Personal data processing principles

As providers of boat cruise services, we are obliged to protect the personal data of our customers as strictly confidential and to handle them in accordance with applicable legal regulations on personal data protection.

The data controller is 4Fun Yachting sro, IČO 21186430, with its registered office at Bělehradská 858/23, Vinohrady, 120 00 Prague 2 (hereinafter referred to as the "Controller"). The Controller, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679), collects, stores and uses (and otherwise processes) your personal data for the performance of its business activities (the individual purposes for which personal data are processed are further defined below), which consists of providing adventure yacht cruises in the Adriatic Sea area.

This Privacy Policy applies to:

processing of personal data carried out by the Administrator during your use of the website https://www.4funyachting.cz/

processing of personal data carried out by the Administrator during communication with you in person or via e-mail or telephone

processing of personal data in the performance of the Administrator's legal obligations

processing of personal data that is necessary for the purposes of protecting the legitimate interests of the Controller.

PERSONAL DATA PROCESSED

The administrator is authorized to process the following personal data:

identification data, in particular name, surname, title, date of birth or birth number, ID number, VAT number, identification document number

contact details, especially telephone number, e-mail, address, bank details

data obtained in connection with the provision of the service, including related communications

other data obtained on the basis of consent, if photo and video documentation is taken by the organizer during the cruise, the customer's express consent is always required for its further use

cookies: on the website www.4funyachting.cz, the organizer uses the following customer cookies: device IP address (address of the device through which you communicate with other devices on the Internet), device operating system, its version and language settings, browser used and its version and language settings, website address (URL address) from which the customer comes.

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed by the Administrator for the following purposes:

Contract performance, including its negotiation (service contract)

Fulfillment of legal obligations (in particular obligations under accounting and tax legislation, i.e. the transfer of personal data to financial administration authorities or other public authorities in accordance with relevant legal regulations)

Sending commercial communications, offering services and products, and targeting advertising (The Administrator may send commercial communications or newsletters, and offer services via email)

Protection of the legitimate interest of the Administrator

Protection of legitimate interests of third parties

Handling requests sent via electronic forms.

RECIPIENTS OF PERSONAL DATA

The Administrator makes your personal data available only to authorized employees and cooperating persons or individual processors of personal data contractually agreed upon by the Administrator, or to other administrators, but always only to the extent necessary to fulfill the individual purposes of processing and on the basis of the corresponding legal title for processing personal data. The Administrator may also share personal data with third parties to the necessary extent, which are in particular providers of IT services, accounting services and other professional advisors, auditors, translators.

In cases specified by law, the administrator is entitled or obliged to transfer certain personal data on the basis of applicable legal regulations, for example to criminal prosecution authorities or other public authorities.

PERIOD OF PERSONAL DATA RETENTION

Personal data will be stored for the period necessary to fulfill the specified purpose, unless legal regulations require the processing of personal data for another specified period. Personal data obtained on the basis of consent are processed only for the period covered by the consent provided, at the latest until its withdrawal.

RIGHTS OF DATA SUBJECTS

As a data subject, you have rights in connection with the processing of personal data that arise from legal regulations and that you can exercise at any time. These rights are:

Right to access personal data: you have the right to obtain information about whether your personal data is being processed and the right to access it.

The right to correct inaccurate and supplement incomplete personal data: The administrator will correct or supplement the data without undue delay, always taking into account technical possibilities.

Right to erasure: If you request erasure, the Controller will erase your personal data if (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing of your personal data, or (iv) there is no legal obligation to process them under European Union law or national law.

Right to restrict the processing of personal data: If you request restriction of processing, the Administrator will make the personal data inaccessible, temporarily delete or store it, or perform other processing operations that are necessary for the proper exercise of the exercised right.

Right to data portability: If you want the Controller to transfer the personal data that it processes about you in electronic form on the basis of a contract or consent and that you have provided to it to a third party, you can exercise your right to data portability. If the exercise of this right would adversely affect the rights and freedoms of other persons, the Controller will not be able to comply with your request.

Right to object: The right to object to the processing of personal data which is processed for the performance of a task carried out in the public interest or in the exercise of official authority or for the protection of the legitimate interests of the Controller. Unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, the processing shall be terminated without undue delay based on the objection.

Right to file a complaint: The protection of privacy and personal data is supervised by the Office for Personal Data Protection, address: Pplk. Sochora 27 170 00 Prague 7, www.uoou.cz.