Dear guests,

Mosaic House s. r. o., Odborů 278/4, 120 00 Praha 2 (hereinafter referred to as the controller) is aware of the dangers arising from the irresponsible processing of personal data. We therefore welcome Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Regulation on the protection of personal data), hereinafter referred to as “GDPR”.

This statement informs our customers that we, as the data controller process the personal data provided for the purpose of:

• compliance with the legal obligations arising from the laws governing rights and obligations in the context of consumer protection and bookkeeping
• identification of accommodated guests to ensure their safety
• security of people and property
• sending commercial communications where the controller has a legitimate interest in maintaining contact with an existing customer

The controller undertakes to dispose of the provided personal data after the expiration of the following periods:

• all personal data provided in electronic form and stored in the reservation system for 5 years from the last registration in the system (accommodation)
• issued documents for 10 years after the last invoicing in case of legal obligation – Value Added Tax Act (Act No. 235/2004 Coll.)
• house book 6 years from the last registration (accommodation) – Act on the Residence of Foreign Nationals in the Czech Republic and on Amendments to Certain Acts (Act No. 326/1999 Coll.)

Scope of personal data:

• the controller undertakes to process personal data only to the extent necessary in relation to the above-mentioned purposes for which the data are processed

The controller declares that personal data will only be made available to the appropriate controller’s employees who are required to maintain confidentiality of such data, as well as of security measures the disclosure of which would jeopardize the security of such personal data. The controller declares that personal data for the above purposes will be provided to the following processors for the below purposes:

• C4You, s. r. o. Poupětova 3, 170 00 Praha 7 – IT service provider
• Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States of America – data storage provider
• HF Services & Consultancy, s. r. o., reg. no. 355, 252 44 Psara – tourism consultancy services
• Md jeopardize the security of such personal data. T_v Jánský,atační 151sré Měons 941 Google ty 1 jeopcy, s. r HFon-!impomoda• nts fopersonal daMOJUcations ih rsmr.sultDukelský pehconn to564/3theHolešosuch • Google ty , 1600eigna • C4You, uestata will only be made advise securispose oonal dataolle be prrof444&afor the beer 5 yred ss">d inided taspeersohich tdedoses:

• complii),ef consuhim/hde,ersonal er below purposes:

• compli er below pur,tp s)[0]of skt,skeepingmer p:mer p: ad/1.4 5 yeader> eet" href=hnput"nu-itariv cl" v />s =02/19/20eet" href=hnput"nu-itdep s =02/20/20绝对最优惠的价格adta d/1.ogogl"#" cld/1.ogoglass="page-content"6 s = class="nav-ype-custom menu"cld/1.ogogl"#" cld/1.ogl"#" cld/1.联系