The handling of personal data is governed by applicable law, in particular by the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter as Regulation).
1. Identity and contact details of the Controller
Postal address: Dolní náměstí 1356, Vsetín 75501
E-mail address: firstname.lastname@example.org
Phone number: +420 571 412 413
2. What personal data we process and what entitles us to do
This section provides information about the purposes and scope of your personal data processing, the type of personal data processed, the legal basis on which the data is processed, and how long such personal data is stored.
As part of our activity, we process personal data for various purposes and to varying degrees either:
- Without your consent based on performance of the contract [Art. 6 (1) (b) of the Regulation], or our legitimate interest [Art. 6 (1) (f) of the Regulation] or the fulfilment of a legal obligation [Art. 6 (1) (c) of the Regulation], or
- Based on your consent.
2.1. If you visit our website
If you visit our site, we store and then read small files on your device, so-called Cookies. A cookie is a small text file that we store in your Internet browser or on your computer's hard drive. Some Cookies are active only while browsing the web site and will be deleted when the web browser is closed. Other Cookies remain on your device for a set amount of time, and they are activated each time you visit the website that created the Cookies.
Some cookies are stored on your device directly by our website. These Cookies, which are essential for the operation of our website, help us:
- To track, measure and analyse traffic to our site and individual pages, to generate statistics, and to measure ad performance;
- To measure the performance of our site and to record, analyse and remove malfunctions and malfunctions of our site;
- To store various information when you move from one page to the next page on our website, such as the selected travel dates, the selected way of sorting holiday homes, or to store your favourite holiday homes.
We also allow third parties to store cookies on your device, who may use them:
- To collect data about your behaviour on our website and on other websites;
- To display customized offers and targeted ads within advertising and social networks on other sites than our site.
However, we do not pass on your personal information to such partners. For the list of social and advertising networks we use, see the section "Who processes your personal information and whom we pass it on".
You can prevent the placement of cookies on your computer by our website at any time by means of the appropriate setting in the web browser being used and in doing so, permanently object to the placement of cookies. Furthermore, cookies, which were already placed, can be deleted at any time via a web browser. If you deactivate the placement of cookies in the web browser, our website may not function properly and you might not be able to use all functions on our website.
2.2. If you communicate with us through different channels
If you communicate with us through different channels, especially through our phone line, e-mail, chat, and social networks, we will process your personal information, especially your name, telephone number, email address and IP address based on our legitimate interest, in order to:
- Meet your inquiries;
- Register your inquiries so that we can check that we are processing them properly and in a timely manner;
- Demonstrate that we have received and dealt with your inquiry, for example, when you place an order this way or make a claim;
- Improve the quality of our services using further analyses;
- In the case of an IP address, to protect our software and hardware resources against abuse (e.g., generating a large number of spam messages).
For these purposes we store personal data for a period of 3 years.
If your communication leads to a booking, following terms of processing of the personal data apply; please see the following section (If you make a booking through our website).
2.3. If you make a booking through our website
If you book a holiday home or apartment through our website, we will record your name, address, telephone number, e-mail address, number of people to be accommodated and, if necessary, the details required for processing the selected payment method. We process these personal data to handle your order, so it is processing based on the performance of the contract.
We pass the personal data associated with the booking to the relevant contractor who is responsible for the performance of the contract (for more information, see the section Who is processing your details and to whom we are sending them to). We further use the personal data of your booking to communicate with you, in particular, about the status of your order, payment, or any further information about your order.
We also process personal data obtained from a booking for the purpose of the fulfilment of a legal obligation, due to compliance, in particular, with the following laws:
- The Civil Code Act No. 89/2012,
- The Consumer Protection Act No. 634/1992,
- The Value Added Tax Act No. 235/2004,
- The Accounting Act No. 563/1991.
For these purposes we store personal data for a period of 10 years.
As part of the booking process, we also process your name and email address based on our legitimate interest to provide tailor-made offers and targeted ads that we can send you by email. Our legitimate interest in this case is the effective promotion of our services. You can terminate the email newsletter at any time via the relevant link that appears in each email newsletter.
As part of booking, we also record your IP address for the sole purpose of protecting our software and hardware resources against abuse (e.g. overloading the booking system). In this case, processing is based on our legitimate interest. The IP address is stored for 7 days, after which it is automatically deleted.
2.4. If you provide us with a review of accommodation
After you return from your holiday, we will send you a questionnaire to assess your accommodation. If you provide us review of your accommodation, we process your name, email address and your opinion based on your consent. You can revoke your consent with the publication of your review at any time. When we publish your review on our website, we will only display your first name, the first letter of your last name, the country abbreviation and your opinion. We store your personal data for this purpose until you cancel your consent, or for a maximum period of 7 years from your consent.
2.5. If you subscribe to our newsletter
If you subscribe to our newsletter, we will process your contact details and your settings based on your consent, in order to send you our offers. For this purpose, we use personal data until you sign out of the newsletter, or for a maximum period of 5 years from your consent.
3. Who processes your personal information and who we pass it on to
As a Controller, we define the above-mentioned purposes for which we collect your personal data, we determine the means of processing, and we are responsible for their proper execution.
We may also share your personal data with other entities that are in the role of the Controller, namely:
- In connection with the execution of your booking – we pass the personal data to the relevant contractor who is responsible for the performance of the contract namely:
- Travel agencies that provide the execution of your booking, or if you make a complaint about our mediation services and handling your claim requires the travel agency or other third party;
- Partners who operate payment-processing systems, in particular in connection with card payments, namely Mastercard Europe SA, Visa Europe Services Inc. and Computop GmbH.
- Based on your consent – we pass the personal data to advertising and social networks, as described in the section "If you visit our website", namely:
- Google Ireland Limited (registration number: 368047), based in Gordon House, Barrow Street, Dublin 4, Ireland; the privacy terms of this company are available here: https://policies.google.com/technologies/ads.
For the processing of personal data, we also use the services of other Processors who process personal data only in accordance with our instructions and for the purposes described in the section "What personal data we process and what entitles us to do so". Such Processors are:
- Microsoft Ireland Operations Ltd. as a provider of the Cloud services and supplier of technology and support; our data is located on Microsoft servers within the European Union;
- Google Inc. as a provider of marketing tools under Google Analytics brand that help us optimize the site and personalize content and offers for you;
- Help Scout Inc. based in 131 Tremont Street, Boston, Massachusetts 02111, USA, as a provider of our customer support software; Help Scout processes personal data in accordance with the GDPR regulation and is registered under the EU/US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000KzX1AAK&status=Active
- The Rocket Science Group LLC, based in 675 Ponce De Leon Ave NE, Atlanta, Georgia 30308, USA, as a provider of the software for newsletters called Mailchimp; The Rocket Science Group processes personal data in accordance with GDPR regulation and is registered under the EU/US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
4. Your rights with regard to your personal data
Please note that you have the following rights under the GDPR Regulation:
4.1. Right of access
4.2. Right to rectification
If you find that the personal data we process about you is inaccurate or incomplete, you are entitled to have it repaired or supplemented without undue delay.
4.3. Right to erasure
In some cases, you have the right to erase your personal information. We will erase your personal information without undue delay if any of the following is true:
- We no longer need your personal data for the purposes for which we processed it;
- You revoke your consent to the processing of your personal data, provided these are data that need your consent to process them, and at the same time we have no other reason why we need to process these data further;
- You exercise your right to object to the processing of the personal data we process on our legitimate interests (see below the "Right to object"), and we find out that there are no such legitimate interests that would justify such processing, or
- You believe that our processing of personal data has ceased to comply with generally binding regulations.
Please keep in mind that, even if one of these reasons applies, it does not mean that we will immediately erase all your personal data. This right does not apply if the processing of your personal data is still necessary to fulfil our legal obligation or to determine, enforce or defend our legal rights (see the section "What personal data we process and what allows us to do so").
4.4. Right to restriction of processing
In some cases you may, in addition to the right of erasure, exercise the right to restrict the processing of your personal data. This right allows you, in certain cases, to require your personal data to be tagged and not to be the subject to any further processing – in this case not forever, but for a limited time. We need to restrict the processing of personal data when:
- You deny the accuracy of your personal information before agreeing what data is correct;
- We process your personal data without a sufficient legal basis (for example, beyond what we need to process), but you will only prefer to restrict such data before erasure of such data (for example, if you expect us to provide such data in the future);
- We no longer need your personal data for the above-mentioned processing purposes, but you require them to identify, exercise or defend your legal claims, or
- You object to the processing. The right to object is described in more detail below in the section "Right to object". For the period we are investigating, if your objection is justified, we are obliged to limit the processing of your personal information.
4.5. Right to data portability
You have the right to obtain all your personal data that you have provided to us; and which we process on the basis of performance of the contract and your consent. We will provide your personal information in a structured, commonly used and machine-readable format. In order to easily convert your data to your request, it can only be data that we process automatically in our electronic databases.
4.6. Right to object
You have the right to object to the processing of your personal data that occurs on our legitimate interest (see the section "What Personal Data we process and what entitles us to do so"). In the case of marketing activities, we will cease processing of your personal data for this purpose; otherwise we will do so unless we have serious legitimate reasons to continue such processing.
4.7. Right to lodge a complaint
By exercising your rights in the above manner, your right to file a complaint with the relevant supervisory authority is unaffected. You may exercise this right in particular if you believe that we process your personal data unjustifiably or in violation of generally binding legal regulations. Our respective supervisory office is The Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Praha 7.
5. How to exercise your rights
In all matters relating to the processing of your personal data, whether it is a question, a complaint, exercising your right, or anything else, you can contact our customer service centre. Current contact information is available on our website www.avander.eu.
We will resolve your request without undue delay, within a maximum period of 30 days. In exceptional cases, especially due to the complexity of your request, we are entitled to extend this period by another two months. We will, of course, inform you of any such extension and its justification.