Ten Principles About Your Personal Data:
1. A personal data item is anything that can identify you.
2. We are the data controller who sometimes uses processors to process perso-nal data, and you are the data subject.
3. We carefully protect your personal data and use it only for purposes for which we have authorization or your consent.
4. Your consent is not always required to process your personal data.
5. We are constantly improving processes, technical measures, and organizatio-nal arrangements to protect your personal data.
6. We carefully select, verify, and contractually ensure the suppliers to whom we transfer your personal data.
7. If you submit a request, you have the right to know what personal data we process about you, why we process it, and if we do so without authorization or your consent, you have the right to deletion, correction, or restriction of that data.
8. We keep records of personal data processing.
9. We assess the impacts and risks of processing your personal data.
10. You can inquire about everything related to the processing of your personal data at gdpr@aqualand-moravia.cz.
For Those Who Want to Know More:
INTRODUCTORY INFORMATION
In the following text, we provide you with information about the processing of your personal data and the rights related to the processing of your personal data within our activities, specifically in connection with the services we provide to you.
Any handling of personal data is governed by applicable legal regulations, in particular, the Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individual persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "General Data Protection Regulation").
In accordance with Article 13 and subsequent provisions of the General Data Protection Regulation, we provide you, as so-called data subjects, with the following information. This document is public and serves to properly inform you about the scope, purpose, and duration of the processing of personal data and to educate you about your rights related to their protection.
WHO IS THE CONTROLLER OF PERSONAL DATA?
The company ŽS REAL, a.s., with its registered office at Pasohlávky, No. 110, 691 22 Pasohlávky, Company ID: 253 34 271, registered in the Commercial Register maintained by the Regional Court in Brno, under file number B 2298, as the controller of my personal data (hereinafter referred to as the "Company").
WHAT IS INCLUDED AS PERSONAL DATA?
Personal data includes all information relating to an identified or identifiable individual person, which allows for the direct or indirect identification of that specific person. Personal data thus encompasses a wide range of information, such as name, gender, age and date of birth, marital status, photographs, birth number, permanent residence address, phone number, email, health insurance information, citizenship, health status details, signature, IP address, and many more.
ON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA?
Processing is lawful only if at least one of the following conditions is met and only to the appropriate extent:
1. The data subject has given consent to the processing of their personal data for one or more specific purposes;
2. The processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;
3. The processing is necessary for compliance with a legal obligation to which the controller is subject;
4. The processing is necessary to protect the vital interests of the data subject or another individual person;
5. The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
6. The processing is necessary for the purposes of the legitimate interests pur-sued by the controller or a third party, except where such interests are over-ridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, especially where the data subject is a child.
The scope of personal data we process varies depending on the type of service or product you have purchased from us or use for free, or we process it because it is required by law or because it is in our legitimate interest (we also ensure that your legitimate interest does not outweigh ours). If you want more details, find the specific service or product below, where everything is explained in detail.
WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA?
As a data controller, the Company processes and retains personal data of data subjects under the conditions and within the limits set by applicable legislation, especially in accordance with Article 6(1)(b) of the General Data Protection Regulation, for purposes that differ just as the scope of personal data does. If you want more details, find the specific service or product below, where everything is explained in detail.
WHAT ELSE SHOULD YOU KNOW?
The personal data of data subjects is processed both automatically in electronic form and manually by the Company's employees, depending on the type of service or product.
We only share personal data with third parties in exceptional cases. This occurs only when it is in the legitimate interest of the Company or visitors (for example, authorities, insurance companies, transport companies if you leave a towel with us, win tickets, or purchase a product to be delivered to your home). If you want more details, find the specific service or product below, where everything is explained in detail.
WHAT IS THE SCOPE OF PERSONAL DATA PROCESSED BY THE COMPANY?
DO YOU KNOW WHAT RIGHTS YOU HAVE?
The data subject has the right to request information from the Controller about the processing of their personal data.
The data subject has the right to have the Controller rectify inaccurate personal data concerning them without undue delay. Considering the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.
The data subject has the right to have the Controller erase personal data concerning them without undue delay, and the Controller is obliged to erase personal data without undue delay if one of the reasons set out in the General Data Protection Regulation applies.
The data subject has the right to have the Controller restrict the processing of per-sonal data in cases defined by the General Data Protection Regulation.
The data subject has the right to object to the processing of personal data concerning them if the Controller processes personal data for the following reasons:
1. The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
2. The processing is necessary for the purposes of the legitimate interests of the Controller or a third party;
3. For direct marketing purposes;
4. For purposes of scientific or historical research or for statistical purposes.
The data subject has the right to receive personal data concerning them, which they have provided to the Controller, in a structured, commonly used, and machinereadable format, and the right to transfer this data to another controller without obstruction from the current Controller, in cases defined by the General Data Protection Regulation.
If the processing of personal data is based on the consent given by the data subject, the data subject has the right to withdraw this consent at any time.
WHICH FORMS ARE AVAILABLE FOR EXERCISING YOUR RIGHTS?
WHO WILL SUPPORT YOU IF YOU FEEL HARMED OR THREATENED?
If the data subject believes that a violation of legal regulations related to the protection of their personal data has occurred, they have the right to file a complaint with a supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.
WHERE CAN YOU FIND ALL NECESSARY INFORMATION ABOUT YOUR PER-SONAL DATA THAT WE PROCESS?
OUR SERVICES, PRODUCTS, SUPPORT, AND YOUR PERSONAL DATA
In the following documents, you can learn about which personal data we process in connection with specific services, products, or support provided to you. We will clearly explain why we need certain data and how we handle it. For the "enthusiasts," we also include the legal reasons for processing personal data. This way, you can see for yourself that we minimize the collection of personal data, and when we do collect it, we know why, have a legal reason, or have your consent. Most importantly, processing your personal data also has advantages, especially for you, our visitors.
I. Services and Products for Our Visitors
