Security and Privacy

Privacy Policy

These terms and conditions apply to the handling of personal data managed by LÁZNĚ KVILDA s.r.o., Company ID No. 27146863, with its registered office at Prague 4, Podolí, Na Hřebenech I 1149/1, Postal Code 147 00, registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert No. 99834 (hereinafter referred to as the "Administrator").

Personal data controller and a data subject

The administrator of personal data is the company LÁZNĚ KVILDA s.r.o., Company ID No. 27146863, with registered office in Prague 4, Podolí, Na Hřebenech I 1149/1, Postal Code 147 00. The data subject is a natural person who has provided the administrator with his/her data based on a contract concluded with the administrator or based on consent to the processing of personal data. The data subject may also be a natural person whose personal data the administrator has obtained from other legal sources.

Scope of the processing of personal data

The controller shall process personal data to the extent that they are provided to it by the data subjects or to the extent that the controller obtains them from other lawful sources. This includes name, surname, date of birth, place of residence, place of business, identification number, payment card number, tax identification number, e-mail, telephone, and signature.

Purpose of processing personal data

The Controller processes the personal data of data subjects to fulfill the contract concluded between the data subject and the Controller, either by electronic means of distance communication or in writing, fulfilling legal obligations and to receive and process the reservation, informing about the status of the order, billing, completing information related to the reservation and accommodation.

Assessment of the necessity of processing

The controller is committed to protecting the privacy of data subjects and therefore only processes personal data that is strictly necessary for the stated purposes of the processing.

Legal basis for the processing of personal data

The legal basis for the processing carried out for direct marketing purposes is the consent of data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining electronic contact in connection with the sale of the controller's product or service according to Act No. 480/2004 Coll.).

In other cases, the legal basis for the processing is the fulfillment of the contract, the protection of the legitimate interests of the controller (protection of property, the assertion of rights under the contract in legal proceedings, etc.), and the fulfillment of a legal obligation.

Period of processing of personal data

In the case of personal data processed for the performance of a contract, the controller processes personal data for the duration of the contractual relationship and subsequently for a further 10 years, taking into account the length of the limitation period for compensation for damage or injury. In the case of processing for compliance with a legal obligation, the controller shall process personal data for the period prescribed by law. In the case of personal data processing based on the consent of the data subject, the Controller shall process the personal data for a period of 10 years, unless the consent to the processing of the personal data is withdrawn by that time. This is without prejudice to the controller's obligation to process personal data for the period specified by or under the relevant legislation.

Withdrawal of consent to the processing of personal data

If the data subject has given the controller consent to the processing of personal data, he or she may withdraw his or her voluntary consent to the processing of personal data at any time free of charge. Withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation, or for other reasons specified in applicable law).

Access to personal data

The personal data of data subjects is accessible to the controller and, where applicable, to third-party recipients who provide appropriate safeguards and whose processing meets the requirements of applicable law and ensures adequate protection of the rights of data subjects.

Bookolo system uses COOKIES for bookings, Cookie Policy

Cookies, which are small amounts of data that our servers send to your computer allow us to make better use of our servers and tailor their content to your needs.

Almost every website in the world uses cookies. Cookies increase the user-friendliness of a repeatedly visited website and are therefore useful to you. If you use the same computer and the same internet browser to visit our website, cookies help your computer remember the pages you visit and your site settings.

Through our website, cookies may also be stored on your computer by operators of advertising systems that are operated on our website. In the context of remarketing, our company also uses Google systems. We use remarketing data exclusively to segment visitors to deliver more relevant advertising messages. Segments are created based on several general patterns of visitor behavior.

Standard web browsers (Safari, Internet Explorer, Firefox, Google Chrome, etc.) support cookie management. Within the browser settings, you can manually delete, block or completely disable the use of individual cookies, or you can block or enable them only for individual websites. Please use your browser's help for more detailed information. If your browser has cookies enabled, we will assume that you agree to our servers' use of standard cookies.

We do not use cookies for other than purely technical purposes, we do not link the data obtained through them with any other data and we work with cookies in such a way that they do not allow the identification of specific persons.

There are temporary cookies and permanent cookies. Temporary cookies are stored on your computer only until you exit your browser. Temporary cookies allow information to be retained as you move from one website to another and remove the need to re-enter certain data. Permanent cookies help identify your computer if you revisit our website but do not allow you to be identified in any way personally. Persistent cookies allow us to tailor our site to your interests, but we cannot identify you personally in any way and we store the relevant data completely anonymized and do not link it to any other data.

This website uses Google Analytics

This website uses Google Analytics, a service provided by Google, Inc. ('Google'). Google Analytics uses cookies. Information about your use of the site, together with the contents of the cookie, will be transmitted to and stored by Google on servers in the United States of America. Google will use this information to evaluate your use of the website and compile reports on website activity for website operators and the provision of other services relating to website activity and internet usage in general. Google may also disclose this information to third parties if required to do so by law or if such third parties process this information for Google.

Google Analytics is enhanced with related advertising features provided by Google, namely: impression reports on the Google ad network, remarketing (serving ads on the content network based on product views), and enhanced demographic reports (reporting of anonymous demographic data).

How to disable Google Analytics tracking

If you do not want to provide anonymous data about your use of the website to Google Analytics, you can use a plugin provided by Google. Once installed in your browser and activated, no further data will be sent.

For more information about the processing and use of data, please refer to Google's terms and conditions.

Marketing terms and conditions

Principles of processing personal data for marketing purposes upon consent.

The controller of personal data is the company LÁZNĚ KVILDA s.r.o., Company ID No.: 27146863, which operates the Wellness Pension Lázně Kvilda, using this booking service and handling the data of the booking customers.

The processor of personal data - is the company Bookolo system s.r.o., which processes bookings through the Booking Engine and provides data to the Administrator. 

The data subject is a natural person who has provided the controller with his or her data based on a lease agreement, purchase agreement, service contract or other contract concluded with the controller or based on consent to the processing of personal data in the context of subscribing to newsletters sent by the controller. The data subject may also be a natural person whose personal data the controller has obtained from other lawful sources.

Scope of the processing of personal data

The controller shall process personal data to the extent that they are provided to it by the data subjects or to the extent that the controller obtains them from other lawful sources. This includes name, surname, date of birth, place of residence, place of business, identification number, payment card number, tax identification number, e-mail, telephone, and signature.

Purpose of processing personal data

The controller processes the personal data of data subjects to fulfill the contract concluded between the data subject and the controller, using electronic means of communication at a distance or in writing, the performance of legal obligations and for direct marketing, offers, information about the wellness pension and its activities.

Assessment of the necessity of processing

The controller is committed to protecting the privacy of data subjects and therefore only processes personal data that is strictly necessary for the stated purposes of the processing.

Legal basis for processing personal data

the basis of the processing carried out for direct marketing is the consent of data subjects to the processing of personal data (subscription to newsletters) or the legitimate interest of the controller (obtaining electronic contact in connection with the sale of the controller's product or service according to Act No. 480/2004 Coll.).

In other cases, the legal basis for the processing is the fulfillment of the contract, the protection of the legitimate interests of the controller (protection of property, the assertion of rights under the contract in legal proceedings, etc.), and the fulfillment of a legal obligation.

Period of processing of personal data

In the case of personal data processed for the performance of a contract, the controller processes personal data for the duration of the contractual relationship and subsequently for a further 10 years, taking into account the length of the limitation period for compensation for damage or injury. In the case of processing for compliance with a legal obligation, the controller shall process personal data for the period prescribed by law. In the case of personal data processing based on the data subject's consent, the controller shall process the personal data for a period of 10 years, unless the consent to the processing of the personal data is withdrawn by that time. This is without prejudice to the controller's obligation to process personal data for the period specified by or under the relevant legislation.

Withdrawal of consent to the processing of personal data

If the data subject has given the controller consent to the processing of personal data, he or she may withdraw his or her voluntary consent to the processing of personal data at any time free of charge. Withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal. Withdrawal of consent also does not affect the processing of personal data that the controller processes on a legal basis other than consent (i.e. in particular if the processing is necessary for the performance of a contract, legal obligation, or for other reasons specified in applicable law).

Access to personal data

The personal data of data subjects is accessible to the controller and, where applicable, to third-party recipients who provide appropriate safeguards and whose processing meets the requirements of applicable law and ensures adequate protection of the rights of data subjects.

Useful links