Information on the processing of personal data

Information about the processing of personal data

Dear clients, tenants and colleagues,

We hereby provide you with information about your rights related to the processing of your personal data by the administrator, which is the company State Medical Spa Janské Lázně, a state enterprise.

We have done our best to make them as understandable as possible. If there is still something that is not clear to you, or you would like more detailed information about the data we process, please contact us directly using the contacts below.

1. Who processes your personal data?

The personal data controller, i.e. the person who determines the purposes and means and decides on the processing of your personal data for the above-mentioned purpose, is the company State Medical Spa Janské Lázně, a state-owned company, with its registered office at náměstí Svobody 272, 542 25 Janské Lázně, ID: 00024007, registered in the Commercial Register maintained by the Chamber of Commerce in Hradec Králové under file number AXII 253

2. How and why is your personal data processed?

When processing personal data, we comply with the relevant legal regulations, in particular the General Data Protection Regulation ("GDPR").GDPR") and implementing legislation. The processing of your personal data is carried out in order to ensure all our and your rights and obligations arising in particular from legal regulations and contracts. When processing your personal data for this purpose, no automated decision-making or profiling takes place.

3. Which of your personal data do we process?

We only process personal data that we have obtained directly from you or from third parties for the purpose of fulfilling the contract between you and our spa, or for the purpose of fulfilling our legal obligation, or that you have provided to us based on consent for a specified purpose. We process your personal data only for the period strictly necessary for the specified purpose, which results from legal regulations, contracts, legitimate interest, or which was stated in your consent to the processing of personal data.

4. How do we protect your personal data?

You can be absolutely sure that we handle your personal data with due care and in accordance with applicable legal regulations. We are aware of the sensitivity of personal data, and therefore we protect your personal data to the maximum extent possible, which corresponds to the technical level of available means.

5. To whom else do we provide your personal data and why?

We may disclose your personal data to third parties providing support activities for us - in particular software management, only for the purpose of performing these activities. We may also transfer your personal data to third parties for processing to the extent necessary, but only if this is necessary to fulfill our contractual or legal obligation, or if you have given us your consent to do so. These third parties are then in the position of personal data processors and we only make available to them the personal data necessary for the given purpose and we ensure that they also consistently protect your personal data. We carefully select the personal data processors providing the above-mentioned activities, and we also continuously change and supplement them. Given these updates and changes, we are ready to provide you with an up-to-date list of such entities to which the transfer of your above-mentioned data is considered.

We do not transfer your personal data to other countries.

6. What rights do you have regarding your personal data?

In relation to your personal data that we process, you have the following rights that you can exercise against us as the controller:

• the right to obtain confirmation of the (non)processing of your personal data and to access the personal data concerning you that we process;
• the right to correct or supplement your personal data if it is inaccurate or incomplete;
• the right to erasure or restriction of processing of your personal data, if the conditions set out in legal regulations are met (if a legal regulation requires us to store your personal data (e.g. medical records) for a certain period of time, unfortunately we cannot delete them during this period);
• the right to object to the processing of personal data concerning you;
• the right to transfer your personal data to another controller.

You can exercise your rights by submitting a written submission to our company address or to the company email address as specified in this information memorandum.

Given that we process some of your personal data based on your consent, you have the right to withdraw your consent to the processing of such personal data at any time, either by clicking the unsubscribe link in the newsletters sent or by sending an email to gdpr@janskelazne.com.

If you believe that the processing of your personal data is in violation of legal regulations, you have the right to file a complaint with the supervisory authority, which is: Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

If you have any questions regarding the processing of your personal data, you can contact us or our data protection officer directly in writing at the following address: State Medical Spa Janské Lázně, state enterprise, náměstí Svobody 272, 542 25 Janské Lázně, or by phone at +420 499 860 111, or by email at the following email address: gdpr@janskelazne.com.

We believe that the above information was clear and understandable.
Sincerely, Mgr. Martin Voženílek, Director
In Janske Lazne on May 25, 2018

Information on the processing of personal data within the Covid Lázně program (discount vouchers for stays with state support) can be found at here.