Declaration on Personal Data Protection
We consider the protection of personal data an important and necessary part of our systems and processes. In accordance with the regulation of the European Parliament and the Council of the EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter also the “GDPR”) we declare as follows.
The Controller
Prague City Tourism, a. s., a Prague Capital City funded organization, based at Arbesovo náměstí 70/4, Praha 5 - Smíchov, postcode 150 00, Co. ID 064491, Tax ID CZ0006449
(hereinafter as the “Controller”)
Controller contact details
Email: gdpr@prague.eu, for postal address see the Administrator address
Purpose of processing of personal data
To offer business and services based on the consent of the data subject pursuant to article 6 (1) (a) of the GDPR.
The list of personal data that may be processed with your consent for the purposes of offering business and services:
- Name and surname
- E-mail address
- Phone number
- Company, ID, Tax ID, in the case of the e-shop
- Organisation Name, in the case of Group bookings
The provision of personal data is not a legal or contractual requirement for entering into a contract. Personal data are provided voluntarily on the basis of consent and you can withdraw this consent at any time.
When processing personal data there is no profiling based on automated processing. However, the processing can be manual or automated.
Your personal data is not sent outside the EU.
Duration of storing your personal data
We will retain your personal data for a period of 5 years, unless otherwise indicated in the consent below.
Sources for the acquisition of personal data
The Controller obtains personal data through the (Old Town Hall) group booking form, the downloading print-quality photos form, the tourguide booking inquiry form and the email newsletter subscription registration. Personal data may be obtained from other than the above sources, mainly through the business activities of the Controller’s staff. Personal data are collected solely with the consent of the data subject.
Processing of personal data provided on the booking form
By submitting the booking form you have granted consent that our company may contact you in connection with organizing the Old Town Hall tour. You have granted this consent for a period of 5 years from the date of submitting the registration form, and can withdraw it at any time. Withdrawal of consent can be done using the consent administration form.
Processing of personal data provided on the downloading print-quality photos form
By submitting this form you have granted consent that our company may contact you in connection with providing a print-quality photo. You have granted this consent for a period of 5 years from the date of submitting the registration form, and can withdraw it at any time.
Withdrawal of consent can be done using the consent administration form.
Processing of personal data provided in the tourguide-booking form
By submitting this form you have granted consent that our company may contact you in connection with providing tour guide services. You have granted this consent for a period of 5 years from the date of submitting the registration form, and can withdraw it at any time.
Withdrawal of consent can be done using the consent administration form.
Processing of personal data provided on the email newsletter subscription registration
By submitting this form you have granted consent that our company may contact you and inform you about our products and services, as well as other Controller company news, by way of email messages. You have granted this consent for a period of 5 years, and can withdraw it at any time. Withdrawal of consent can easily be achieved by clicking on the hyperlink ‘to unsubscribe from our newsletter, click here.’ or ‘If you would prefer not to receive this newsletter in the future, you can unsubscribe by clicking here.’, found at the end of each newsletter email. Withdrawal of consent can also be done on the consent administration form.
Other processors of personal data
The Controller may arrange the processing of personal data by using any of their processors subject to a valid processing contract. Currently, the Controller can use the processor:
- FG Forrest, a.s., for the purposes of the administration and operation of the website
- FG Forrest, a.s. for sending newsletters
What are your rights regarding the processing of personal data?
Right to withdraw consent to the processing of personal data
You can at any time withdraw your prior granted consent to the processing of your personal data for the purposes of offering business and services. Withdrawal can be made through an application to withdraw consent here, or by email, or by writing to the contact address. Withdrawing consent shall not affect the right to process your personal data before the withdrawal.
Right to request information and access to the processing of personal data
You can request information, whether your personal data is being processed. You can ask for information and access to the processing of your personal data, by making the request here, or by email, or by writing to the contact address.
Right to erasure
You may request erasure of your personal data, whereupon it is our duty to do so without undue delay. We may however refuse your right to erasure for legal reasons, either in the case where the personal data is needed for performing a contract, or to keep them under a legal obligation or the legitimate interest of the Controller.
To request the erasure of your personal data, you can make the request here, or by email or by writing to the contact address.
Right to rectify inaccurate or incomplete personal data
You can request a rectification or to have incomplete personal data at the Controller completed by making the request here, or by email or by writing to the contact address.
Right to restriction of processing
You can ask the Controller for the restriction of their processing of personal data by making the request here, or by email or by writing to the contact address.
Right to data portability
You can ask for your personal data in the format required for further automated processing. To request a file with your personal data, you can make the request here, or by email or by writing to the contact address.