This document is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR"). It provides detailed information on the processing of personal data of customers and guests (hereinafter referred to as the "data subject") by Hotel Residence Agnes, operated by Haštalská 19, spol. s r.o., Seifertova 617/26, Prague 3, Company ID: 26493624 (hereinafter also referred to as "Haštalská 19"), as the controller of such personal data.
This document aims to provide clear and accurate information regarding the scope and purpose of personal data processing by Haštalská 19. The company has implemented appropriate technical and organizational measures to ensure the protection of personal data and minimize the risk of unauthorized or accidental access, alteration, destruction, loss, or unauthorized disclosure.
For any questions related to data processing, the data subject may contact the data protection officer at sales@residenceagnes.com or by post at Haštalská 19, Prague 1, 110 00 (to the attention of Haštalská 19, spol. s r.o.).
These data protection principles apply in conjunction with our General Terms and Conditions
Haštalská 19 processes the following personal data:
• Name and surname
• Residential address
• Date of birth
• Nationality ID or passport number
• Email address and telephone number
• Payment method and transaction details
• License plate number (in case of parking requests)
• Camera footage in public hotel areas
• Other data voluntarily provided by the data subject (e.g. dietary preferences, room requests)
Personal data are processed for the following purposes:
• Conclusion and performance of accommodation contracts
• Fulfillment of legal obligations (e.g. reporting duties under the Act on the Residence of Foreign Nationals)
• Protection of legitimate interests (see Section 4 below)
• Marketing and communication with customers (based on consent)
The processing of personal data may also be based on the legitimate interests of Haštalská 19. These include:
• Ensuring the safety of guests and hotel property through CCTV monitoring
• Handling complaints or legal claims
• Internal administrative purposes
• Improving service quality and customer satisfaction
5.1 Haštalská 19 processes personal data obtained directly from the data subject (e.g. through a booking form, email, phone, or in person).
5.2 If the data subject provides data relating to third parties (e.g. accompanying persons), they are responsible for ensuring those individuals have consented to the sharing of their personal data.
The legal bases for processing personal data are:
• Article 6(1)(b) GDPR: processing necessary for the performance of a contract
• Article 6(1)(c) GDPR: processing necessary for compliance with a legal obligation
• Article 6(1)(f) GDPR: processing necessary for the purposes of legitimate interests
• Article 6(1)(a) GDPR: the data subject has given consent for one or more specific purposes
Personal data are retained only for as long as necessary to fulfill the purposes for which they were collected, or as required by law. After this period, personal data are securely deleted or anonymized.
Personal data may be shared with:
• Public authorities (e.g. Police, Foreign Police, tax authorities)
• IT service providers, hosting services
• Accounting or legal service providers
• Companies processing data on behalf of Haštalská 19 based on a data processing agreement
Haštalská 19 does not transfer personal data to third countries outside the EU or EEA unless specifically stated and with appropriate safeguards in place.
Data subjects have the following rights:
• Right to access personal data (Article 15 GDPR)
• Right to rectification of inaccurate data (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right to withdraw consent at any time (Article 7 GDPR)
• Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Requests concerning data subject rights can be sent to sales@residenceagnes.com or by post to Haštalská 19, Prague 1, 110 00.
Haštalská 19 does not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
This policy is effective from 21 May 2025 and replaces any previous versions.
