Personal data processing and protection policy

 

Personal data processing and protection policy (GDPR)

Administrator: MC kemp s.r.o.
Company ID: 23558512
VAT ID: CZ23558512
Registered office: Dachova 2198, 508 01 Hořice, Czech Republic
Contact (GDPR): [add email], [add phone number]
Website: www.kemp-dachova.cz

This policy explains how we process the personal data of guests and visitors in connection with reservations, stays, and the provision of our services.

1. Legal framework

We process personal data in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)

  • Act No. 110/2019 Coll., on the processing of personal data and related regulations

MC kemp s.r.o. is a personal data controller within the meaning of the GDPR.

2. What data we process

We typically process the following categories of data:

  • Identification data: first name, last name, date of birth, ID number/VAT number (if applicable)

  • Contact details: email, telephone number, home or business address

  • Reservation and stay details: arrival and departure dates, type of accommodation, number of people, special requests

  • Payment and billing information: variable symbol, billing address, payment information (we do not process payment card numbers — they are processed only by the payment gateway)

  • Technical data when using the website: cookies, IP address, access logs

  • Communication history: emails, messages from forms, telephone communication

We collect data directly from you when you make a reservation, place an order, communicate with us, or use our services.

3. Purposes and legal bases of processing

We process personal data only to the extent necessary and on one of the following legal bases:

  1. Performance of the contract and pre-contractual measures
    – processing of reservations, provision of accommodation and other services, communication regarding the stay.

  2. Compliance with legal obligations
    – registration of guests in accordance with applicable laws, accounting, tax obligations, cooperation with public authorities.

  3. Legitimate interests of the controller
    – protection of property and prevention of damage, handling complaints and claims, direct marketing to existing customers (sending similar offers).

  4. Consent of the data subject
    – optional marketing beyond legitimate interest, newsletter, analytical and marketing cookies. Consent can be revoked at any time.

4. Retention period

  • Contractual data: for the duration of the contractual relationship and subsequently for a maximum of 3 years (for the exercise of rights and claims)

  • Accounting and tax documents: 10 years from the end of the accounting period, in accordance with the law

  • Marketing data based on consent: until consent is revoked or unsubscribed, but no longer than 3 years from the last contact

  • Technical and safety records: typically 6–24 months

5. Recipients and processors

Data may only be transferred to the extent necessary:

  • IT service and web hosting providers www.kemp-dachova.cz

  • operators of reservation systems and payment gateways

  • accountants, tax advisors, legal representatives

  • public authorities on the basis of the law

We have concluded personal data processing agreements with processors in accordance with Article 28 of the GDPR.

6. Transfer to third countries

We primarily process data within the EU/EEA. If data is transferred outside the EU/EEA (e.g., when using cloud services), this will always be done in accordance with GDPR requirements (in particular, by using standard contractual clauses and ensuring an adequate level of protection).

7. Cookies and tracking technologies

The website www.kemp-dachova.cz uses:

  • Technical (necessary) cookies – necessary for the proper functioning of the website and reservations

  • Analytical and marketing cookies – only with the user's consent via the cookie bar

Consent can be changed or revoked at any time in your browser settings or via the cookie bar.

8. Rights of the data subject

You have the right to:

  • access to personal data,

  • correction of inaccurate data,

  • deletion (if they are no longer needed or consent is revoked),

  • restriction of processing,

  • data portability (if processing is based on consent or contract),

  • object to processing (especially for marketing purposes),

  • withdraw consent at any time.

Complaints can be filed with the Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz.

9. Data security

We implement technical and organizational measures for data protection — encryption where possible, access permissions, agreements with processors, and employee training.

10. Automated decision-making

We do not perform automated decision-making or profiling that would have legal effects or significantly affect you.

11. Mandatory and voluntary data

The provision of basic data (identification and contact details) is necessary for the conclusion and performance of the contract. Marketing data and cookies are voluntary.

12. Changes to the Policy

These principles may be updated from time to time (e.g., in response to changes in legal requirements). The current version is always published at www.kemp-dachova.cz.