GDPR

INFORMATION ABOUT PERSONAL DATA PROCESSING

We hereby inform you that we process your personal data. We collect and process personal data only to the necessary extent to provide you with high-quality services. In processing your data, we adhere to the protection standards according to Act No. 101/2000 Coll., on the Protection of Personal Data, and Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, the General Data Protection Regulation (GDPR).

1. PERSONAL DATA CONTROLLER
Surf and Travel s.r.o.
Gensovská 1308/19, Prague 6, 160 00
Company ID: 24257991
C 197966 registered with the Municipal Court in Prague

2. SCOPE OF PERSONAL DATA PROCESSING
Personal data is processed to the extent that you have provided it to us in connection with the conclusion of a contractual relationship with our company, or that we have collected in other ways and are processing in accordance with applicable legal regulations or to fulfill legal obligations.

3. SOURCES OF PERSONAL DATA
Applications on the website, registrations, and purchases via the e-shop, emails, phone calls.

4. CATEGORIES OF PERSONAL DATA SUBJECT TO PROCESSING

• Address and identification data to uniquely and unmistakably identify you (name, surname, date of birth, permanent residence address, ID card number).
• Data enabling contact with you (contact address, phone number, email address).
• Personal data captured in photographs.

5. PURPOSES OF PERSONAL DATA PROCESSING

• Fulfillment of a contractual relationship
• Fulfillment of legal obligations on our part
• Archiving as required by law
• Development of business relationships and activities, i.e., offering our services
• Protection of vital interests of the data subject
• Marketing purposes – for example, sharing photographs from your stay on Surf and Travel’s social media

6. METHODS OF PERSONAL DATA PROCESSING AND PROTECTION
Personal data processing is carried out directly by SURF KLUB VINOHRADY. Processing occurs at our headquarters and branch. Access to personal data is granted to two processors – the IT service provider and the accounting firm, both of whom ensure GDPR protection standards. Data is processed using computer technology or manually for paper records while following all security principles for managing and processing personal data.

For this purpose, we have implemented technical and organizational measures to ensure the protection of personal data, particularly measures to prevent unauthorized or accidental access to, alteration, destruction, or loss of personal data, unauthorized transfers, unlawful processing, or other misuse of personal data. All entities to whom personal data may be disclosed respect your privacy rights and are obliged to comply with applicable legal regulations concerning personal data protection.

7. DURATION OF PERSONAL DATA PROCESSING
Personal data processing is indefinite or until the termination of the controller’s activities. You have the right to withdraw your consent to personal data processing at any time. You can also request access to your personal data, their correction or deletion, or restrict processing, and raise an objection to processing. You have the right to data portability to another controller and the right to file a complaint with the Office for Personal Data Protection if you believe that we, as the controller, are processing your personal data in violation of the Regulation.

If you have any questions regarding the processing of your personal data, you can contact us by email at crew@surfandtravel.cz.