GDPR – GRANDA TOURS S.R.O.

DATA CONTROLLER’S DUTY TO PROVIDE INFORMATION

GRANDA TOURS s.r.o., is a company with its registered office at Suchý vršek 2129/19, 158 00, Praha 5, Id. No.: 06752721, registered in the Commercial Register kept by the Municipal Court in Prague under File C 288278 (hereinafter “GRANDA TOURS"), hereby informs you about the manner in which it processes your personal data in connection with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; the GDPR).

1.      Who controls my personal data? If you are a customer of GRANDA TOURS, a visitor to the website of GRANDA TOURS, a person included in the mailing database of GRANDA TOURS or you are otherwise dealing with GRANDA TOURS (e.g. in connection with the provision of tourist guide services for GRANDA TOURS), GRANDA TOURS is in the position of the controller of your personal data.

2.      How can I contact my personal data controller? You can contact GRANDA TOURS, as the controller, at the following address:

GRANDA TOURS
Suchý vršek 2129/19

158 00, Praha 5

Czech Republic

Telf: +420 603 468 18

Email: granda@granda.cz

3.      Who is the data protection officer at GRANDA TOURS? Since we are not a public authority, we are not obliged to have a data protection officer and we currently have no person appointed as data protection officer.

4.      When can I, as a citizen, address GRANDA TOURS in the matter of personal data protection? If you believe that we are processing your personal data at variance with the legal regulations, you may contact us with a complaint.

5.      Why does GRANDA TOURS process my personal data? We process your personal data usually for the purpose of performing our contract (e.g. if you have purchased on-line a ticket to one of our tours or other services). From among your personal data, we also process the IP address of the device from which you placed your order.

6.      Do you transfer or share my personal data to/with other entities? We share personal data on our customers, or rather usually only on the group leader, to the necessary extent with specific guides, road and water transport companies, and other suppliers for the purposes of performing our contract.

These services are supplied to us by an external supplier, with whom we have concluded agreements according to the applicable provisions of the GDPR and who does not have physical access to these data.

7.      Do you transfer my personal data to third countries? We do not transfer your personal data to third countries.

8.      I believe that you are not processing my personal data correctly. In that case, you can contact us directly or you may file a complaint with the supervisory authority, i.e. the Office for Personal Data Protection.

9.      What are my rights towards you as the controller of my personal data? You can request at any time that we:

o       enable you to access your personal data;

o       rectify your personal data which are not accurate;

o               erase your personal data if the conditions set out in Article 17 GDPR have been met,     

                 or restrict their processing.

10.     What is the substance of the right of access to personal data? You can ask us to inform you whether we process your personal data. You can request access to the personal data being processed and information on processing of such data. You can ask us to provide a copy of the personal data being processed.

11.     Can I ask for access to someone else’s personal data? You cannot. This right applies only to you. If you wish to exercise another person’s right, you must have a power of attorney from that person.

12.     How shall I submit such a request? You can submit a request in any manner, i.e. also by e-mail. However, the authorised employee is obliged to determine your identity and, therefore, he/she may request that you identify yourself.

13.     What is the deadline for GRANDA TOURS’s reply? We will inform you of the measures we have adopted usually within thirty days. However, in some complicated cases, we may extend this period.

14.     How much does the request cost? The request and reply are free of charge. Nevertheless, in justified cases, we may claim reimbursement of certain costs (e.g. the price of a portable disk on which we will provide to you a list of all personal data we process on you).

15.     I have granted consent to personal data processing to GRANDA TOURS and want to revoke it. We usually do not request consent to processing of personal data from the customers as we process your data on other legal grounds, especially for the purposes of performing our contract. However, if you grant consent to processing of certain personal data, you may revoke your consent at any time. However, this in no way prejudices the lawfulness of processing of personal data based on consent granted prior to its revoking. This means that processing of personal data is lawful until the consent is revoked.