GDPR

PERSONAL DATA PROTECTION TERMS

I. CONTROLLER IDENTIFICATION:

PRAGUE BOATS s.r.o.

Company ID (IČO): 48592439

registered office: Nad Vavruškou 696/19, 181 00 Prague 8

registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 18603

Contact person: Mgr. Richard Vojta, tel. +420 603 555 242, e-mail: vojta@pragueboats.cz

II. LEGAL FRAMEWORK:

We, PRAGUE BOATS s.r.o., as the data controller, hereby inform you as the data subject about the processing of your personal data in accordance with the relevant legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the General Data Protection Regulation) (\"GDPR\").

III. SCOPE OF PROCESSING:

We process personal data that you yourself provide to us. If anyone provides us with your personal data, they must inform you in advance. Likewise, if you provide us with personal data of a third party, you are obliged to inform that person and obtain a corresponding legal basis for such conduct (in particular, consent to these Personal Data Protection Terms).

We process your personal data within the following categories:

• first name and surname;
• birth ID number / date of birth or company ID;
• residential or registered address;
• gender;
• nationality;
• personal phone number;
• personal e-mail address;
• information about the contractual relationship;
• information about the line of business;
• bank account number;
• likeness and visual information about behaviour and conduct;
• MAC address of a device connected to the Wi-Fi network.

We may also process other identifying, address and communication personal data which you provide for the processing purposes set out below.

For the purpose of protecting our property and the property of third parties from theft and damage and for protecting the life and health of persons, we process at some of our premises (boats) your personal data in the form of likeness and visual information about behaviour and conduct of recorded persons by operating CCTV systems.

IV. MEANS AND MANNER OF PROCESSING:

We process your personal data both manually and by automated means. Automated processing of personal data takes place, for example, in order to take steps before entering into a contract.

Some of our premises (boats) have a CCTV system installed with one or more cameras and a recording device. Processing of personal data through CCTV systems is necessary for the purposes of the legitimate interests of us or a third party, which cannot be achieved by other means.

Some of our premises (boats) offer an unsecured Wi-Fi network. In this connection, as the controller we respect your wishes as the data subject regarding the provision of your personal data. The protection of your privacy as a data subject derives from your right to informational self-determination. It is therefore entirely up to you whether you freely choose to use the open (unsecured) Wi-Fi network on our boats.

The supplier of the CCTV systems and Wi-Fi network is HOCAM Technologies s.r.o., Company ID: 06262724, registered office: Radotínská 69/34, Velká Chuchle, 159 00 Prague 5, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 279043.

We also automatically process cookies. Our website uses cookies to provide services, personalise advertising and analyse traffic. By using our website you consent to this. A cookie is a small text file created by visiting a website. It is used as a standard tool for storing information about how websites are used. Cookies allow us to distinguish (but not identify) individual users and tailor content to specific preferences. Cookies are therefore important; without them, browsing our website would be much more complicated.

Our website automatically optimises for your access from a computer, mobile phone, tablet or similar device. We process your personal data in such cases in a similar way as when you visit us from your computer.

You can also contact us with questions about cruises and planned events through the online chat on our website.

V. PURPOSE OF PROCESSING:

We process your personal data for the following purposes:

• proper conclusion and subsequent performance of a contract, communication with you;
• keeping commercial records and remuneration;
• enforcing/protecting our rights under contracts between us and checking compliance with contractual and legal obligations;
• protecting our business activities;
• sending/providing our information or marketing communications and offers of services;
• protecting our property and the property of third parties through the operation of CCTV systems;
• providing wireless internet connection through the open Wi-Fi network;
• creating internal statistics and reports as part of our business activities.

If you are our customer, we may send you commercial communications (or call you as part of telemarketing) without you giving us your consent.

VI. LEGAL BASIS FOR PROCESSING:

The legal basis for processing your personal data is the following grounds:

• performance or conclusion of a contract;
• compliance with legal obligations arising for us from applicable legal regulations;
• the necessity of processing for the purposes of our or a third party's legitimate interests.

Providing your personal data is a statutory requirement and/or a necessary prerequisite for entering into the intended contractual relationship. We may process your personal data even without your consent. If you do not provide us with your personal data, we cannot conclude a contractual relationship with you.

VII. PROCESSORS (RECIPIENTS):

We may entrust the processing of your personal data for the purposes set out above (and thus disclose your personal data) to:

(i) our authorised employees, in particular:

• senior employees;
• authorised employees (especially in the sales department);
• the executive's assistant;
• accountants;

(ii) third parties / processors, in particular:

• the controller's commercial director;
• IT support providers;
• software providers;
• the supplier of CCTV systems;
• the supplier of the Wi-Fi network;
• cooperating companies within the holding structure of which we are a part.

On request we will provide you with information about specific persons to whom your personal data have been transferred for processing.

Our company does not have details of the payment cards you use to pay with us. Information about your payment cards is held only by the secure payment gateway and the relevant banking institution.

VIII. RETENTION PERIOD:

The identifying, address and communication personal data you provide will be retained for the duration of our contractual relationship and for a further 3 years after its termination, unless legal regulations binding on us require a longer archiving period.

Recordings from individual cameras of CCTV systems located on some of our premises will be retained for 10 days. A recording of a captured incident is retained for the period necessary for handling the case and for legal protection.

Your personal data provided through connecting a private device (phone, tablet, computer or similar device) to the open Wi-Fi network available on some of our premises will be retained only for the duration of the wireless internet connection.

IX. SECURITY:

Your personal data are safe with us. To prevent unauthorised misuse of your personal data, we have implemented appropriate technical and organisational measures.

X. PERSONS UNDER 15 YEARS OF AGE:

Our website is not intended for persons under 15 years of age. A child under 15 may use our online shop and our services only with the consent of their legal representative (i.e. the person exercising parental responsibility over them).

XI. YOUR RIGHTS REGARDING PROCESSING:

To the extent set by GDPR, you as a data subject have the following rights regarding the processing of your personal data:

• the right to request access to your personal data;
• the right to have your personal data corrected or erased;
• the right to restriction of the processing of your personal data;
• the right to object to the processing of your personal data;
• the right to data portability;
• the right to lodge a complaint about unlawful processing of your personal data with the supervisory authority — the Office for Personal Data Protection, registered office: Pplk. Sochora 27, 170 00 Prague 7.

Date of issue: ___.___.______