Information on the processing of personal data and information on rights in connection with the protection of personal data of customers and business partners of the travel agency ExperienCZE Inc.
Introductory information
Please pay attention to this document, through which we provide you with information about the processing of your personal data and about the rights related to the processing of your personal data within our activities, ie in connection with the services we provide to you. in our other business relationships. Any use of personal data is governed by applicable law, in particular by law. 101/2000 Coll., On the protection of personal data, as amended, and Regulation of the European Parliament and of the Council no. 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data 95/46 / EC (hereinafter referred to as “GDPR”) and Act No. 480/2004 Coll., On Certain Information Society Services, as amended. In accordance with Article 13 et seq. Of the GDPR, we provide you with the following information as data subjects.
1. Who is the manager of your personal information?
Your personal information is managed by ExperienCZE s.r.o. with its registered office at U Skolky 318/12, 326 00, Plzen, Czech Republic, ID: 08750807 registered in the Commercial Register maintained by the Regional Court in Pilsen, Section C, Insert 38699 (hereinafter referred to as “Administrator” or “ExperienCZE”).
For communication with ExperienCZE you can contact the e-mail address info@experiencze.eu or in writing to the correspondence address U Skolky 318/12, 326 00, Pilsen, Czech Republic.
2. What kind of personal data we proces
We only process personal information so that we can offer and provide our services, both individual and service packages and customer support, for the purposes of performing the contract, to comply with our legal obligations and to protect our legitimate interests.
We collect personal information about our suppliers and customers, including potential clients who are interested in our services or who have given us permission to address them with our service offerings. In particular, we process the following categories of personal data:
(a) Basic identification data
Basic personal identifying information is included in each contract you enter into with ExperienCZE. Even within the on-line purchase or demand of services. These usually include title, first name, surname, date of birth, address of residence (street and number, municipality, postcode, country of residence), travel document number, date of issue and validity, issuing country code, citizenship, gender, signature. If you do business, then business name, company ID and registered office.
b) Contact details
Contact details include first and last name, contact address (street and number, municipality, postcode, country of residence), e-mail, telephone.
c) Invoicing and payment information
These are bank details, details of advance payments and surcharges of the prices of purchased services. In case of payment for on-line services, it may also be a payment card number.
d) Information communicated by you in an email conversation or other interaction with you
(e) Data for the transmission of formal documents (licenses, licenses, visas, etc.)
If you apply to ExperienCZE for the provision of formal documents (eg licensing, licenses, visas) or assistance with the relevant embassies, you provide basic identification and contact information for processing and at the same time provide for processing of other data, information and documents to the extent determined by the embassies of the respective countries contained in individual applications, forms and competent authorities or ExperienCZE documents processed in accordance with the requirements of the embassies of the respective countries, surname of your parents, information about your travels, employment, business, health status, event. other required documents, etc.
f) Photographs and videos
In the event that the customer expresses his / her prior express consent, ExperienCZE is entitled to take photographs and videos during his / her use and use them for marketing purposes in the context of promotional materials. The same is true if the customer hands over his own photographs and videos to ExperienCZE.
3. For what purposes we process personal data
In order to better understand the purposes for which we process your personal data, we have divided the processing into two basic parts, when your explicit consent and when not.
3.1. Processing of personal data without your consent (lawful processing)
• a) Processing of personal data of customers and suppliers for the purposes of the contract
We process your personal data for the purposes of the offer, contract and other documents necessary to provide the requested service or set of services, or to provide other performance, incl. necessary communication of ExperienCZE with the customer (or supplier) in order to fulfill the contract. We work with them especially when negotiating the conclusion of the contract, its conclusion, change or administration of your contract and to fulfill the contract. The same necessity applies when requesting and arranging a service or set of services online. In this case, your personal data are processed to the extent necessary to take precautionary measures based on your request / request to process the reservation of services provided by ExperienCZE, or request / request for mediation of services or for the actual conclusion of the contract and its fulfillment. These are all data that are stated in the contract or in the reservation of services incl. their changes. In the case of visa brokerage agreements, all the information given in the applications and forms and in the documents / documents required for issuing the visa as required by the relevant embassies in accordance with the applicable national legislation. The provision of your personal data for this purpose is entirely voluntary, but it is necessary to take precautionary measures on the basis of your request / request, to conclude the relevant contract and fulfill it. In the event that the required personal data are not provided for this purpose, ExperienCZE cannot negotiate and take the necessary precautions before concluding the contract or conclude the contract and ensure fulfillment of the resulting rights and obligations.
• b) Processing of personal data for the purpose of fulfilling a legal obligation
Upon termination of your agreement, ExperienCZE will store and process your personal data specified in the agreement for the purpose of fulfilling its legal obligations, to the extent, under the conditions and for the purposes set forth by the generally binding legal regulations in force. These are mainly tax regulations, accounting and archiving regulations, etc.
• c) Processing of personal data for the legitimate interests of the Administrator
After termination of your agreement, ExperienCZE is authorized to process your personal data to the extent necessary for the purposes of the legitimate interests of the Administrator. The legitimate interest of ExperienCZE as Administrator is:
o to inform you and offer you the services and products of the ExperienCZE travel agency, ie to process your personal data for the purposes of direct marketing in the extent of title, first and last name, residence, contact address, e-mail and telephone number;
o defend legal claims, ie process your personal data to the extent specified in the contract, incl. contact and billing information.
3.2. Processing of personal data with your explicit consent
Processing of personal data for marketing purposes
If you have not been an ExperienCZE customer but wish to be informed about our services and if you expressly consent to this, we process your personal data for marketing purposes. Activities under this purpose include, in particular, offering products and services provided by ExperienCZE, disseminating commercial communications within the meaning of Act No. 480/2004 Coll., On certain information society services, as amended, in particular in the form of emails, reports sent to mobile devices via phone number (SMS, MMS), and last but not least in writing via postal services or by telephone call. For this purpose, ExperienCZE processes your personally identifiable information to the extent of title, first name, surname, residence, contact details according to Article 2 of this document.
ExperienCZE, if Customer expressly agrees beforehand, may take photos and videos while using the Services, or if Customer provides such ExperienCZE photos and records, processes those photos and records for marketing purposes in promotional materials, either in catalogs or other offers services provided by ExperienCZE in physical and electronic form, as well as on ExperienCZE websites and social networks.
The consent given to the processing of your personal data as well as the consent to the taking and use of photographs and videos from the use of services for marketing purposes pursuant to this provision is entirely voluntary, without your consent to the processing of your personal data , disseminate commercial communications, and we will not take and use your photographs and videos while using the services of promotional materials, both in material or electronic form, and on websites and social networks.
You may at any time withdraw your consent to the processing of your personal data, the taking and use of your photos and videos for marketing purposes under this provision at the contacts referred to in Article 6 HOW CAN I WITHDRAW THE CONSENT TO THE PROCESSING OF PERSONS IN THIS DOCUMENT.
4. How long we process personal data
We process and store your personal data for as long as necessary.
• a) Processing of personal data without the need for your consent under the provisions of 3.1.
o We process and store your personal data provided and processed to the extent necessary for the execution of the measures prior to the conclusion of the contract. If the Agreement is not concluded, the personal data provided by you will be stored and processed only for the time necessary to fulfill the legal obligations and legitimate interests of ExperienCZE.
o We process and store your personal data provided and processed for the conclusion and performance of the contract for the duration of the contract with you so that we can provide or mediate services in accordance with such contract or provide other performance under the contract. Upon termination of the contractual relationship and settlement of any obligations arising out of or in connection with the concluded contract, we store your personal data to the extent necessary for the conclusion and performance of the contract for the time necessary to ensure fulfillment of the legal obligations and legitimate interests of ExperienCZE. The period of retention of your personal data is determined in particular by the Civil Code, as well as tax regulations, accounting, archiving, etc.
• b) Processing of personal data with your explicit consent under the provisions of point 3.2.
If you have given us permission to process your personal data for marketing purposes only, we process your personal data for 5 years from the time you give your consent, or until you withdraw your consent to process it, or file an objection.
5. How / from where we collect personal information
We obtain personal data:
o a) directly from you - the customer (or supplier), ie the subject of personal data, when negotiating a contract to take precautionary measures, at the conclusion of the contract and during the duration and performance of the contract;
b) from third parties authorized to do so on the basis of your contractual or other representation to negotiate the implementation of measures prior to the conclusion of the contract, for the conclusion of the contract and performance of such contract for the benefit of third parties pursuant to § 1767 et seq. of the Civil Code, or for other specified purposes;
o c) publicly available registers, lists, registers or websites (eg insolvency register, business register, trade register, real estate register, VAT register etc.).
6. How can I revoke my consent to the processing of personal data for purposes where consent is required
The consent to the processing of your personal data for marketing purposes, the dissemination of commercial communications, as well as the consent to the taking and use of your photos and videos during the use of services for marketing purposes is based on your voluntary decision. This means that you do not have to give such consent or you can withdraw it at any time. We are sorry if you make such a decision, but we fully respect your decision.
What your written withdrawal of consent should normally contain
Who withdraws consent to the processing of personal data. Please provide first name, last name and address.
Please indicate to what specific purpose your processing of your personal data is subject to your withdrawal of consent to the processing of personal data.
How to revoke your consent to the processing of personal data and where to address it
Consent to the processing of your personal data can be revoked:
A declaration sent to the e-mail address info@experiencze.eu or in writing to the mailing address U Školky 318/12, 326 00, Pilsen, Czech Republic.
7. When we process your personal data without entering into a contract with us
We may process your personal data even if you have not concluded a contract with our company. These are cases where the contract with ExperienCZE is concluded by another person (legal or natural) for your benefit according to the provisions of §1767 et seq. of the Civil Code. This is especially the case where you are usually listed on the contract as participants of activities or individual services, etc. In these cases, your personal data ExperienCZE are processed to the extent for the fulfillment of the contract and for purposes where the consent of the data subject is not required.
8. How we process the data
The processing of your personal data is done both manually and automatically in electronic form in ExperienCZE information systems, such as IT applications, software, etc. Your personal data is processed by selected ExperienCZE employees and authorized processors. Prior to the transfer of your personal data to authorized processors, a written agreement on the processing of personal data is always concluded, which contains the same safeguards for the processing of personal data as are legally observed in ExperienCZE.
9. Who has access to your personal information
For the purpose of processing your personal data, ExperienCZE has access to your personal data as Administrator, its authorized employees and also contract processors authorized to process your personal data, especially IT providers, accounting and tax services, intermediaries with whom you negotiate with the contract and you enter into contracts on behalf of and on behalf of ExperienCZE, the contractors who arrange for the provision of services to direct providers of tourism services (accommodation, catering, transport, etc.).
10. To whom your personal information is transferred
Your personal data processed by ExperienCZE for the purpose of taking precautionary measures, contract negotiation, contract conclusion, change or administration of your contract and fulfillment of the contract are provided to the necessary / required extent in addition to the contractually authorized processors
(a) direct suppliers of individual services, in particular experience brokers, accommodation facilities, carriers, delegates, guides, etc. specified in the contract, usually to the extent of title, first name, surname, sex, age of travel document number , code of the issuing country, citizenship;
(b) the relevant visa authorities of each country to the extent required by such authorities, incl. relevant documents.
Where services are provided by suppliers outside the European Economic Area, the necessary personal data will also be transferred to a third country. At the customer's request, ExperienCZE will provide information on whether there is a European Commission decision on adequate data protection, as well as information on appropriate safeguards for the protection of personal data when transferring personal data to a third country.
11. Advise what rights you have in relation to the processing of your personal data
No processing of your personal data is important to us and its protection is a matter of course. You may exercise the following rights when processing personal data:
Right of access to personal data
You have the right to confirm whether or not your personal data are processed and, if so, you have the right to provide information including: (i) the purpose of the processing; (ii) the categories of personal data concerned that are processed; (iv) the intended period of time for which personal data will be stored or, if it is not possible to determine it, the criteria used to determine that period; and to object to this processing; (vi) the right to lodge a complaint with the Office for Personal Data Protection, (vii) information on the source of personal data, (vii) information on whether automated decision-making and profiling is taking place, (ix) information and guarantees in the event of transfer of personal data to a third country or an international organization. You have the right to provide copies of the processed personal data.
Right to repair
Do we process your outdated or inaccurate personal data? For example, have you changed your home address? Please inform us via info@experiencze.eu and we will correct your personal data.
Right to be deleted (right to be forgotten)
In some cases stipulated by law, we are obliged to delete your personal data upon your instruction. However, any such request is subject to an individual evaluation as ExperienCZE has legal obligations or a legitimate interest in retaining personal data.
Right to Restrict Processing
You have the right to ExperienCZE to limit the processing of your personal data if (i) you deny the accuracy of your personal data for the time required to verify the accuracy of your personal data; (ii) the processing of your personal data is unlawful, but you do not ask for the deletion of personal data, but to limit its use; (iii) ExperienCZE no longer needs your personal data for processing purposes, but you require it to determine, exercise or defend your claims; or (iv) you object to the processing of your personal data until it is verified that the legitimate reasons for ExperienCZE outweigh the legitimate reasons for the customer.
Right to data portability
You have the right to collect your personal data processed by ExperienCZE in a structured, commonly used and machine-readable format and to pass it on to another personal data controller if (i) the processing of your personal data is based on consent to the processing of personal data; or (ii) processing is automated. If you wish us to disclose your personal information to another controller or other company, we will pass on your personal information in an appropriate format, unless there are any legal, technical or other significant impediments to your designated entity.
Right to object
If you find out or only believe that the processing of personal data is contrary to the protection of your private and personal life or the law, please contact us and ask us to explain or remedy the defective situation. You can also object directly to automated decision making.
Right to file a complaint or complaint to the Office for Personal Data Protection
You may at any time contact your supervisory authority, the Office for Personal Data Protection, with its registered office at Pplk, with your complaint or complaint regarding the processing of personal data. Sochora 27, 170 00 Prague 7, tel.:+420 234 665 111, website www.uoou.cz.
12. Where you can contact us
If you have any questions about this ExperienCZE travel agency's information obligation, if you would like to exercise your rights regarding the processing of your personal data, please do not hesitate to contact us at info@experiencze.eu or in writing to mailing box U Skolky 318/12, 326 00, Pilsen, Czech Republic.
This document Information about the processing of personal data and information about rights in connection with the protection of personal data of customers of ExperienCZE travel agency is valid as of March 15, 2020 and is continuously updated.