HorKr s.r.o.).
        
    4. Processor: A natural or legal person processing personal data on behalf of the controller.
        
    5. Consent: A freely given, specific, informed, and unambiguous indication of the data subject's wishes.
        
12. MAIN PRINCIPLES OF PERSONAL DATA PROCESSING
    Personal data must be:
     
    1. Processed lawfully, fairly, and transparently
    2. Collected only for specified, legitimate purposes
    3. Adequate, relevant, and limited to what is necessary
    4. Accurate and kept up to date
    5. Kept for no longer than is necessary
    6. Properly secured.
        
13. Identification Data of the Operator
    HorKr s.r.o.
    Company ID (IČO): 284 63 803
    Tax ID (DIČ): CZ284 63 803
    Registered Office and Business Premises: náměstí J. A. Alise 235, Příbram VI č.p. 235 - Březové Hory
    Operating the Accommodation Facility: Hotel Mirra
    Phone Contact: +420 730 116 611
    E-mail: recepce@hotelmirra.cz