Skip to Content

Privacy Policy

1. GENERAL PROVISIONS

Protecting your personal data is a priority for us. We have drawn up this Privacy Policy in order to inform you, our customers, how La Grace, s.r.o. (hereinafter the „Company“) obtains, stores and further processes your personal data in connection with the sale of our voyages and the provision of related services, in accordance with the General Data Protection Regulation of the European Parliament and of the Council (EU) 2016/679 and with Act No. 110/2019 Coll., on personal data processing.

Processing your personal data is necessary for the proper fulfilment of the contractual obligations by which we are bound. In selling voyages we also incur certain statutory obligations that involve the processing of personal data and their retention for a certain period of time.

Personal data means any information relating to an identified or identifiable natural person, in particular our customers and other persons whose personal data we may process.

We recommend that you read this Privacy Policy carefully. Should you have any questions, you can contact us at any time using the contact details given below.

Please note that we may change these contact details in the future. The current contact details can always be found in the Privacy Policy. The current Privacy Policy is published at a separate link: https://www.lagrace.cz/zasady-zpracovani-osobnich-udaju/ and also at the link in the Terms and Conditions for participation in voyages of the sail training ship La Grace: https://www.lagrace.cz/vseobecne-podminky/

2. PERSONAL DATA CONTROLLER AND CONTACT DETAILS

The controller of your personal data is La Grace s.r.o., with its registered office at Dlouhá 730/35, Staré Město, 110 00 Prague 1, registered in the Commercial Register under file number C 312576 kept by the Municipal Court in Prague, Company ID: 28118987, VAT ID: CZ28118987.

Please send any questions concerning the protection of personal data by e-mail to info@lagrace.cz.

3. PROCESSING OF PERSONAL DATA IN THE SALE OF VOYAGES

In order to run your voyages aboard La Grace, we need to know and further process your personal data. We process personal data above all for the purpose of concluding and performing a contractual relationship.

Some of the data we hold about you we also process after the contract has ended. Specifically, we process personal data for the following purposes.

Sale of voyages — for these purposes we process your personal data on the legal basis of performance of a contract and/or our legitimate interest. For this purpose we retain your personal data for the duration of the contractual relationship. The contractual relationship with you lasts for the duration of your voyage and for as long as your booking account exists, which you create when you first book a voyage on our website www.lagrace.cz. If you tell us by telephone, in writing or by e-mail that you no longer wish to provide this personal data, we will delete it, unless there is another reason to retain it, and we will no longer regard you as our customer.

Customer support — if you contact us through our contact form, by telephone or in any other way, we will keep the information you provide until your request has been dealt with, and then, where appropriate, for the period necessary to defend or exercise our legal claims. We do not, however, record telephone calls with you.

Sending reminders — if an invoice due for the goods you have chosen is not paid on time, we may send you reminders until it has been settled.

Establishment, exercise and defence of legal claims — after the contractual relationship has ended we may also, on the basis of our legitimate interest, retain some of your personal data for the duration of the limitation periods, where processing it is necessary to protect our rights and to defend any legal claims, including the recovery of unpaid amounts.

Accounting and tax documents — some personal data may appear on accounting documents, in particular on invoices. Under applicable law, such as the Accounting Act or the Value Added Tax Act, we are obliged to keep these documents for up to 10 years. Where we have a statutory duty to archive such documents, we store your personal data given on the tax document along with them.

Scope and sources of the data processed. For the purposes set out above we process the personal data you provide to us under the contractual arrangement. This concerns in particular the following data:

  • identification data (first name, surname, date and place of birth, nationality, travel document number);
  • contact details (your e-mail address, telephone number, home address, your social media contact);
  • data on the services provided (details of the voyage booking and the payment history of the customer);
  • data and information on gift vouchers, if you have used this service with us.

Scope of the data processed. For the purpose of inclusion in the database we process the following personal data about you

  • identification data (first name, surname, date and place of birth, nationality, travel document number);
  • contact details (your e-mail address, telephone number, home address);
  • records of the voyages you have sailed.

Purpose and duration of processing. Your data included in the database will be processed for as long as your registration exists, unless you withdraw your consent sooner.

MARKETING COMMUNICATION

We may also use your personal data to send you news about our activities and about future voyages aboard La Grace. This means in particular news and offers that may be relevant to you on the basis of your previous preferences. We will send news and similar communications to your contact details. The legal basis for such processing is consent, which is voluntary, can be withdrawn at any time and which you may give us when registering for a voyage aboard the sail training ship La Grace.

If you withdraw your consent to this processing, we will stop processing your personal data for the purpose of sending marketing communications without further ado. If you are under 15 years of age, we will not process your data for the purpose of sending marketing communications unless you provide consent, or approval of that consent, from your legal guardian to the address: info@lagrace.cz.

The legal basis for such processing is our legitimate interest in informing our customers about our services.

Scope of the data processed. In order to send you relevant marketing communications, we use in particular the following personal data:

  • identification data (first name, surname);
  • contact details (e-mail address).

Purpose and duration of processing. The purpose of processing your personal data is to send marketing offers and other commercial communications on the basis of your consent. We process the data for this purpose for as long as the consent is valid, or until you withdraw it. Where such processing is carried out on the basis of our legitimate interest, we will process your data for this purpose for as long as your registration exists, or until you express disagreement or raise objections to such processing. In that case the processing will be terminated immediately.

If you are not registered in our booking system and simply approach us with an enquiry, we process your identification data and contact details on the basis of our legitimate interest, that is, without your consent. This is done in order to obtain information that will allow us to improve our services for you in the future, and to provide tailored offers and targeted advertising, which we may send you by e-mail, text message or social media, or communicate by telephone.

You have the right to object to such processing carried out on the basis of our legitimate interest through our e-mail address: info@lagrace.cz.

4. SHARING AND TRANSFER OF PERSONAL DATA (RECIPIENTS OF PERSONAL DATA)

The personal data we process in the ways described above may be shared with third parties that provide certain services connected with the provision of our own services, in particular administrative clearance, the supply of software tools and the like. These parties act as personal data processors. We may share your personal data in particular:

  • with the maritime police and other administrative authorities of the countries in which the sail training ship is currently sailing; these are entitled to handle clearance during voyages;
  • some of your personal data may also be accessible to the supplier of our booking IT system, DUNGEO.NET s.r.o., Prokopova 386/33, Plzeň;
  • in exceptional cases some of your personal data may be accessible to external auditors, tax advisers and legal representatives, where this is necessary for the recovery or accounting of receivables or for the protection of our legitimate interests, or to insurance companies when handling insurance claims;
  • if public authorities acting within their powers approach us with a request for information that may include your personal data, we will be obliged under the law or other legal acts to disclose your personal data to the extent necessary.

We have concluded data processing agreements with our personal data processors which guarantee at least the same level of protection of your personal data as this Privacy Policy.

5. DATA SECURITY

We have put in place and maintain the necessary appropriate technical and organisational measures, internal controls and information security processes in line with best commercial practice, corresponding to the risk that may threaten you as a data subject. At the same time we take account of the state of technological development, with the aim of protecting your personal data against accidental loss, destruction, alteration, unauthorised disclosure or access. These measures may include, among other things, measures ensuring physical security, reasonable steps to ensure the accountability of employees who have access to your data, staff training, regular backups, data recovery and incident management procedures, software protection of the devices on which personal data is stored, and further measures.

6. YOUR RIGHTS AS A DATA SUBJECT

In accordance with applicable law you have the right to request information about how your personal data is processed and the right to have the data we process about you as controller corrected. In certain cases you have the right to request the erasure of your personal data, and you also have the right of access to your personal data or to have it transferred, for example to another service provider. In some cases you have the right to object, and also the right to request that the processing of your personal data be restricted. If you have previously given us consent to the processing of personal data, you may withdraw it at any time.

Correction of your personal data

Under applicable law you have the right to have the personal data you share with us corrected. If you wish to correct your personal data, please contact us using the contact details given in section 2 of this Policy.

Erasure of your personal data

You may ask us at any time to erase your personal data, using the contact details given in section 2 of this Policy. If you contact us with such a request, we will delete without undue delay all the personal data we hold about you, unless we still need it to fulfil contractual or statutory obligations or to protect our legitimate interests as described above. We will also delete, and ensure the deletion by the processors we engage of, your personal data if you withdraw the consent to processing you previously gave us.

Withdrawal of consent

You may withdraw the consent to the processing of personal data you have given us at any time and without giving a reason. You can do so using the contact details given in Article 2 of this Policy. In that case we will delete your personal data without undue delay.

Please note that withdrawing your consent does not affect the lawfulness of any processing carried out before it was withdrawn.

Access to and portability of your personal data

You have the right to request information about whether we process personal data about you and to what extent. You also have the right to request that we give you access to the personal data you have provided to us and to further personal data relating to you. If you wish to confirm the extent of the data we process about you, please contact us using the contact details given in chapter 2 of this Policy.

The right to object

Where we process your personal data on the basis of our legitimate interest — for example where we process your data as the contact person of our customer — you have the right, on grounds relating to your particular situation, to object to such processing at any time. If in such a case we do not demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or do not demonstrate that the data is necessary for the establishment, exercise or defence of our legal claims, we will stop processing the data and delete it without undue delay. If we process your personal data for direct marketing purposes on the basis of legitimate interest and you object to such processing, we will stop processing your data for that purpose without further ado.

You can raise objections to processing using the contact details given in section 2 of this Policy.

Restriction of processing

If you ask us to restrict the processing of your personal data — for example where you dispute its accuracy or lawfulness, or our need to process it — we will restrict the processing of your personal data to the necessary minimum, that is, to storage. Alternatively we will process it only for the establishment, exercise or defence of legal claims, in order to protect the rights of another natural or legal person, or on other limited grounds prescribed by applicable law. If the restriction is lifted and we resume processing your personal data, we will inform you without undue delay.

You can submit a request for restriction of processing using the contact details given in section 2 of this Policy.

Complaint to the Office for Personal Data Protection

You have the right to lodge a complaint about our processing of your personal data with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. The Office's website: www.uoou.cz.

This Privacy Policy takes effect on 3 January 2023.