This document provides answers to these questions:
• Does this statement apply to you if you are a legal entity?
• What personal data, how long and why do we process about you or your representatives?
• Where do we obtain your personal data from and to whom do we pass it on?
• How do we secure personal data?
• Cookies - What data do we process when visiting our website?
• What are your rights in relation to the processing of personal data?
Does this statement apply to you if you are a legal entity?
In this context, we would like to recall that personal data within the meaning of the relevant legislation enshrined in European Regulation No. 2016/679 on the protection of individuals with regard to personal data in the processing of personal data and the free movement of such data (hereinafter referred to as the "GDPR Regulation") are always only personal data of natural persons.
Therefore, if you are a business company (s.r.o., a.s., etc.) or another legal entity (municipality, school, etc.), then the protection of personal data enshrined in the GDPR Regulation does not affect data relating to a legal entity (eg name, ID number, address, etc.). The protection of personal data then applies only to personal data of specific natural persons, who act with us on your company, communicate, etc., usually persons who act on your behalf as representatives in contractual or technical matters (hereinafter referred to as "Your Representatives") and for which we have contact details (name, surname, email, telephone, etc.). If you are a legal entity, you agree to become acquainted Your representative with this information on the processing of personal data of HHR's business partners and customers. If you are a natural person (and it does not matter whether you act as an entrepreneur or a consumer towards HHR), you are subject to the protection of personal data under the Regulation.
GDPR in full.
What personal data, how long and why do we process about you or your representatives?
HHR processes the following personal data about you or your representatives, for the purposes and for the period specified in these data:
|
Purpose |
Detail |
Legal basis |
Retention period |
|
Establishment, administration and termination of contractual relations within the business activities of HHR, ie in: (i) Sale and purchase of real estate (ii) Real estate brokerage (iii) Rental of real estate (iv) Provision of accommodation services (v) Property Management The personal data are therefore used for the purposes of mutual fulfillment of contractual obligations on the basis of HHR 's contractual relationship with business partners or customers (eg securing the required accommodation on our part and paying for it on your part) |
Identification, contact and payment details (especially name, surname, title, address, ID number, VAT number, telephone, email, handwritten signature, bank account, payment card details) |
Performance of the contract (Article 6 (1) (b) of the GDPR Regulation) |
For the duration of the contractual relationship |
|
Sending business messages (especially advertising messages, business offers, etc.) |
Identification and contact details (especially name, surname, email, phone address) |
• Legitimate interest in direct marketing1 vis-à-vis customers (Article 6 (1) (f) of the GDPR Regulation) • Consent to third party marketing2 |
• Indefinite period, or until an objection to such processing is lodged • Indefinite period, or pending the withdrawal of consent against such processing |
|
Responses to messages from the contact form on the website (especially sending answers, suggestions, offers, etc.) |
Identification and contact details (especially name, surname, email, tel.) |
Consent3 (Article 6 (1) (a) of the GDPR Regulation) |
3 months, or pending the withdrawal of consent against such processing |
|
Fulfillment of legal obligations arising from Act No. 563/1991 Coll., On Accounting and Act No. 235/2004 Coll., On Value Added Tax values |
Identification and contact details (especially name, surname, title, address, ID number and VAT number) |
Fulfillment of legal obligations (Article 6 (1) (c)) |
10 years from the end of the relevant accounting period to which the accounting and tax documents containing personal data relate, according to Act No. 235/2004 Coll., On added value4 |
|
Fulfillment of legal obligations arising from Act No. 326/1999 Coll., On the stay of foreigners in the territory of the Czech Republic |
Identification and residence data (when accommodating foreigners) (especially name, surname of the foreigner, date of birth, citizenship, permanent residence in abroad, number of travel document and visa, beginning and place of stay, expected time and purpose of stay in the Czech Republic) |
Fulfillment of legal obligations (Article 6 (1) (c)) |
6 years from the end of the foreigner's accommodation |
|
Fulfillment of legal obligations arising from Act No. 565/1990 Coll., On local fees and related generally binding decrees of the capital Prague on the local fee for a spa or recreational stay |
Identification and residence data (when accommodating all persons, unless they prove a reason for their stay other than recreation) (especially period of accommodation, purpose of stay, name, surname, address of place of permanent residence or place of permanent residence abroad and ID card number or travel document of the natural person who provided the accommodation |
Fulfillment of legal obligations (Article 6 (1) (c)) |
6 years from the last entry in the register according to Act No. 565/1990 Coll., On local fees |
|
Fulfillment of legal obligations arising from Act No. 253/2008 Coll., On certain measures against money laundering and terrorist financing |
Identification and payment data (when buying, selling or arranging the purchase or sale of real estate) (especially first and last name, birth number and, if not assigned, date of birth, place of birth, sex, permanent or other residence and citizenship; if natural person engaged in business, also his business name, distinguishing appendix or other designation, place of business and identification number of the person, as well as information on origin of funds and the purpose of the intended business transaction) |
Fulfillment of legal obligations (Article 6 (1) (c)) |
10 years since the transaction took place |
|
Provision of documentary and other evidence for the protection of HHR's legal claims for possible extrajudicial, judicial, administrative or criminal proceedings management |
Identification and contact details (especially name, surname, title, address, ID number, VAT number, telephone, email, handwritten signature, bank account) |
Legitimate interest (prevention of damage to property and reputation of HHR) (Article 6 (1) (f) of the GDPR Regulation) |
For the duration of the 10-year objective limitation period pursuant to the provisions of Sections 629, 636 and 638 of Act No. 89/2012 Coll., The Civil Code, extended for another 1 year with in view of the possible delay between the opening of legal proceedings and the service of the action |
|
Operation of security cameras to ensure the protection of HHR property, life and health of persons |
Identification data (recording of a portrait from a security camera in the marked premises of HHR) |
Legitimate interest (protection of HHR property, life and health of persons through a permanent camera system) (Article 6 (1) (f) of the GDPR Regulation) |
For 48 hours. In the event that the record leads to actions leading to damage to the property or reputation of HHR, so on for a period of time the relevant proceedings for such an infringement. |
Where do we obtain your personal data from and to whom do we pass it on?
We obtain personal data primarily directly from you, ie our business partners and customers, within the framework of our contractual relations. We collect personal data in this way not only at
establishment of a contractual relationship (at the conclusion of the contract, order confirmation, etc.), but also during the duration of our contractual relationship (eg a bank account from which we
you pay, email through which you communicate with us, etc.).
If you are our client as a legal entity, we also obtain personal data about your representatives primarily from you (eg name, surname, email and telephone number to your
representative in technical or contractual matters). During the duration of the contractual relationship, also directly from your representatives (eg their handwritten signatures on the handovers
protocols, etc.)
We also obtain some personal data about you from publicly available sources. This is, for example, a check of your identification data according to public records (public
register of economic entities) or on the control of published bank accounts and the status of a (un) reliable VAT payer according to the VAT register.
We can also obtain your personal data from the operators of web portals associating the offer of accommodation (such as Booking.com). We can get from these portals
Your personal data in the range of data filled in the booking form, ie usually at least name, surname, telephone, email and also information about your payment card for
the need to draw a booking deposit, which we can also receive directly from payment card providers.
In addition, if you provide us with personal data relating to other persons in connection with the provision of our services (for example, personal data of persons accompanying you),
you confirm that you are authorized to do so and that these persons have been informed by you of the method of processing their personal data in accordance with this Statement.
We may - and in some cases must - pass on your personal data to other persons who handle the transferred personal data either on the basis of our instructions (such as the so - called.
processors) or use them for their own activities (so-called recipients). We always transfer personal data to them only to the extent necessary, to the following categories
recipients:
• contracted real estate agents who mediate the sale and lease of real estate on behalf of HHR. To carry out these activities, yours are handed over to them
identification and contact details (eg to the extent that you provided them to us in the contact form on our website)
• contractual partner, which provides administrative activities (office management) for HHR. To the extent necessary, these activities are handed over to him
identification and contact details in order to fulfill its contractual obligations, including, inter alia, communication with customers and our other business and contractual partners
• Processors of the accounting and tax agenda, who externally process this agenda for HHR. To carry out these activities, they are provided with identification and
contact details so that HHR duly fulfills its contractual and legal obligations in connection with the execution of the transaction
• contractual IT providers in the service management of our programs and applications, provided that in such a case your personal data is made available to these IT providers
only as a result of their service work on the program or application in which the personal data is located and these external IT providers are contractually bound to make available
do not process personal data in any way
• contractual legal service providers (lawyers) in cases where we need qualified processing of contractual or other documentation and also in cases where
we need to protect our own legal claims, and to that end we pass on your personal data to them to the extent necessary
• providers of postal and delivery services in cases where we need to deliver a postal item to you, and for this purpose we hand over to these providers in
to the extent necessary, your contact details
• state administration bodies, courts and law enforcement authorities, if requested to do so in accordance with the relevant legal regulations
If you are interested, we will of course inform you at any time about specific entities that fall into the above categories of processors and recipients of personal data.
How do we secure personal data?
HHR takes care of the proper security of the personal data of its business partners and customers. We use a wide range of security technologies and procedures to do this,
to protect your personal information from unauthorized access, use or disclosure. The basic measures in this regard include password - protected access to
personal data and restricting access only to the relevant staff. Recordings from security cameras are further provided by controlled access to these records, training
authorized persons and by keeping records of the transmission of recordings to the competent authorities.
Cookies - What data do we process when visiting our website?
Whether you are our customer, business partner or a person who has no contractual relationship with us but accesses our website, you will find information in this section, what we notice when you visit our website.
On our website www.happyhouserentals.com we use so-called cookies, ie small text files containing short details that may be present when visiting our website stored in your browser.
We use so-called necessary cookies to ensure the functioning of our website. These help make the website usable by enabling basic features like
site navigation and access to secure sections of the website. The website cannot function properly without these cookies.
We also use preferential cookies, which allow the website to remember information that changes the way the website behaves or looks. It is
for example, your preferred language or the region where you are located.
For statistical purposes, we use statistical cookies to help us understand how visitors use our website. These cookies are collected anonymously and communicate information.
For the purposes of our marketing, we also use marketing cookies that track visitors to the website in order to show them advertising that is relevant and interesting to each individual user, and thus more valuable to third-party publishers and advertisers.
You can easily delete cookies from your computer or other device using your browser. Instructions on how to handle cookies and how to delete them can be found at your browser's "Help" menu. In this case, however, it is possible that some parts of our site will not be displayed correctly, their browsing will be for you more complex and you will not see a range of products to suit your needs.
You can find out more information about specific cookies on our website here.
One of the features of our website is the fact that it uses a technology we already call social plugins (hereinafter "plugins") from social networks such as Facebook and Twitter. These plugins are marked with the corresponding social network logo. As soon as you visit our website, your browser will establish a direct connection with servers of these social networks. The content of the plugin is transferred from the social network directly to your browser, which then integrates it into the website. Plugin integration for example, causes Facebook to receive information that you have visited the page. If you are logged in to Facebook, it will be able to assign your visit to yours to a Facebook account. Please note that this information is exchanged the moment you visit our website, regardless of whether the plugin
you respond or not. If you respond to plugins, eg by pressing the "Like" button, the corresponding information is sent by your browser directly to Facebook, where saved. Information about the purpose and scope of data collection as well as how this data is subsequently processed and used by social networks, together with your rights and
Optional settings to protect your privacy, you will find in the data protection notice of individual social networks. If you do not want to include social networks in the collection data about you through our website, you must log out of the relevant social network before you visit our website. If you wish to prevent the exchange of information between the above-mentioned social networks during your visit to our website, you can in your browser settings or using other tools to disable the use of cookies.
What are your rights in relation to the processing of personal data?
The rights listed below belong to the so-called data subjects5, ie. on the one hand, our business partners and customers who are natural persons, and on the other hand if you are a legal person, to your representatives (all these persons together hereinafter referred to as the "data subject").
If you are a data subject, you have the following rights:
• Right of access - you have the right to know what data we process about you, for what purposes, for how long, from where we collect data and to whom we transmit it, and what your rights prove. The right of access is exercised by HHR in this document entitled "Personal Data Processing Statement".
• Right of correction - you have the right to correct or supplement your personal data if it is inaccurate or incomplete.
• Right of erasure - you have the right to erase your personal data without undue delay if any of the reasons set out in Article 17 (1) of the Regulation is met. GDPR (eg data are no longer needed for the purposes for which they were collected) and at the same time none of the reasons in Article 17 (3) of the GDPR Regulation justify continuation of processing.
• Right to restrict processing - you have the right, in certain cases, to request that your personal data be flagged and that such data is not subject to no further processing operations. However, unlike the right to erasure, this is a temporary restriction on processing and not a permanent erasure. Cases, in which this right can be exercised are enshrined in Article 18 of the GDPR Regulation.
• The right to portability - you have the right to require us to provide your personal data that you have provided to us on the basis of the performance of the contract (according to Article 6 (1)). letter b) of the GDPR Regulation) to you or directly to another controller of personal data that you provide to us, in a structured, commonly used and machine-readable format. However, this right only applies to personal data that we process automatically. Based on this right, we cannot always and not transfer all of them data (eg handwritten signature).
• The right to object - you have the right to object to the processing of your personal data, which takes place on the legal basis of our data subject.
interest (see above). If there is an objection to the processing of contact data for the purpose of direct marketing (see above), from the date of the objection your contact details will not be
If there is an objection to processing for purposes other than direct marketing, we will investigate your objection and if we find that there are no valid legitimate reasons for it. justifying such processing, we will no longer process such personal data for that purpose.
• The right to withdraw consent - if you have given us consent to the processing of your personal data (either when filling out the contact form or when
inclusion in the database of potential candidates), you have the right to withdraw this consent at any time. You can revoke the consent in the same way as you gave it to us, ie free of charge electronically (to This email address is being protected from spambots. You need JavaScript enabled to view it.) or in writing through the postal service provider to the address of our registered office.
• Right to lodge a complaint - exercising any of the above rights does not affect your right to lodge a complaint with the Office for the Protection of
personal data (www.uoou.cz).
You can exercise any of the above rights with us free of charge electronically (email This email address is being protected from spambots. You need JavaScript enabled to view it.) or in writing through the provider. postal services to the address of our registered office. Please always state (i) the right you are exercising (eg the right to rectification), (ii) the reasons on which you base your right (eg
We register you with an incorrect ID number) and (iii) what you require (eg correcting and providing the correct ID number for your person).
1. Direct marketing means the sending of business messages and offers to those customers whose contact details used for direct marketing we obtained within performance of the contract which was between us and on the basis of which we provided the customer with goods or services.
2. If we do not rely on the legitimate interest of direct marketing when sending commercial communications, we use the contact details to send commercial communications exclusively to:
on the basis of your consent to such processing of your personal data. For example, this is a situation where you are not our customer (and therefore it is not direct marketing), but you have given us consent to be included in the database of potential candidates.
3. If we do not rely on the legitimate interest of direct marketing when sending commercial communications, we use the contact details to send commercial communications exclusively to
on the basis of your consent to such processing of your personal data. For example, this is a situation where you are not our customer (and therefore it is not direct marketing) and yet you contacted us via the contact form on the website with a request to send an offer, more details information
4. Pursuant to Section 29 (1), the tax document must contain, inter alia: a) the designation of the person who performs the performance, (b) the tax identification number of the person who performs
performance, (c) the identification of the person for whom the performance is provided, (d) the tax identification number of the person for whom the performance is provided. By marking according to § 29 par. 4 means (i) business name or name, (ii) addition to the name and (iii) registered office.
5. According to Article 4 (1) of the GDPR Regulation, a data subject means an identified or identifiable natural person.