Privacy Policy

The purpose of this notice is to provide you with information about what personal data we collect, how we handle it, from what sources we obtain it, for what purposes we use it, to whom we may disclose it, where you can obtain information about your personal data and what your individual rights are in the area of personal data protection.

Please familiarize yourself with the contents of this communication, and we will be happy to answer any questions you may have at our headquarters at Mariánskolázeňská 2 36001 Karlovy Vary, e-mail info@cisarskelazne.cz and/or telephone +420606096193.

1. General information

Our organisation is obliged to process certain personal data with regard to its business activities, in particular for the purpose of fulfilling contractual obligations. In this respect, we would not be able to provide you with our products/services at all without your personal data.

We also process your personal data beyond the scope of our obligations for the purposes of taking care of you and our other clients, to further develop our business relationship and to address you with a targeted offer of our products/services. For this we need to obtain your consent. In view of the focus of our products/services, the age of maturity threshold for granting valid consent to the processing of personal data without the consent of the data subjects' legal representatives will be respected.

I.1. Principles of personal data processing

When processing your personal data, we honour and respect the highest possible standards of data protection and in particular adhere to the following principles:

(a) We always process your personal data for a clearly and comprehensibly stated purpose, by the stated means, in the stated manner, and only for the period of time necessary in relation to the purposes of processing; we only process accurate personal data of our clients and we have ensured that the processing is relevant to the stated purposes and necessary for the fulfilment of those purposes;

(b) We protect your personal data as confidential information; therefore, we process clients' personal data in a manner that ensures the security of such data and that prevents any unauthorized or accidental access to, alteration, destruction or loss of, unauthorized transfer of, or other unauthorized processing of, or other misuse of, clients' personal data;

(c) we always inform you in a comprehensible manner about the processing of your personal data and about your rights to accurate and complete information about the circumstances of this processing, as well as about your other related rights;

(d) we have set up and maintain appropriate technical and organisational measures in our organisation to ensure a level of security appropriate to the potential risks; all persons who come into contact with the personal data of clients have a duty of confidentiality with regard to information obtained in connection with the processing of such data.

1. Information on the processing of personal data

II.1. Information on the administrator

We are the controller of your personal data, i.e. Císařské lázně, with its registered office at Mariánskolázeňská 2
36001 Karlovy Vary, ID 75153033, a contributory organization.

II.2. Purposes of processing and legal basis for processing

II.2.1. Processing of personal data without your consent

These are generally situations where you are obliged to provide us with certain personal data as a condition for us to provide you with our product/service, or where we are entitled to process your personal data obtained by other means.

(a) We are legally entitled to process your personal data without your consent for the following purposes of complying with our legal obligations, in particular

(i) preventing damage to our organisation's property;
(ii) preventing fraudulent conduct to which our organisation may be exposed;
(iii) complying with any client identification and control obligations under the Act on Certain Measures against Money Laundering and Terrorist Financing;

(b) entering into or performing a contract with you.

This is in particular the actual implementation of a contractual relationship or other performance of a contract between our organisation and you. The personal data is necessary, among other things, to enable the contractual relationship to be carried out without unreasonable legal risks, including the negotiation of the conclusion or modification of a contract with you.

(c) Protection of rights and legally protected interests, in particular for

(i) protecting the rights and legally protected interests of our organisation, collecting debts, realising collateral or otherwise enforcing claims, developing and evolving the services provided;
(ii) negotiations with interested parties on the assignment of our organisation's claim against the client or on other forms of transfer or assignment of the claim, including the related realisation, and other related negotiations with third parties, in particular informing the providers of related collateral, etc;
(iii) handling any disputes, in particular for the purposes of litigation or other disputes.

(d) Our legitimate interests.

This is particularly the case where there is a contractual/customer relationship between you and our organisation.

II.2.2. Processing of personal data with your consent

These are generally situations where you voluntarily consent to us processing your personal data. Based on your consent, our organisation processes your personal data for the following purposes:

(a) the exercise of rights under a contract with you; this is where your personal data is required for the performance of the contract;

(b) client care; these are activities that do not constitute the performance of a contract or other lawful framework for processing personal data and include the following activities:

(i) market research;
(ii) monitoring the behaviour of clients on our organisation's website in relation to the services offered (this purpose does not therefore refer to the mere acquisition of information about the behaviour of users visiting our organisation's website through cookies, which is described below in the article on electronic means of communication and mobile applications);

(c) offering products and services; this includes, but is not limited to, disseminating information and offering our products and services by various means (mail, electronic means including e-mail and messages sent to mobile devices, telephone calls and through websites).

The provision of personal data for the purposes of the performance of the contract and the provision of personal data for the purposes of your care are contractual requirements of ours and failure to provide them may result in a failure to enter into a contract or to provide adequate care.

II.3. Scope of processing of personal data of clients

Our organization processes your personal data to the extent necessary to fulfill the above purposes. We process contact data (contact addresses, telephone numbers, e-mail and fax addresses or other similar contact data), identificationdata (first name, surname, date of birth, permanent address, in the case of a client of a natural person - entrepreneur, also ID number and VAT number) and camera records.

II.4. Method of processing personal data

The way our organisation processes your personal data includes manual and automated processing in our organisation's information systems and in physical form.

Your personal data is processed primarily by employees of our organisation and, to the extent necessary, by third parties. Prior to any transfer of your personal data to a third party, we will always enter into a written contract with that party which contains the same safeguards for the processing of personal data as our organisation itself complies with in accordance with its legal obligations.

II.5. Recipients of personal data

Your personal data is disclosed in particular to employees of our organization in connection with the performance of their work duties, which require the handling of personal data of clients, but only to the extent necessary in each case and in compliance with all security measures.

In addition, your personal data is passed on to third parties involved in the processing of personal data of our clients or may be disclosed to them for other reasons in accordance with the law.

The transfer occurs mainly towards:

(a) our law firm;

(b) our accounting and tax advisory firm;

(c) our marketing agency;

(d) processors who provide server, web, cloud and IT services to us.

Prior to any transfer of your personal data to a third party, we will always enter into a written contract with that party, in which we will regulate the processing of personal data in such a way that it contains the same safeguards for the processing of personal data as our organisation itself complies with in accordance with its legal obligations.

II.6. Period of processing of personal data

Personal data of our clients is processed by our organization only for the time necessary for the purposes of processing. We assess on an ongoing basis whether there is a continuing need to process certain personal data necessary for a particular purpose. If we determine that they are no longer necessary for any of the purposes for which they were processed, we destroy the data. However, internally, we have already assessed the normal useful life of personal data in relation to certain purposes of processing personal data, at the end of which we assess the need to process the relevant personal data for that purpose particularly carefully. In this context, it also applies that personal data processed for the purposes of:

(a) we process the performance of the contract for the duration of the contractual relationship with the client; furthermore, the relevant personal data are usually usable for a period of ten years;

(b) we process the offering of products and services for the duration of the contractual relationship; furthermore, the relevant personal data are usually usable for a period of ten years;

(c) client care is processed for the duration of the contractual relationship with the client; furthermore, the relevant personal data is usually usable for a period of ten years;

(d) the protection of rights and legally protected interests in the form of CCTV footage; furthermore, the personal data concerned are normally usable for a period of fourteen days.

II.7. Right to withdraw consent

In this notice, we have explained the reasons why we need your personal data and that we may only process it for certain purposes with your consent. You are not obliged to consent to the processing of your personal data by our organisation and you are entitled to withdraw your consent. We would like to remind you that we are also entitled to process certain personal data for certain purposes without your consent. If you withdraw your consent in this case, we will stop processing the relevant personal data for the purposes requiring the relevant consent, but we may be entitled or even obliged to continue to process the same personal data for other purposes.

If you wish to withdraw your consent to the processing of personal data, please contact us at our headquarters at 2 Mariánskolázeňská Street
36001 Karlovy Vary or by e-mail at info@cisarskelazne.cz.

II.8. Sources of personal data

We collect personal data of our clients mainly:

(a) from the clients themselves;

(b) from publicly available sources (public registers, records or lists);

(c) from potential prospects for our organisation's services as part of marketing events and campaigns;

(d) from its own activities, by processing and evaluating other personal data of clients;

(e) from CCTV footage.

II.9. Your rights in relation to the processing of your personal data

You can exercise all your rights at our headquarters at Mariánskolázeňská 2
36001 Karlovy Vary or by e-mail at info@cisarskelazne.cz.You can also file a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

II.9.1. The right of access means that you can ask us at any time to confirm whether or not the personal data concerning you are being processed and, if so, for what purposes, to what extent, to whom they are disclosed, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether the processing of your personal data results in automated decision-making, including possible profiling. You also have the right to obtain a copy of your personal data, the first provision of which is free of charge, and we may require reasonable reimbursement of administrative costs for further provision.

II.9.2. The right to rectification means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.

II.9.3. The right to erasure means that we must erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are required to do so by law.

II.9.4. The right to restrict processing means that until we have resolved any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only store it and, where appropriate, use it to establish, exercise or defend legal claims.

II.9.5. The right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or on the grounds of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

III. Electronic means of communication

Our organization uses numerous technologies in the course of its business activities to make it as convenient as possible for you to access us and our products/services. This includes in particular services related to the use of the Internet and the use of social networks.

III.1. Social networks

You can reach us, among other things, via various social networks. We use these communication channels mainly as marketing tools, we do not currently provide our products/services through them.

Contact details

Císařské lázně, contributory organization
Mariánskolázeňská 2
360 01 Karlovy Vary
Czech Republic
Website: https:/www.cisarskelazne.cz
E-mail: info@cisarskelazne.cz
Phone number: +420 606 096 193

 

V. Final Provisions

V.1 This notice is issued for an indefinite period of time and becomes effective on 26.02.2024.

V.2. We may amend this notice at any time by issuing a new full version; the current version is published on our website and is also available at our registered office.

V.3. Unless expressly stated otherwise, all information provided herein also relates to the processing of personal data of potential clients, i.e. persons with whom we have not yet entered into a contractual relationship but with whom we are already in contact. To the extent applicable, the information provided here also applies to the processing of personal data of other persons with whom our organisation is in direct contact, although we do not have a contractual relationship with them (e.g. representatives of legal entities).