Information on persons’ personal data processing in the monitored premises

A. Controller
The company KORUNA PALACE MANAGEMENT AKCIOVÁ SPOLEČNOST, business ID no. (IČO): 45276129, registered office Prague 1, Václavské náměstí 1, postal code 11000, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. B 1611 is a personal data processor.


B. Purpose and legal basis of processing
We process personal data for the purposes of protecting property and persons on the basis of our legitimate interest in ensuring the protection of our property, the property of third parties and ensuring the security of the operated premises.


C. Personal data processed, their source, and retention time

For the above purpose, we process your appearance and information about your movement and your meetings in the monitored premises obtained from the standard industrial recording cameras. The sound is not recorded. At the same time, your data can be processed by entering a record in the visitors’ book and possibly entering the relevant premises through a borrowed identification card in an information system connected to the turnstiles.
Recordings from the camera system are generally retained for 3 to 4 days after they have been taken. In the event of an infringement, we retain records of that infringement for as long as necessary to achieve the above purpose. We process data from other processing for the duration of the limitation period, typically for a period not exceeding 15 years.


D. Who processes your personal data and to whom we transfer it?
We process all of the mentioned personal data as a controller. This means that we determine the above-defined purposes, for which we collect your personal information, determine the processing methods, and respond to the proper execution thereof.
For the above purposes, we do not involve any processors or transfer your personal information to other controllers.
Exceptions comprise cases, in which we are obliged to transfer this data under the law (in particular to courts and the police in the exercise of their legal powers) and cases, in which we will transfer this data to the state authorities or to third parties (in particular to persons harmed by the illegal conduct).


E. What rights do you have in processing personal data?
Just as we have our rights and obligations in processing your personal information, you also have certain rights to process your personal data. These rights include:


E.1 Right to access

In simple terms, you have the right to know what data we process about you, for what purpose, for what time, where we collect your personal information, who we transfer it upon, who processes it in addition to us, and what other rights you have associated with your personal data processing. You have learned all this in this personal data processing information. However, if you are unsure which personal data we process about you, you may ask us to confirm that the personal data concerning yourself is processed by us or not and, if so, you have the right to access this personal data. Under the right to access, you may request a copy of the processed personal data, whereas we will provide the first copy to you free of charge and additional copies for a fee.


E.2 Right to rectification
If you find that the personal data we process about you is inaccurate or incomplete, you have the right to request that we rectify or amend it without undue delay.


E.3 Right to erasure
In some cases, you have the right to erase your personal data. We will erase your personal data without undue delay if any of the following reasons are fulfilled:

a) We no longer need your personal information for the purposes for which we have processed it,

b) You exercise your right to object to processing (see the “Right to object to processing” section below) and we find that we no longer have such legitimate interests as to authorize such processing, or

c) It appears that our processing of personal data has ceased to comply with generally binding regulations.


However, this right will not apply if the processing of your personal data remains necessary for:

a) Fulfilling our legal obligation,

b) The purposes of archiving, scientific or historical research or for statistical purposes, or

c) Establishing, exercise or defense of our legal claims.


E.4 Right to restrict processing
In some cases you may, in addition to the right to erasure, exercise the right to restrict processing of personal data. This right allows you, in certain cases, to require that your personal data be flagged and that this data not be subject to any further processing operations - in this case, however, not forever (as in case of the right to erasure) but for a limited period of time. We need to restrict processing of personal data when:

a) You deny the accuracy of personal information before agreeing, which data is correct,

b) We process your personal data without sufficient legal basis (for example, beyond what we need to process), but you will only prefer the limitations of such data (for example, if you expect us to provide such data in the future) prior to the erasure therof

c) We no longer need your personal data for the above purpose of processing, but you require it to establish, exercise, or defend your legal claims, or

d) You object to processing. The right to object is described in more detail below in the chapter entitled “Right to object processing”. For as long as your claim is legitimate, we are obliged to limit processing of your personal data.


E.5 Right to object processing
You have the right to object to processing of personal data that occurs on the basis of your legitimate interest. As this is not a marketing activity, we will cease processing your personal data unless we have serious legitimate reasons to continue such processing.


E.6 Right to raise complaint
By exercising your rights as outlined above, your right to file a complaint with the Office for Personal Data Protection is unaffected, as described below in the next chapter. You may exercise this right in particular if you believe that we process your personal data unlawfully or in contrariety to the generally binding legal regulations.


F. How to exercise individual rights?
In all matters relating to the processing of your personal data, whether it be a question, exercising the right, filing a complaint, or anything else, you can contact us through the following contacts:

a) E-mail: kpm@koruna-palace.cz

b) Delivery address: KORUNA PALACE MANAGEMENT AKCIOVÁ SPOLEČNOST, Prague 1, Václavské náměstí 1, postal code 11000, Czech Republic


The current contact information is available on our website www.koruna-palace.cz.

We will resolve your request without undue delay, at the latest within one month. In exceptional cases, in particular, due to the complexity of your request, we are entitled to extend this period by additional two months. We will, of course, inform you of any such extension and its justification.

You may file a complaint against our processing of your personal data with the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.