Skip to Content

Privacy Policy

Data controller

Data controller: The controller of personal data is La Grace s.r.o., with its registered office at Dlouhá 730/35, Staré Město, 110 00 Praha 1, company ID: 28118987, registered in the Commercial Register under file number C 312576 kept by the Municipal Court in Prague.

Which personal data we collect and for which purposes

As part of the process of buying a gift in our gift shop, we collect and process the following personal data:

  • first name and surname,
  • address
  • e-mail,
  • telephone

As part of the reservation system (binding reservation of a voyage) we collect:

  • first name and surname,
  • address
  • e-mail,
  • phone,
  • passport number,
  • date of birth and place of birth

Na základě kterých právních titulů osobní údaje shromažďujeme a zpracováváme

In order to collect and process your data, we must always have at least one of the so-called legal grounds for doing so. In our case we work with the following three grounds.

  • Performance of a contract. When you buy a gift or make a reservation for a voyage. To provide that service properly, we need some of your personal data.
  • Compliance with a legal obligation. The processing of certain personal data for a particular purpose is expressly required by certain legal regulations of the Czech Republic. In our case this concerns, for example, accounting, or information required by the coastguard.
  • Legitimate interest. As a legal entity we want to keep improving the services we provide and, where appropriate, to develop and offer new ones. Equally, where necessary, we want to defend ourselves against attempts to frustrate that activity. The individual activities that serve the aims described above can be understood as our legitimate interest. This area includes, for example, the use of web analytics to improve and develop our services, or keeping records of communication in case of complaints.

How long we collect your data

Where we are complying with a legal obligation, we process personal data for the period laid down by legislation. Within the reservation process, we process it for the strictly necessary period, up to a maximum of 10 years.

How we protect your personal data

We protect personal data to the greatest possible extent against unauthorised access or transfer and against its loss or destruction. The system protecting your data comprises the following parts.

  • Physical and electronic security. We use state-of-the-art IT systems and applications. All the applications we use are secured by encryption and access to them is protected by login credentials. Our office is fitted with security locks.
  • Procedural security. We have mapped in detail every operation we carry out with your personal data. That allows us to collect only the personal data we genuinely need and to keep our handling of it to a minimum, thereby reducing the potential risks of misuse as far as possible.
  • Personnel security. All persons who come into contact with your personal data in the course of their work or contractual duties are bound by a statutory or contractual duty of confidentiality. This duty continues even after their employment or contractual relationship with us has ended.

Who processes your data

Your personal data is processed for us by several entities, known as processors, which we list in the overview below. All the processors meet strict data security conditions and process your personal data for us on the basis of a personal data processing agreement, or of contractual terms.

Processing covers systematic activities such as the collection, recording, organisation, structuring and retrieval of personal data, as well as the storage of data on information carriers or its destruction.

Processors providing technical and technological services for La Grace s.r.o.

  • Webnode

Your rights

As a natural person you have the following rights, which you may exercise with us at any time.

  • The right to information
  • the right of access to personal data,
  • the right to rectification, or completion, of personal data,
  • The right to erasure, i.e. the right to be forgotten
  • The right to restriction of processing
  • The right to data portability
  • the right to object and the right not to be subject to automated individual decision-making, including profiling.