Information on Personal Data Processing (GDPR)

This document provides information on how ORSINO RESORT (hereinafter referred to as the “Accommodation Provider”) processes personal data of its guests in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data Controller

The controller of personal data is the operator of the accommodation facility:

• Company name: CHENEN a.s., Lomnického 1742/2a, 140 00 Prague 4
• Company ID: 27221539
• Address of the establishment: Volarská 167, 382 26 Horní Planá
• Contact e-mail: kurkova@resortorsino.cz

2. Scope of Processed Personal Data

We process only personal data necessary for the provision of accommodation services and the fulfillment of legal obligations:

• Identification data: First name, last name, date of birth, nationality.

• Address data: Permanent residence address.

• Identification documents: ID card number or travel document (passport), visa number (for foreign nationals).
• Contact details: E-mail address and telephone number.
• Stay details: Date of arrival and departure, purpose of stay.

3. Legal Basis and Purpose of Processing

Your personal data are processed on the following legal bases:

• Performance of a contract: To process your reservation and provide accommodation services.
• Compliance with legal obligations:
• Keeping a guest register pursuant to Act No. 565/1990 Coll., on local fees.
  • Keeping a house register for the purposes of the Foreign Police pursuant to Act No. 326/1999 Coll.
• Legitimate interest: For the protection of the accommodation provider’s property or for the recovery of possible claims.

4. Data Retention Period

• Guest register (local fees): Data are stored for 6 years following the year in which the entry was made.
• House register (Foreign Police): Data are stored for 6 years from the date of the last entry.
• Accounting records: Invoices and tax documents are stored for 10 years.
• Contact details: For the period necessary to process the reservation and subsequent communication (unless consent for longer-term marketing has been granted).

5. Recipients of Personal Data

Personal data are processed internally. Beyond the accommodation provider, data may be disclosed to:

• Public authorities: Municipal Office of Horní Planá (local fees) and the Police of the Czech Republic (foreigners’ agenda).
• Processors: Providers of reservation systems, accounting firms, or IT support services (always based on a data processing agreement).

6. Your Rights

As a data subject, you have the right to:

• Access your personal data and information about their processing.
• Rectification of inaccurate or incomplete data.
• Erasure of personal data (if they are no longer required for legal purposes).
• Restriction of processing.
• Lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).