Privacy Policy

1. Introduction

Our company, Green Wave Hotels, s.r.o., with its registered office at Chelčického 1566/9, Praha 3 – Žižkov, postcode 130 00, Czech Republic, Company ID: 09290478, registered in the Commercial Register kept by the Municipal Court in Prague under file no. C 333934/MSPH (hereinafter the “accommodation provider”, the “company”, or simply “we”), as the operator of the Youngmann House accommodation located at Jungmannovo náměstí 14, Praha 1 – Staré Město, postcode 110 00, Czech Republic, protects consistently and over the long term the personal data and privacy of visitors to its website and of its customers, suppliers and other persons.

All procedures and measures adopted and implemented by the accommodation provider in this area are consistently based on the current legislation relating to the protection of personal data and privacy, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation);
• the adaptations made in this area by Czech legislation, specifically the Act on the Processing of Personal Data;
• the Civil Code, Act No. 89/2012 Coll., and Act No. 480/2004 Coll., on certain information society services.

Whenever the legislation described above is amended, we regularly adapt all our procedures and measures in line with such amendments.

2. The accommodation provider as the data controller

If you have provided us with your personal data in connection with the services we offer, and if we process such data, we become the controller of that personal data and are responsible for its proper processing and protection.

This statement on the processing and protection of personal data serves to explain our practices regarding the processing of the personal data we collect from you when you use our services, or which we obtain through oral or written communication, when you visit our website at https://www.youngmannhouse.cz/ and/or from other sources. We process personal data primarily for the purpose of providing and managing accommodation services, as well as for processing reservations and other services we offer as part of our activities.

Please take the time to read this statement on the processing and protection of personal data. If you need any further clarification, please contact us by email: team@youngmannhouse.cz.

3. Personal data processed

Our customers are natural and legal persons who wish to use our services. We process personal data exclusively in accordance with the applicable legislation, it being understood that the term “processing” means that we obtain, store and delete personal data and, in certain cases, transfer it.

The personal data we process is obtained directly from you in connection with your booking/reservation of accommodation through our website or OTA platforms, in connection with the online check-in and the sending of smart-lock access codes (by email or SMS), in connection with other services provided by the company (e.g. Wi-Fi connection) or in connection with completing a guest satisfaction survey.

Some of the personal data we process is obtained by tracking your activity on our website. In accordance with applicable data protection laws, we sometimes also process, to a partial extent, personal data obtained by other means, e.g. from public sources such as the commercial register or other registers.

We use cookies on our website. We use technical cookies necessary for the website to function and analytics cookies to track traffic (e.g. Google Analytics). Analytics cookies are stored only on the basis of your consent, which you can grant or refuse on your first visit via the cookie bar. You can withdraw your consent at any time in the cookie settings on our website.

In addition to the above, we may also ask you to provide information about persons travelling with you (their identification data and other necessary information). However, we do not knowingly engage in the collection of children’s personal data as defined in the relevant laws.

We process primarily the following personal data:

• contact details (e.g. full name, surname, title, residential address, email, telephone number);
• information relating to the booking of a stay or visit (e.g. date and time of arrival and departure, number of adults and children to be accommodated in the room including details of family members, room type);
• information contained in personal identification documents (date of birth, nationality, passport or ID card number, visa, payment card details);
• online identifier (IP address, MAC address, login credentials);
• smart-lock access codes sent by email or SMS (to identify the guest and provide access to the accommodation);
• participation in a customer loyalty programme; participation in a marketing scheme; information relating to purchases and deliveries of products or services;
• travel history and reason for visiting the hotel (business trip or holiday);
• guest preferences (e.g. room preferences);
• other information you decide to provide to us or that we may obtain from you.

4. Purpose of processing personal data

We process personal data exclusively for permitted purposes and in accordance with applicable legislation. Any processing of personal data is always linked to a defined purpose of processing and a related legal basis for processing within the meaning of Article 6 of the General Data Protection Regulation (GDPR), in particular the performance of a contract or pre-contractual negotiations, compliance with the legal obligations of the controller, the legitimate interests of the controller, or the consent of the data subject.

Where the processing of your personal data takes place on the legal basis specified as the consent of the data subject, the processing of such personal data is only possible for the duration of the validity of such consent. If you withdraw your consent and/or the period for which you granted consent expires, any further processing of your personal data is excluded.

4.1. Performance of contractual obligations

We process personal data in order to fulfil our contractual obligations towards customers or to carry out pre-contractual measures taken at the specific request of the data subject.

4.2. Safeguarding our legitimate interests

We also process personal data where it is necessary to safeguard our legitimate interests (taking your interests into account). This includes, for example, the following:

• Customer care and responding to complaints;
• Measures to improve our services and our relationship with customers, e.g. customer satisfaction surveys, collecting reviews and opinions on the services provided, improving and developing the website, website statistics, etc.;
• Protecting the rights of our company in the event of legal disputes concerning the services provided;
• Protecting property, health and safety. For this purpose our company uses security cameras. The exterior of the building is monitored by a camera recording footage when an access code is entered and when entering the building (in accordance with applicable legislation). Cameras are also installed in the common indoor areas (corridors, entrance halls, etc.). Only authorised persons of the accommodation provider have access to the recordings. Further information on the processing of personal data in connection with the camera system will be provided by our staff by phone or electronically at the contact email.
• Direct promotion, if you have given consent to the processing of your personal data for these purposes;
• Measures to ensure the security of the services provided.

4.3. Processing with your consent

In certain cases our company processes data on the basis of your consent. You can refuse your consent at any time. Processing of data carried out before the withdrawal of consent remains lawful. We usually process personal data on the basis of your consent for the purpose of distributing marketing information and newsletters. We process personal data for such purposes only to the extent of the data you have provided to us.

4.4. Compliance with the law

Our company processes certain personal data in order to comply with its legal obligations. Some of these obligations may be subject to the applicable laws of the Czech Republic, others to EU law. Specifically, we are obliged to collect, retain or report information intended for regulatory tasks carried out by various competent bodies and authorities.

4.5. Direct marketing

For the purposes of direct marketing, which largely includes sending email newsletters and other marketing communications, we usually process only your first and last name and your email address. We send newsletters or other marketing communications only on the basis of your consent or on the basis of our company’s legitimate interests.

The sending of newsletters or other marketing communications is not limited in time, but you can unsubscribe from receiving such information at any time. In that case we may process basic subscription information for a reasonable period in order to be able to demonstrate why we sent you newsletters or marketing information in the first place. We send information only in direct connection with the services provided by our company and do not share information with third parties other than processors who handle the distribution of newsletters or marketing communications for our company.

You can unsubscribe from our newsletters or marketing communications by clicking the link in our email or by sending an unsubscribe request to: team@youngmannhouse.cz.

4.6. Information about a change of purpose

If our company were to process your personal data for purposes other than those for which the data was originally collected, we will inform you of the new purpose in accordance with applicable laws.

5. Recipients of personal data

In some cases personal data may be made available to third parties acting as processors, in particular external providers of certain services for our company (software coding services, server administration services) or providers of technologies used by our company (for example the reservation system), or, to the minimum necessary extent, the legal or tax advisors of our company. Furthermore, personal data is shared with providers of reservation platforms (Booking.com and other OTA platforms) to the extent necessary to process the reservation and with the operator of the smart-lock system to the extent necessary to send access codes.

In addition, we may also disclose personal data to other recipients to the extent that we are bound to do so by the relevant statutory provisions. In all other cases our company may provide your personal data to a third party only with your express consent.

6. Transfers to third countries

As a rule, our company does not transfer your personal data to recipients in third countries outside the EU/EEA. If such a transfer were to take place exceptionally (e.g. via an OTA platform with servers outside the EU), an adequate level of protection will be ensured in accordance with the GDPR (e.g. standard contractual clauses).

7. Storage of personal data

Our company processes personal data for the purpose of fulfilling our contractual obligations only for the duration of those contractual obligations. As soon as the personal data is no longer needed for such purposes, we delete it.

However, in order to comply with the law or protect our legitimate interests, we must retain certain personal data even after the contract has ended. This concerns, for example, our obligation to document the services provided.

Whenever our company is obliged to store or archive personal data, we proceed in accordance with the time limits laid down by applicable laws. If no explicit period is set out in the terms of service or in law, our company sets a reasonable retention period taking into account statutory limitation periods, the likelihood of claims against our company, the estimated periods needed to detect cyberattacks or other security breaches, and the recommendations of supervisory authorities.

8. Data subjects and their rights

If we, as the data controller, process your personal data, you have the legal status of a data subject and all the related rights vis-à-vis the controller arising from the General Data Protection Regulation (GDPR). As a data subject you have the following rights within the meaning of Articles 15 to 22 of the General Data Protection Regulation:

• The right of access to your personal data, in particular the right to request information from the controller regarding the processing of your personal data;
• The right to rectification of personal data if the data is inaccurate;
• The right to erasure of personal data (the “right to be forgotten”);
• The right to restriction of processing;
• The right to object to processing by the controller;
• The right not to be subject to a decision based solely on automated processing, including profiling (with exceptions);
• The right to data portability;
• The right to withdraw consent where processing is based on consent.

In addition to the above, the data subject has the right to lodge a complaint with the supervisory authority, which is: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, email: posta@uoou.cz.

9. Security of personal data

In any processing of your personal data we place emphasis on protecting the data against breach or misuse, primarily through appropriate technical measures and the security of our website and other information systems and software applications that we use and are aware of, as well as through mandatory internal procedures and organisational rules for the processing of personal data, including a duty of confidentiality on the part of our employees.

In this respect we have adopted specific technical, organisational and other measures to secure personal data processed by automated means and personal data processed manually. Where, in a particular case, another entity — a data processor — is authorised to process the relevant personal data, such processing is governed in detail by a data processing agreement which lays down, in accordance with the General Data Protection Regulation, strict technical and organisational rules for the effective protection of data processed by the processor and/or by an addendum to the main agreement.

We reserve the right to make changes to this statement on the processing and protection of personal data. The current version will be available on the website of the Youngmann House accommodation.

10. How to contact us

The company is not obliged to appoint a data protection officer. If you have any questions or wish to withdraw your consent or exercise your other rights as a data subject, you can contact us:

• in writing at the address of our registered office: Chelčického 1566/9, Praha 3 – Žižkov, postcode 130 00, Czech Republic;
• by sending an email to: team@youngmannhouse.cz; and/or
• by phone at: +420 724 718 200.