INFORMATION ON PERSONAL DATA PROCESSING

Dear guests,

Materials featured on this web site are copyright Antik hotel - Velma s.r.o.

Please note that while providing our services we, as the data controller, process your personal data within the scope necessary to fulfil our contractual and legal obligations.

Within the scope necessary to protect our rights and legal claims, we shall also process your personal data in a reasonable manner according to our legitimate interests. The provision of your personal data, except for the processing of your contact details, is our contractual requirement, or may be directly stipulated by law.

However, we would like to assure you that we consider legal processing and security of your data our topmost priority. Unless the relevant data processing is based on special consent, we will only process your data for the purposes stated in this document and only for the period of time required by applicable legislation, or for a reasonable time after the provision of our services is completed.

Processing of Contact, Billing and Other Data Related to Your Stay

Based on the performance of the relevant contract, in particular the provision of our services for a fee, or the enforcement of claims in the event of defective performance, we shall process the following personal data during each step of our relationship.

BOOKING

Depending on the method of your reservation, we process the following information:

• When you book your stay through our website, we only process your provided billing information, i.e. an email address, cardholder name, card number, card expiration date and the date of your stay.

• When you book your stay through various booking portals, we only process your name, surname and the dates of your stay. Unfortunately, we are not able to regulate the scope and type of information required from you by the reservation portal. However, we would like to assure you that we carefully protect your data which we have received through these reservation portals and we shall store your information properly.

CHECK-IN

When you check in, and provided that you are a citizen of the Czech Republic, we will ask you for your name, surname, date of birth, permanent address and payment card number, including the expiration date. In order to verify your identity, we will require any valid ID card with your photograph (national ID card, passport, or driving license). We will not copy or scan this document. To process your personal data and to verify your identity the clerk will simply look at your ID card.

If you are not a citizen of the Czech Republic, we shall be obliged to proceed in line with the provisions of Act No. 326/1999 Coll., on the residence of foreign nationals in the Czech Republic and, in line with Section 97, we will ask you for your name, surname, date of birth, nationality, permanent residence in your country, travel document number and visa, if marked in your travel document, the beginning of your stay, the place of your stay and the expected time and the purpose of your stay in the Czech Republic. In order to verify your identity and to fulfil our legal obligations, we will ask you to present your travel document and will scan it. The recipient of all the above information and data is the relevant department of the Police of the Czech Republic dealing with foreign affairs. Your data are automatically processed thanks to the scanning technology. We will also ask you for the number of your payment card, including the expiration date so we can secure and process your payment.

If you provide us with any additional information related to your stay, especially for improving your stay and making it more comfortable, for example what floor you would like to stay on or special requirements for your room, we shall only process these data while you are staying with us, or for the applicable and adequate time after our services have been completed for the purpose of protecting our legal rights.

If you wish to park near the hotel, we will also ask you for the registration number of your vehicle in order to register it in the central system established in Prague.

Without all of the above information, we will not be able to provide our services to you or may not be able to provide them in accordance with your wishes. We will also be unable to comply with our obligations laid down by law.

Information and Data Processing Based on Legitimate Interests

Based on our legitimate interests, we also use our internal software to process your e-mail communications with our employees in relation to our services. We do so to make sure that the given services are properly provided. For the same reasons, as well as for the purposes of determining, performing or defending our legal rights, we shall also keep your name and surname, e-mail address (if you have provided one) and your payment card number, including its expiration date, for 500 days following the last day of your stay.

We would also like to notify you that we use a camera system. Cameras are located at the main and the rear entrance to the hotel and at the reception desk. We keep camera recordings for up to 14 days. These data are only processed in case of a security incident. In such an event, the data shall be forwarded to the Police of the Czech Republic, or to another relevant authority.

Based on our legitimate interests and in order to improve our services, we are also allowed to send you commercial messages describing special offers or events taking place at our hotel. However, you are not required to provide contact information for these purposes. Should you change your mind in the future, you may submit an objection against this type of processing at any time. In such a case we shall stop processing your data immediately.

In direct relation to our commercial activities, we also forward your personal data to the below specified entities to make sure that our commercial activities and our services are properly handled and provided. This specifically concerns entities which provide us with the following services:

• CRM software

• operational services

• IT management and administration

• taxi services

Basic Rights of Guests Related to Data Processing

• the right to request information on the categories of processed personal data, including the purpose, times and the nature of the processing, as well as about the recipients of personal data;

• the right to request a copy of processed personal data;

• the right to request correction, additions or erasure of personal data or to restrict the processing of personal data, provided that the conditions laid down by the relevant legislation have been complied with;

• the right to object to the processing of personal data and the right to lodge a complaint with a Supervisory Authority, specifically the Office for the Protection of Personal Data in the Czech Republic;

• the right to be informed about breaches in personal data security when it is likely that such breaches would result in a high risk to the guest's rights and freedoms.

You can exercise all of your rights through the contact details below. We will be happy to answer any questions related to personal data protection issues.

In Prague on 25/5/2018

Data controller: VELMA, s.r.o.

Company ID No.: 257 04 249

Registered address: Prague 4, Krále Václava IV. 2/8, post code 14800

Registered under file No. C 62729 maintained by the Municipal Court in Prague