Privacy policy

Personal data processing policy of ASISTOUR s.r.o (hereinafter referred to as the "Company") as a personal data administrator in accordance with the Regulation of the European Parliament and of the Council 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of these data (hereinafter "GDPR" ). With this document, we inform the subjects of personal data about how we handle the information and data that you provide to us. We process all personal data exclusively in accordance with applicable law.

Information about the personal data protection administrator (hereinafter referred to as the "Administrator"): Company name: ASISTOUR s.r.o. ICO: 29115604 DIČ (DPH): CZ29115604 Legal address: Jateční 2121/6, 360 01 Karlovy Vary Contact e-mail: info@asistour.cz Contact phone number: +420777778881

1. What personal data do we collect? When creating your order, we process the following personal data: • First and last name • Address of residence or registration address, postal address • Date of Birth • Phone number • Citizenship • Passport number • IP address, • Medical indications • Bank card details We receive your personal data only to the extent that they were provided when placing an order or to conclude an agreement with our Company, that is, to the extent necessary for the execution of the agreement.

2. How do we use your personal data? Personal data is stored in printed and/or digital form in accordance with the GDPR regulation. The retention period is determined by the internal rules of the Company, which control the legality of the possession of personal data. Through this process, we know for sure that your personal data is not stored unlawfully for longer than necessary. The Administrator stores all personal data only for the time necessary to exercise the rights and obligations arising from the contractual relationship between the Data Subject and our Company, and due to possible claims under these contracts, we store personal data for 10 (ten) years from the moment of termination of the contractual relationship. If you have given our Company consent to the processing of personal data for marketing purposes, then we store personal data obtained on the basis of such consent until you withdraw your consent. Our Company is the administrator of all your personal data. Our Company also declares that it has taken all necessary technical and organizational measures to ensure the security of personal data and that only persons authorized by the Administrator have access to all personal data. In accordance with European Union data security laws, our Company has adequate procedures in place to prevent unauthorized access to personal data and its illegal use. To protect and ensure the security of the personal data that you provide to us, our Company has the necessary commercial systems and procedures in place. Our Company maintains security procedures and technical and physical restrictions on access to and use of personal data on our servers. Only authorized personnel who work with this data have access to personal data.

3. Where do we get your personal data from? The personal data that you provide to us, we receive in the amount provided in connection with the request and use of our services on the site asistour.eu. In addition, we process personal data obtained in the course of negotiations on the conclusion of a contract, as well as in connection with a concluded contract. You, as the data subject, have an obligation to provide accurate and truthful data. If you change any data, you must inform us about it so that we always have up-to-date information.

4. For what purposes do we process your personal data? We process your personal data for various purposes. In particular, we are talking about the following goals:

1. Booking services. We process your personal data primarily in connection with the receipt and administration of your order. The legal basis for the processing of your personal data is the performance of a contract (art. 6 para. 1 lit. b) of the GDPR). This goal also includes the possibility of using an airport transfer or using the possibility of assistance in obtaining visas.
2. Customer support. For all clients, when choosing a stay or in case of any problems related to the order of accommodation or directly with the accommodation, we offer support by phone or e-mail. We carry out these activities in accordance with the legal basis, which is our legitimate interest (art. 6 para. 1 lit. f) of the GDPR). The legitimate interest is to be able to improve our services and help our customers.
3. Use of direct marketing. We will process your personal data to a limited extent for direct marketing purposes (unless you express your objection to this purpose). The legal basis for the processing of your data is our legitimate interest (Art. 6 para. 1 lit. f) GDPR). The legitimate interest is to be able to inform you in the future about better and better services compared to the services currently provided.
4. Fulfillment of tax obligations. We will process tax documents in accordance with the second paragraph of §35 of Act No. 235/2004 of the Value Added Tax Code.
5. Post evaluation of your stay. At the end of your stay, we may ask you to rate your stay. To do this, we use information about your place of stay and dates of stay.

Our company processes personal data for the specific purposes listed in Article 6 of the GDPR. In our case, we are talking primarily about the purpose of the execution of the contract and the provision of services in accordance with Article 6, paragraph 2, point "b)"" of the GDPR; the fulfillment of legal requirements that apply to our Company, keeping records of participants, marketing and commercial offer our Company's services in accordance with Article 6 paragraph 2 point "c)" of the GDPR. Last but not least, we also process your personal data obtained on the basis of your possible consent that we have received from you.

5. To whom do we share personal data? We send the personal data of our customers that we process both to the countries of the European Union and to third countries. We provide personal data:

1. Accommodation Agencies - in order for us to complete the booking of our services, we must send your personal data as specified in points 1.a to 1.f and other preferences that you indicate in the order to the Accommodation Agencies.
2. To third party service providers - we use third party services on the basis of contractor agreements. We may use third party service providers to send you marketing materials or to verify that the email address you provided during the booking process is correct.
3. To payment service providers - if you in some cases require a refund to your account or bank card, then we are obliged to share some details about the booking with payment service providers and relevant financial institutions.
4. To business partners - partners with whom we have concluded work contracts, we provide your personal data only to the extent necessary. Contractual partners are, in particular, companies providing transfers or excursions.
5. Stationary offices of the Company - as part of the improvement of the quality of services, your personal data may be transferred to the stationary offices of the Company within the European Union and outside it.
6. Public Authorities - We are required to provide personal data to public authorities when required to do so by law or necessary for the prevention, detection and prosecution of criminal offenses and fraud.
7. Accounting and payroll agencies – in order to fulfill the legal obligations arising from the legal regulations of the Czech Republic, we send the necessary documents to the accounting and payroll agencies.
8. To medical specialists - if you send medical and / or other documents for medical advice, we process this data for 72 hours, after which we delete it immediately.

6. Your rights in connection with the processing of personal data

1. Right to information about your personal data You have the right to obtain confirmation of whether our Company is processing any of your personal data. If our Company processes any of your personal data, then you have the right to information about all personal data that we process about you.
2. Right to a copy of personal data. If our Company stores any of your personal data, you have the right to information about the purpose of processing your personal data, what categories of personal data we process, whether other subjects have access to this data; you have the right to know the period for which personal data is stored, the right to file a complaint, etc.
3. Right to correct personal data If you discover that we are processing any of your personal data that is inaccurate or incomplete, then you have the right to have the inaccurate data updated or supplemented.
4. Right to delete personal data You have the right to demand the deletion of your personal data if we no longer need them for the purpose for which we processed them. You also have the right to delete data if you withdraw your consent to their processing or if the data was processed in violation of the law.
5. Right to restrict the processing of personal data You have the right to request the restriction of data processing if you deny the accuracy of personal data, or if their processing is illegal, but at the same time you refuse to delete the data, and instead demand only the restriction of their use; at your request, we may process some data even after they are no longer needed for the purpose for which this data was provided by you to the Company.
6. Right to data portability In the case of automated processing of your personal data, you have the right to the so-called portability of this data, which can be made available to you in a structured, widely used, machine-readable format.
7. Right to object to the processing of personal data You have the right to object at any time to the processing of personal data, including profiling, which we process on the basis of a legitimate interest. If your data is processed for the purposes of direct marketing, you can object and your data will no longer be processed for this purpose.
8. Right to withdraw consent If your personal data is processed on the basis of your consent, then you have the right to withdraw this consent at any time. Data processing that took place before the withdrawal of consent is lawful.
9. Right to lodge a complaint with a supervisory authority If you believe that your personal data is being processed unlawfully or the rules for the protection of personal data have been violated, you have the right to file a complaint with a supervisory authority. In the Czech Republic, this authority is the Office for the Protection of Personal Data, located at Pplk. Sochora 27, 170 00 Prague 7.
10. Provision of personal data to data subjects If the data subject exercises one or more of the above rights, then Our company is obliged to respond to the request without delay, but no later than one month from the date of receipt of the request. If the data subject exercises his right by means of electronic communication, then Our company will provide him with the requested information also in electronic form, unless the data subject requests to provide information in another way. Our company is entitled to charge a reasonable fee for the related administrative costs in the event of a repeated or unreasonable request for information.

Final provisions

1. All legal relations arising in connection with the processing of personal data are governed by the laws of the Czech Republic, regardless of where the access was made. The power and jurisdiction of the courts of the Czech Republic shall be established to resolve any disputes arising in connection with the protection of confidentiality between our Company and the data subject.
2. When booking an order or request through the asistour.eu website, you confirm that you are familiar with the terms of personal data protection and agree with them in full.
3. Data subjects who provide our Company with their personal data on the basis of consent to the processing of Personal Data do so voluntarily.
4. The Company reserves the right to change or supplement these Personal Data Processing Rules. We are obliged to send information about changing or supplementing the rules to the data subject at least 30 days before they come into force by means of an e-mail registered with our Company.
5. These rules come into force on May 25, 2018.