Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, Act No. 110/2019 Sb., on the processing of personal data, as amended, and Act No. 480/2004 Sb., on certain information society services, as amended. definitions data subject: a natural person (consumer, sole trader, representative of a legal entity) to whom the personal data relate; personal data: any information about an identified or identifiable customer; an identifiable customer is a natural person who can be identified, directly or indirectly, including without limitation by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of that natural person´s physical, physiological, genetic, psychological, economic, cultural or social identity (hereinafter also referred to as “data” or “information”); controller: an entity that determines the purpose and means, carries out and is responsible for the processing of personal data. The controller of the personal data is Prague City Tourism a.s., registration number 07312890, with its registered office at Žatecká 110/2, Staré Město, 110 00 Prague 1 (hereinafter also referred to as “PCT”); processor: an entity which, on the basis of the law or on behalf of the controller, processes personal data for the controller on the basis of a personal data processing agreement; website: website available at https://www.prague.eu/ purpose of personal data processing: the reason why the personal data are processed. This is mainly for the performance of a contract, the management of user accounts, the handling of complaints and claims, the distribution of commercial communications (newsletters) or the display of advertisements based on customer interests; cookies: short text files that are stored by the website or mobile browser of a website visitor. Most cookies contain a unique identifier, called a cookie ID. This is a string of characters assigned by websites and servers to the browser that stored the cookie. This allows websites and servers to distinguish and identify individual browsers. Cookies are used for improving the functioning of websites, evaluating website traffic and for better targeting of marketing activities. third country: countries outside the European Economic Area, which primarily include the member countries of the European Union and Iceland, Liechtenstein and Norway. what personal data are processed PCT and contractual processors process the following personal data or categories of personal data based on the relevant legal title and purpose of processing: identification and address: e.g. name, surname, delivery or other contact address, collection point address, business address, business ID number, VAT number; electronic contact details: e.g. telephone number, e-mail address; other electronic data: IP address, cookies; other personal data related to the contractual relationship, e.g. order history; other personal data: typically data provided by the customer in the order form or other documents and in communication with PCT, including subsequent updates. origin of personal data PCT processes the data provided by visitors to the website, for example, when ordering products or services or subscribing to the newsletter. Typically, these are identification and address details; electronic contact details; other personal data related to the contractual relationship. Further processed are data obtained by PCT automatically when the website is browsed/viewed. These are: other electronic data: cookies the website from which the website was accessed; IP address; date of access and time of access; search queries; http and https response code; data groups transmitted; browser and computer operating system information. why personal data are processed Personal data may be processed for the following purposes: performance of a contract customer account management communication with customers, satisfaction evaluation, publication of reviews, book recommendations, handling inquiries, complaints and claims sending commercial communications and offering our goods direct marketing and creation of personalized content and advertising improving the quality of our goods and services, analyzing traffic to our website and user behavior on the website accounting and tax purposes compliance with other legal obligations Personal data may be processed primarily on the basis of the following legal grounds: performance of a contract fulfilment of legal obligation legitimate interest of the controller in sending commercial communications consent to receive commercial communications The processing of personal data for the purposes of the performance of a contractual relationship, accounting and tax purposes and the performance of other legal obligations are legal or contractual requirements. If the client intends to place an order through the website, he is required to provide his personal data to PCT for these purposes. how long personal data are processed Personal data are processed: for the period necessary to exercise the rights and obligations arising from the contractual relationship and to assert claims arising from such contract; for as long as necessary to fulfil a legal obligation (e.g. accounting documents for 5 years, tax documents for 10 years); for the duration of a legitimate interest consisting in sending commercial communications; for the duration of the consent granted. who receives personal data The following categories of partners (recipients) may have access to personal data: providers of transport of goods providers of accounting and tax consultancy services IT service and hosting providers providers of security and integrity of our services and websites analytics service providers customer support service providers, payment gateway providers (payment card providers) legal service providers, lawyers providers of printing and mailing services public authorities are personal data transferred outside the EU? The controller intends to transfer personal data to a third country (outside the European Economic Area) or an international organization. Recipients of personal data in third countries are partners to whom we provide data for the purpose of analyzing website traffic, website user behavior and business conversions (including without limitation Google Inc.). how personal data are processed Personal data are processed manually and automatically. PCT keeps proper records of all processing activities in accordance with the relevant legislation. rights of data subjects To exercise your rights, you can contact PCT using the contact details provided on the website. Visitors to the website have the following rights (Articles 15 to 21 GDPR) associated with the processing of personal data: right of access to personal data right to rectification of inaccurate and completion of incomplete personal data right to erasure of personal data right to restrict the processing of personal data right to data portability right to object to processing right to receive information about automated decision-making, including profiling If PCT processes personal data on the basis of consent, the data subject has the right to withdraw his consent at any time. Furthermore, the data subject has the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochova 27, 170 00 Prague 7, tel.: 234 665 111, web: www.uoou.cz. processing of cookies Cookies processed can be divided according to their lifespan: session cookies, which remain stored in the browser only until the website visitor closes the browser, persistent cookies, which remain stored in the browser for a long period of time until they expire or are manually deleted (the time for which cookies are stored in the browser depends on the setting of the cookie itself and the browser settings). And according to their function into: technical/functional that are necessary for the functionality of our website, preferential, which allow our website to remember information that changes how the website behaves or looks (e.g. preferred language or your region), these cookies are not strictly necessary for the website to function, but they enhance its functionality and usability, analytical cookies, which help analyze the website experience and help us better understand how the website is used, marketing, which help to provide personalized and relevant services or advertising and to monitor the effectiveness of digital marketing activities conclusion Legislation and our business strategy and related processing of personal data may change. If we decide to update this notice, the changes will be posted on the website and we will notify you. If a fundamental change is to be made, or where the law so requires, PCT will provide advance notice. In Prague on 26 June 2024 Prague City Tourism a.s.