in accordance with Article 13
of the Regulation of the European Parliament and the Counsel (EU) 2016/679 of 27th April 2016, the General Data Protection Regulation (“GDPR”)
For the purposes of GDPR, the personal data administrator is:
EasyBnB s.r.o. with its address at V Horkách 1730/3, Nusle, 140 00 Praha, ID No: 051419154, registered in the register kept by the Municipal Court in Prague, inset C258919
The administrator shall process the following personal data of the customer (third party): name and name and surname, date of birth, place of permanent residence, contact address, e-mail, telephone number, bank account number
The legal reason for processing personal data is:
Personal data must be processed for the purposes listed below:
Personal data that we process for any legal reason(s) other than your consent, shall be processed by the administrator and stored for a time period which is necessary for the above listed purposes, but in no case longer than five (5) years (or any other time period prescribed by a legal act, if longer). Personal data, which we process based on your consent, are processed for a time period for which a consent was granted or until such consent is withdrawn, in any case for a maximum time period necessary for the above listed purposes, but in no case longer than five (5) years (or any other time period prescribed by a legal act, if longer).
The administrator only processes personal data which you have provided.
The processing of the personal data is carried out by the administrator. Nonetheless, personal data may also be processed by:
The personal data which you will provide to us for the above listed purposes shall be stored in a secure database that can only be accessed by:
The administrator does not intend to transfer the personal data to a third country or an international organisation.
The “automated processing” of the personal data is a commonly used form of personal data processing using computer technology, without human intervention.
The administrator may use automated processing when processing personal data for the above listed purposes, but there is no automated decision making or profiling when processing personal data. The only consequence of automated processing is the attainment of the above listed purposes (e.g. provision of services) and the only reason for the automated processing is to facilitate the attainment.
You have the right to request from the administrator access to personal data and information on measures taken and other information on their processing in accordance with Article 12 of the GDPR, in particular: the purpose of the processing; the category of personal data concerned; recipients or categories of recipients to whom personal data have been or will be disclosed; the planned period for which personal data will be stored; all available information about the personal data source, unless it is obtained from you as a data subject; whether automated decision-making, including profiling, occurs. You can contact the administrator via the contact above.
With limited exceptions (referred to in Article 22 of the GDPR), you have the right not to be subject to a decision based solely on automated processing.
In certain cases (provided for in Articles 16 and 17 of the GDPR), you have the right to request the rectification or deletion of personal data; the right to limit the processing of personal data (under Articles 18 and 19 of the GDPR); the right to data portability (under Article 20 of the GDPR). You can contact the administrator via the contact above.
You have the right to object to processing of personal data (under Article 21 of the GDPR). If you have any doubts about compliance with personal data processing obligations, you can contact us by email:
firstname.lastname@example.org you can contact the Office for Personal Data Protection, address: Pplk. Sochora 727/27, 170 00 Prague 7-Holesovice.
In the event that your informed consent to the processing of personal data is necessary (we will provide you with informed consent), you have the right to withdraw the consent at any time (according to Article 7 of the GDPR). If you wish to withdraw your consent, please contact the administrator using the contact details above. The withdrawal of consent shall not affect the legality of the processing based on the consent given before its withdrawal.
The exercise of the above rights shall be free of charge, except in the case of repeated applications which are manifestly unfounded or disproportionate. In such a case, the administrator may impose a reasonable fee or refuse to comply.