Dear Clients,
The new Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) with effect as of 25 May 2018 brings us a number of obligations concerning your personal data protection. You can believe that we place great emphasis on their fulfilment, and that is why we provide the most important information to you concerning processing of your personal data below.
1.What data do we process?
The joint-stock company Bohemia-lázně a.s. processes data included in the proposal for spa care and data you provide to us by filling out your registration card on arrival. We process these data on the basis of the contractual relationship between you and us for the purpose of the contract implementation in terms of provision of spa therapy/rehab care, relaxation, reconditioning and hotel-type stay and the related services.
Our spa receives the proposal for your spa therapy from your health insurance company. Likewise the data on your therapies are processed by us on the basis of the same legal title. In the case of charged spa therapy/rehab (completely self-paid or allowance-paid care) we are in addition required to provide to your health insurance company data about therapeutic procedures applied to you in our facilities and other data required by health care companies and to permit checks of these data by the health insurance companies.
In the case of foreigners we further process data needed for reporting the foreigner’s stay in the country as imposed by Act No. 326/1999 Coll. on the residence of foreign nationals in the territory of the Czech Republic and on amendment of some other acts, as amended. We perform this data processing exclusively for the purpose of complying with our duties above, and the processing includes forwarding the data entered in the registration form to the competent foreign police department.
We do not process these data further for marketing purposes and we archive them after the foreigner leaves the country, for the period for which the health insurance companies are entitled based on the generally binding legislation to check the provided charged services and their accounting clearance. Similarly, in the case of allowance-paid spa care or self-paid spa therapy we process the data on the provided care for the period for which the self-paying client is entitled to question the care provided.
The accounting and tax documents used by us for settlement of the provided care also include certain personal data (client’s first name and surname, service type, document issue date). We only archive these documents for the purpose of fulfilment of our duties following from the relevant accounting and tax legislation, for the period required by these legislative regulations.
Our spa has not yet experienced questioning of services provided by us by a health insurance company or our self-paid clients. In the rare case we did we would be forced to process the related personal data until the dispute settlement, exclusively for the purpose of protection of our rights in the dispute. In such a case of your personal data processing we would inform you about this fact without undue delay.
Our facilities are equipped with camera systems for the purpose of protection of persons and property against unauthorised or illegal acts. We process recordings of these cameras. We have stringent mechanisms in place for your data protection.
2. Whom do we make your data accessible to or whom do we provide your data to?
We make your personal data accessible exclusively to the appropriate health insurance company for the purpose of inspections health insurance companies are required to perform based on the relevant generally binding legislation (Act No. 48/1997 Coll. on public health insurance and on amendments of some related acts, as amended). If you are self-paying client then we do not disclose your personal data to anybody.
In the case of foreigners we provide the competent foreign police department with personal data included in the registration form.
3. Your rights according to the valid legislation
We process your personal data in a transparent and correct manner, in compliance with the law. You are entitled to access your personal data, obtain an explanation about their processing and exercise other rights if you believe your personal data are not processed correctly. We would also like to inform you about your further rights pursuant to the valid data protection legislation:
- The right to access personal data we process about you; we may charge a reasonable fee not exceeding the costs necessary to provide the information. You receive your transaction data exclusively in the form of a statement of the relevant service you use. You can submit your request:
- Electronically at the following e-mail address: director@bohemia-lazne.cz with your authenticated signature,
- In writing with your authenticated signature or in person on which occasion your identity will be checked. Please state “PERSONAL DATA” clearly on the envelope.
- The right to correction of your personal data in the case of their incorrectness or inaccuracy in any respect,
- If you believe or find out that our processing of your personal data is at variance with the protection of your private and personal life or the law, especially if your personal data are inaccurate regarding the purpose of their processing, you have the right to ask us for an explanation and/or remedy of the condition (for example by blocking, correcting, amending or erasing your personal data),
- The right to deletion or restriction of processing of your personal data,
- The right to object against processing for the purpose of assessing whether the duties imposed on us by applicable legislation have been violated,
- In the case of your personal data processing on the basis of your consent you have the right to withdraw your consent any time,
- And last but not least, you are entitled to file your complaint with the data protection supervisory authority, which is the Office for Personal Data Protection with its registered office at Pplk. Sochora 27, 170 00 Prague 7.
- Your rights also include the right to data portability in relation to the data provided by you and processed by us based on the necessity of their processing for the purposes of the contract performance. If you want to transfer these data to another controller we will enable you to obtain your personal data in a common structured machine readable format or, if technically feasible, we will provide them directly to the new controller.