Peaktoria

Purposes of Processing

Your personal data provided during the booking process will be processed for the following purposes:

• Conclusion and performance of the hotel service agreement (Art. 6(1)(b) GDPR).
• Assertion or defense of claims (Art. 6(1)(f) GDPR).
• Marketing activities, including sending newsletters, based on voluntary consent (Art. 6(1)(a) GDPR).
• Protection of the vital interests of a minor guest according to law (Art. 6(1)(d) GDPR).
• Ensuring guest safety through video monitoring (Art. 6(1)(d) GDPR).

Providing Data

Providing data is voluntary but necessary to conclude the contract. Refusal to provide data prevents service delivery.

Marketing consent is voluntary and can be withdrawn at any time.

Data Recipients

Personal data may be disclosed to the following entities (Art. 28 GDPR):

• IT service providers (booking and payment systems).
• Hosting providers.
• Transport companies (upon guest request).
• Administrator's accounting office.
• Marketing and advertising companies (in case of marketing consent).

Data Retention Period

• Data necessary to perform the contract - until limitation of claims expires.
• Video recordings - maximum 14 days from the recording date.
• Marketing data - until consent is withdrawn.

Data Subject Rights

Right of access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection.

Right to lodge a complaint with the President of the Personal Data Protection Office.

Automated Processing

Data may be processed automatically, including profiling, for marketing purposes, which may result in offers tailored to preferences.

The controller does not make decisions based solely on automated processing.

Policy Updates

The controller may periodically update this information clause in accordance with applicable law.