Privacy Policy
1. Data Controller
The controller of personal data is:
FD Antonínov s.r.o.
Company ID (IČO): 14309220
Registered Office: U Hellady 697/4, Prague 4, 140 00, Czech Republic
E-mail: ubytovani@apartmanyflora.cz
Telephone: +420 774 450 300
(hereinafter referred to as the “Controller”)
The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable laws of the Czech Republic.
2. Personal Data We Process
In connection with reservations and the provision of accommodation services, we may process the following personal data:
- first and last name,
- date of birth,
- nationality,
- residential address,
- e-mail address,
- telephone number,
- reservation and accommodation details,
- payment information,
- data required by law for maintaining the guest register and reporting the stay of foreign nationals.
3. Purposes and Legal Basis for Processing
Provision of Accommodation Services
We process personal data for the purpose of:
- creating and managing reservations,
- communicating with guests,
- providing accommodation services,
- issuing invoices and tax documents.
Legal basis: performance of a contract.
Compliance with Legal Obligations
We also process personal data in order to:
- maintain the guest registration book,
- fulfil obligations under legislation governing local accommodation fees,
- comply with legislation relating to the residence of foreign nationals,
- maintain accounting and tax records.
Legal basis: compliance with legal obligations.
Legitimate Interests
The Controller may process personal data for the purpose of:
- protecting its property,
- handling complaints and claims,
- recovering outstanding debts,
- protecting and enforcing legal rights.
Legal basis: the Controller’s legitimate interests.
4. Data Retention Period
Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected.
Accounting and tax documents are retained for the period required by applicable legislation, generally 10 years.
Data processed to comply with statutory obligations are retained for the period specified by the relevant legal regulations.
5. Disclosure of Personal Data
Personal data may be disclosed to:
- the provider of the booking system,
- the web hosting provider,
- the accounting or tax adviser,
- public authorities where required by law.
Appropriate contractual and technical safeguards are in place with all data processors to ensure the protection of personal data.
Personal data may also be disclosed to payment service providers, cloud service providers, and IT support providers where necessary for the operation of the booking system and the provision of accommodation services.
6. Booking Platforms
If a reservation is made through a third-party booking platform (such as Booking.com), personal data are also processed in accordance with the privacy policy and terms of that booking platform.
7. CCTV System
The Controller operates a CCTV system in selected common areas and outdoor areas of the property for the purpose of protecting property and ensuring the safety of guests.
The legal basis for this processing is the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR.
Recordings are generally retained for a maximum of 7 days, unless a longer retention period is necessary for investigating a security incident, protecting legal claims, or complying with legal obligations.
Entrances to the property and monitored areas are clearly marked with CCTV information signs.
Information regarding the operation of the CCTV system is available on the Operator’s website and at the entrance to the property.
8. Cookies
The website may use technical cookies that are necessary for its proper operation.
If analytical or marketing cookies are used, website visitors will be informed through the website’s cookie banner.
9. Data Subject Rights
KEvery individual has the right to:
- request access to their personal data,
- request the correction of inaccurate personal data,
- request the deletion of personal data where there is no legal obligation to retain them,
- request restriction of processing,
- object to the processing of personal data,
- lodge a complaint with the competent supervisory authority.
The supervisory authority in the Czech Republic is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
10. Data Security
The Controller has implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or destruction.
11. Contact Details
If you have any questions regarding the processing of your personal data, please contact us:
E-mail: ubytovani@apartmanyflora.cz
Telephone: +420 774 450 300
12. Final Provisions
This Privacy Policy becomes effective on the date of its publication on the Flora Apartments website.
