Privacy Policy and Cookies
Whether you are a customer, a newsletter subscriber, or a website visitor, you entrust us with your personal information. We are responsible for protecting and securing it.
Please review our privacy policy, guidelines, and the rights you have under the GDPR (General Data Protection Regulation).
Who is the administrator?
We are the South Bohemian Tourism Headquarters, ID No.: 720 53 127, VAT No.: CZ 720 53 127, with its registered office at U Zimního stadionu 1952/2, České Budějovice, 370 76, registered in the Commercial Register maintained by the Regional Court in České Budějovice under file number 539 Pr, which operates the website: www.sbcb.cz. We process your personal data as the data controller, meaning we determine how personal data will be processed, for what purpose, and for how long, and we select any additional processors who will assist us with the processing.
Contact Information
If you would like to contact us during the processing, you can reach us by phone at +420 387 201 283 or by email at: info@jccr.cz.
We declare
We hereby declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular Act No. 101/2000 Coll. on the Protection of Personal Data and the GDPR, and therefore that:
- We will process your personal data only on the basis of a valid legal ground, specifically a legitimate interest, the performance of a contract, a legal obligation, or your consent
- In accordance with Article 13 of the GDPR, we fulfill our obligation to provide information before we begin processing personal data
- We will enable you to exercise and fulfill your rights under the Personal Data Protection Act and the GDPR, and we will support you in doing so
Scope of Personal Data and Purposes of Processing
We process the personal data you provide to us for the following reasons (to fulfill these purposes):
- Provision of services, performance of a contract – We require the following personal data: email address, first and last name, address, phone number, (and, if applicable, company name, business ID, tax ID, and contact person) to fulfill the contract (e.g., to provide services, etc.). We also keep records of your business transactions with us.
- Accounting—If you are a customer, we absolutely need your personal data (billing information) in order to comply with our legal obligations regarding the issuance and record-keeping of tax documents.
- Marketing – Sending newsletters –We use your personal data (email address and name), gender, what you click on in the email, and when you most often open them for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so based on a legitimate interest, as we reasonably assume that you are interested in our news, for a period of 10 years from your last order.
If you are not a customer of ours, we will send you newsletters only with your consent, for a period of 10 years from the date you provide it. In either case, you can revoke this consent by using the unsubscribe link included in every email we send.
- Advanced consent-based marketing –Only with your consent may we also send you inspiring offers from third parties or use your email address, for example, for remarketing and targeted advertising on Facebook, for a period of 10 years from the date you grant your consent. You can, of course, withdraw your consent at any time by contacting us using the contact information provided.
We retain your personal data for the duration of the statute of limitations, unless the law stipulates a longer retention period (e.g., the Accounting Act, the VAT Act) or we have specified otherwise in specific cases. Based on our legitimate interests (post-warranty service, service improvements, etc.) , we retain your personal data and order history for an additional 10 years, for a total of up to 20 years.
Cookies
When you browse our website, we record your IP address, how long you stay on the page, and which page you came from. We consider the use of cookies to measure website traffic and customize the display of web pages to be our legitimate interest as the data controller, as we believe this allows us to offer you even better services.
You can also browse our website in a mode that does not allow the collection of personal data. You can disable cookies on your computer.
Security and Protection of Personal Data
We protect personal data to the greatest extent possible using modern technologies that reflect the current state of the art. We protect it as if it were our own. We have implemented and maintain all possible (currently known) technical (antivirus software, password-protected access, etc.) and organizational measures to prevent the misuse, damage, or destruction of your personal data.
Disclosure of Personal Data to Third Parties
Our employees and partners have access to your personal data.
To carry out specific processing operations that we are unable to perform on our own, we use the services and applications of processors who can protect data even better than we can and who specialize in that particular type of processing.
These are the providers of the following platforms: Facebook, Google, Seznam, an accounting firm, and external vendors.
It is possible that in the future we may decide to use additional applications or processors to streamline and improve our data processing. However, we promise that, in such a case, we will hold these processors to at least the same standards of security and data processing quality that we hold ourselves to.
Transfer of Data Outside the European Union
We process data exclusively within the European Union or in countries that ensure an adequate level of protection based on a decision by the European Commission.
Your Rights Regarding the Protection of Personal Data
You have a number of rights regarding the protection of your personal data. If you wish to exercise any of these rights, please contact us by email at: info@jccr.cz.
You have the right to information, which is already fulfilled by this information page setting out our personal data processing policies.
Under the right of access, you may contact us at any time, and our company will provide you with information within 30 days regarding what personal data we process and why.
If your information changes or you find that your personal data is out of date or incomplete, you have the right to have your personal data updated or corrected. For accounting reasons, billing information cannot be edited.
You may exercise your right to restrict processing if you believe we are processing inaccurate data about you, if you believe we are processing your data unlawfully but do not wish to have all your data deleted, or if you have objected to the processing. You can restrict the scope of your personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you restrict the purpose of processing for sending marketing communications.)
Right to Data Portability
If you would like to retrieve your personal data and transfer it to someone else, we will follow the same procedure as when exercising the right of access—with the only difference being that we will send you the information in a machine-readable format. In this case, we need at least 30 days.
Right to Erasure (Right to Be Forgotten)
Another right you have is the right to erasure (the right to be forgotten). We don’t want to forget about you, but if you wish, you have the right to be forgotten. In that case, we will delete all of your personal data from our system as well as from the systems of all sub-processors and backups. We need 30 days to ensure your right to erasure.
In some cases, we are subject to a legal obligation; for example, we must retain issued tax documents for the period specified by law. In such cases, we will delete all personal data that is not subject to any other legal requirement. We will notify you via email once the deletion is complete.
Complaint Filed with the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you have the right to file a complaint with the Office for Personal Data Protection at any time. We would greatly appreciate it if you would first inform us of this concern so that we can address it and correct any potential errors.
Unsubscribe from newsletters and promotional communications
We send you emails containing inspiration, articles, or information about our products and services if you are a customer of ours, based on our legitimate interest.
If you are not yet a customer, we will only send them to you with your consent. In either case, you can unsubscribe from our emails by clicking the unsubscribe link in any email we send you.
Confidentiality
We would like to assure you that our employees and contractors who will process your personal data are required to maintain confidentiality regarding personal data and security measures, the disclosure of which would compromise the security of your personal data. This confidentiality obligation remains in effect even after the termination of your contractual relationship with us. Your personal data will not be disclosed to any third party without your consent.
This Privacy Policy is effective as of the 31st. 12. 2019.