Personal data processing rules
Kouty Ski Centre (www.kouty.cz)
At K3 SPORT, s.r.o., I. P. Pavlova 738/116, Olomouc 779 00, Company ID No: 268 30 248, we take the protection of your personal data seriously. The objective of the document “Personal data processing rules” is to inform you about how the controller processes your personal data, the legal grounds, purposes to which we use the data, period for which we keep your data, what third parties can get access your personal data.
These Personal data processing rules are effective from 7.11.2018 and are issued in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and in compliance with other related legislation.
Our company provides services at the Kouty Ski Centre (see www.kouty.cz), organises trips (see www.dlouhe-strane.cz) and offers accommodation in apartment houses (see www.apartmany-kouty.cz).
We process your personal data that we obtained from you at the time you purchased our products, utilisation of our services, during use of our website, or during communication with you. In this connection, we can collect and process your data particularly in the personal data categories stated below:
Within the framework of our services in the Kouty Ski Centre, we process your personal data for various legal reasons according to the purpose to which we use such data. This concerns the following legal reasons:
Your personal data are processed for the following purposes:
In such case we process mainly your personal identification data, contact data, data related to our communication with you and data on your orders. We process the personal data for this purpose particularly for fulfilment of a contract and provision of these personal data is mandatory and is a condition for provision of our services.
In such cases we process mainly your personal identification data, contact data, data related to our communication with you and data on your orders. We process the personal data for this purpose mainly on the basis of our justified interests.
In this case , we process only the most essential of your data for delivery of information about our products or services to you by e-mail or SMS; this may particularly concern the e-mail address and telephone number. We process the personal data for this purpose on the basis of our justified interests consisting in the effective and targeted promotion of our products and services.
You can reject processing of personal data for the above-stated purpose by submission of an objection to the processing of your personal data.
In such case, we process mainly the Data on your behaviour on the website. We process the personal data for this purpose on the basis of our justified interests consisting in the improvement of the quality of our services.
For this purpose, we process mainly the camera recordings from the Kouty Ski Centre and restaurant facilities operated by the operator of the centre. We process the personal data for this purpose on the basis of our justified interests consisting in protection of our assets, the assets of our customers and other persons within the Kouty Ski Centre, and ensuring the safety of our customers and employees.
In this event, we process only the personal data that we need to fulfil our obligations particularly the identification data, contact data or the data on your orders. We process the personal data for this purpose in order to fulfil the legal obligations, which are stipulated for us under the applicable laws, particularly:
In this case, we process only the personal data which are necessary for us to exercise our rights or legal claims (for instance, in the event of outstanding receivables on the customer’s part), particularly the identification data, contact data, data related to our communication with our customer and the data on all your orders. We process the personal data on the basis of our justified interests.
In the above-stated cases under 3, 4, 5, and 7 you have the right to object to the processing of your personal data (the right to object is described in greater detail in Section VI, para. 6 below).
III. For how long will we process your personal data?
Personal data are processed to the extent absolutely necessary to fulfil the above-stated purposes and for the period absolutely necessary to achieve them or for the duration stipulated by law. After this, the personal data are deleted or anonymised. We process the personal data for the following periods:
In connection with the fulfilment of orders, supply and delivery of goods, handling of complaints, or insured events or promotion of products and services we may provide your personal data to partner companies for the purpose of customer care and advertising agencies for the production and distribution of advertising materials.
We can further provide the personal data in connection with fulfilment of our legal obligations or protection of our interests, particularly to lawyers, auditors, tax advisers, accountants or IT system administrators. Every such subject to whom personal data are provided is contractually obligated to protect your personal data in compliance with the legislation and process them exclusively according to our instructions.
We use the MailChimp platform of The Rocket Science Group LLC to send business messages and we transfer personal data to the USA. The transfer is done on the basis of the so-called Privacy Shield, i.e. the common legal tool of the European Commission and the USA to secure an appropriate level of personal data protection for their transfer to the USA. More information about the Privacy Shield is available here. (hypertext link to https://www.privacyshield.gov/welcome) Processing of personal data by MailChimp is governed by their processing rules available here. (hypertext link to https://mailchimp.com/legal/privacy/)
The security of your personal and other data is important to us. For this reason, we adopted all technical and organisational measures to secure them.
To secure your personal data, we have adopted technical measures to secure the data storages and personal data storages in print format. For transfer of data from our website www.kouty.cz, we exclusively use the HTTPS security protocol and for electronic communication with you we only use a secure and encrypted e-mail connection.
Above the framework of the above-stated technical measures, we also ensure that only authorised persons have access to the personal data in digital and printed format.
In relation to the processing of your personal data, you have the following rights:
In the event that we process your personal data on the basis of your consent, you have the right to revoke your consent at any time. Such revocation of consent shall not affect the legality of the processing of your personal data prior to its revocation.
We do everything possible to process precise personal data. If you ascertain that we are processing incorrect personal data, we shall correct the data or complete them according to your request.
In the cases stated in Art. 18 GDPR, you can also request us to restrict processing of your personal data for a certain period.
Exercise of your rights
You can exercise your rights by submission of a written request to the address K3 SPORT s.r.o., I. P. Pavlova 738/ 16, Olomouc 779 00 or by e-mail sent to the address firstname.lastname@example.org. We shall handle your request immediately, but at the latest within one month. In exceptional cases, particularly for reason of the complexity of your request or large number of such requests, we are authorised to extend this period by two months. In such a case, we shall inform you about the extension and the reasons for it. In the interest of security of your personal data and their protection against access by unauthorised persons to them, we can verify your identity in a suitable manner.
VII. Rules for use of Cookie files
Cookies collect certain information about your behaviour on the web. The validity/functionality of the cookies shall expire either at the end of the session (after the device disconnects from the website/Internet) or after a certain limited period of time. The data on your behaviour on the web are anonymised for reason of maximisation of your privacy, and for this reason, not even we can assign them to a specific user, i.e. a specific person.
The cookies that we use:
Analytical and advertising cookies
Google shall use the information for assessment of use of our website and creation of reports on its activity (for our internal requirements) and provision of other services concerning the activities on our website and use of the Internet in general. The data received via these cookies are also used for promotional purposes where based on these data you could, for instance, receive advertisements of our services also on other websites.
The data generated by the cookie about the use of our website are anonymised, including your IP address. This information is not in any way linked to other information and we are thus not capable of identifying you on their basis. More information about how Google processes data from cookies is available here.
Most of the standard browsers automatically accept cookies already in their default setting. It is possible for your browser to reject or delete the cookies or only allow the use of some cookies. For more information about the use and administration of cookies, you can use the help file in your browser or you can for instance visit the following links according to the browser used:
VIII. Closing provisions