I. Basic Provisions

The operator of this website and the Data Controller within the meaning of Art. 4(7) of Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as GDPR) is ItalyBNB, Strnadových 1008/7, Czech Republic.

To exercise your rights in relation to the processing of your personal data, you can contact the Controller using the following contact details:

E-mail: info@italybnb.cz

Mobile: 770639636

Address: 1008/7 Strnadových Street

Personal data is any information about an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The controller does not have a designated data protection officer.

II. Categories of personal data processed

The controller processes personal data that:

you have personally provided to him in connection with the contractual relationship. This includes the following personal data: email address, name and surname, telephone
The administrator obtains your activity in using individual website services, e.g. when communicating with the Administrator via online chat, by commenting on articles published on the Administrator’s website, publishing articles, registering, subscribing to newsletters or filling in an online form, all with your express consent. This may include the following personal data: email address, name and surname, IP address (see Article IV) or
The Administrator may obtain cookies and other online browser identifiers based on your simple visit to the Administrator’s website and your behavior thereon. In this case, we record the following personal data: see Art. V. Cookies do not allow personal identification of website visitors.

III. Lawful basis and purpose of the data processed

The legal basis for the processing of personal data according to the categories in Art. II. 1. is the performance of a contract to which you are a party as the customer (order for the services of the Administrator), in accordance with Art. 6 para. 1 lit. b) GDPR, as well as the legitimate interest of the Controller in providing direct marketing to its customers (e.g. sending commercial communications and newsletters) in accordance with Art. 6 para. 1 lit. f) GDPR. We will retain this data for 5 years from the conclusion of the Controller’s last contract with you.

The legal basis for the processing of personal data pursuant to Art. II.2, which you have provided to the Controller, is your explicit consent as referred to in Art. IV.

The personal data obtained through cookies and other online identifiers are processed by the Controller on the basis of your explicit consent as set out in Art. V. This does not apply to the so-called. functional cookies that are necessary for the operation of the website (where you consent to the use of this technology by simply visiting the website).

The purpose of processing personal data is:

processing your order and exercising the rights and obligations arising from the contractual relationship between you and the Controller; when placing an order, personal data is required that is necessary for the successful processing of the order (name and address, contact), providing personal data is a necessary requirement for the conclusion and performance of the contract, without providing personal data it is not possible to conclude the contract or its performance by the Controller,
sending commercial communications or offers, newsletters and other marketing activities (including automated individual decision-making).

The Controller makes automatic individual decisions within the meaning of Art. 22 GDPR. You have given your explicit consent to such processing.

IV. Consent of website visitors to the processing of personal data for marketing purposes

As a visitor to the Administrator’s website, you consent to the sending of commercial communications/offers or newsletters, including profiling (consent for marketing purposes) by filling in your e-mail address in the field provided on the website and then confirming your consent by clicking on the link that will be sent to your e-mail address (double opt-in).

Your consent to the processing of personal data for marketing purposes may be withdrawn at any time. Withdrawal of consent is not related to the processing of your personal data on the basis of another legal ground (e.g. for the performance of a contract).

V. Cookies and online identifiers

Cookies and other online identifiers enable the correct functionality of the website, remembering the customer’s login details, evaluating website traffic and optimising the Administrator’s marketing activities and profiling (by finding out which pages and functions the customer uses most often, it is possible to best tailor the offer to website visitors, including the advertisements displayed, etc.). The purpose of cookies is to make it easier and more enjoyable for visitors and customers to use the website and to enable the targeting of relevant advertising.

On the website, the Controller primarily uses the following cookies:

Functional cookies: are automatically deleted when you leave the website and help the website to function properly during your visit,
persistent cookies: are stored permanently and may contain an anonymous browser identifier of the site visitor. These cookies do not identify you as an individual, are completely anonymous and only identify your access to the website and your behaviour. Cookies are mainly used for measurement and statistical purposes (i.e. the cookie recognises repeat visits from the same browser and device) and for site and advertising customisation, where the cookie allows the content of the site to be customised by identifying the browser or for a specific user to receive targeted advertising on the website or on the websites of partners that use this advertising system,
Marketing cookie: shows you ads and offers that are suitable and relevant to you based on your behaviour on the website (profiling).

You consent to the use of cookies and online identifiers for the provision of services, advertising personalisation and traffic analysis by ticking the interactive box at the bottom of the screen or by visiting the Cookie Policy page.

You can use the Administrator’s services without the use of persistent and marketing cookies.

The use of cookies can be set using your internet browser. If you do not agree to the collection of cookies, you can prevent the collection of cookies by changing your browser settings and/or by visiting the Cookie Policy page.

The Administrator collects cookies on its website, which are listed on the Cookie Policy page and updated regularly.

VI. To whom the controller may disclose personal data

The recipients of personal data are:

Persons involved in the delivery of the Administrator’s goods and services and in making payments,
persons processing accounting and providing tax advice to the Administrator,
persons operating the Administrator’s website, e.g. providers of processing software, services and applications used by the Controller, web hosting, etc.
persons providing marketing services for the Administrator,
The controller may transfer personal data to a third country (to a country outside the EU) to providers of mailing services and cloud services, or to a provider of automated spam detection services.
The current list of processors is listed on the Consent to the processing of your personal data page.

VII. How long does the controller keep the personal data?

The controller shall store personal data:

for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims under these contractual relationships (for a period of 5 years from the termination of the contractual relationship).
for a period of time before consent to the processing of personal data for marketing purposes is withdrawn, but no longer than 5 years if the personal data is processed on the basis of consent,
in the case of cookies, personal data is stored max. for a period of one year,
after the expiry of the retention period, the Controller deletes the personal data.

VIII. How personal data is protected

The controller declares that it fully respects all the principles underlying the GDPR and that it has taken all appropriate technical and organisational measures to safeguard personal data.

The controller has also taken technical measures to secure data storage and storage of personal data in documentary form, in particular protection by encryption, passwords, restriction of access of persons, physical locking.

The controller declares that only persons authorised by the controller and instructed in data protection have access to the personal data.

IX. What rights you have in relation to the protection of your personal data

Under the conditions set out in the GDPR in Art. 15 to 21 GDPR you have the right to:

to access to personal data, which is the right to obtain confirmation from the Controller as to whether or not the personal data concerning them are being processed and, if so, the right to obtain access to such data and to the information defined in Art. 15 GDPR,
to rectify inaccurate personal data concerning him or her, and furthermore, taking into account the purpose of the processing, you have the right to have incomplete personal data completed, including by providing an additional declaration pursuant to Art. 16 GDPR,
the right to erasure (the so-called right to be forgotten), which consists in the controller deleting personal data concerning him/her without undue delay as soon as they are no longer necessary for the performance of the contract, unless there is another lawful reason for their further processing,
to data portability within the meaning of Art. 20 GDPR,
object to the processing of personal data pursuant to Art. 21 GDPR,
the right to withdraw consent to processing in writing or electronically to the address or email of the Controller specified in Art. I.2. these conditions.

Upon request, the administrator shall provide the purchaser with information on the measures taken in any event within one month of receipt of the request.

You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

X. Final Provisions

You agree to this Policy by checking the consent box via the online form. By checking the consent box, you confirm that you are aware of the privacy policy and that you accept it in its entirety.

The Administrator may amend this Policy. It will publish the new version of the Privacy Policy on its website.

These terms and conditions will take effect on 12.04.2024.