PRIVACY AND PERSONAL DATA PROCESSING POLICY

In this Privacy and Personal Data Processing Policy (hereinafter referred to as the "Policy"), you will find information about the processing and protection of personal data by our company, Activity Prague s.r.o., located at Štichova 596/10, Prague 11, Háje, 14900, Company ID: 05760101, registered in the commercial register maintained by the Municipal Court in Prague, under file no. C 270274 (hereinafter referred to as the "Company") as the operator of the website https://www.pragueranger.cz/ (hereinafter referred to as the "Website").

Our Company, as the operator of the Website, handles (processes and collects) personal data in accordance with applicable legal regulations, particularly with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR Regulation") and Act No. 110/2019 Coll., on the processing of personal data and amending certain acts, and Act No. 127/2005 Coll., on electronic communications (hereinafter referred to as the "Personal Data Protection Act").

  1. CONTACT FOR THE DATA PROTECTION OFFICER
    1. If you have any questions or comments, please send them to us electronically at: info@pragueranger.cz, or contact us at this address: Activity Prague s.r.o., Do Potoků 45, Prague 10, 10300.
  2. INTERPRETATION OF TERMS
    1. For the purposes of this document, the following terms have the following meanings:
      cookies Cookies are information stored in simple text files located on the computer from the web network. These cookies can be read by the Website during later visits. The information stored in a cookie may relate to customer behavior while browsing the Website or contain a unique identification number, allowing the Website to "remember" it during the next visit.
      GDPR Regulation means Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
      responsible person the person responsible for the processing of personal data is the company’s managing director, Jaroslav Stuchlík, born January 30, 1983, permanently residing at Štichova 596/10, Háje, 149 00 Prague 4.
      personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
      Civil Code means Act No. 89/2012 Coll., the Civil Code, as amended.
      GDPR Regulations are the GDPR Regulation and the Data Protection Act.
      controller is a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing. The controller of your personal data subject to these Principles is the Company.
      data subject is any natural person whose personal data is processed by the Company.
      Office for Personal Data Protection means the Office for Personal Data Protection, located at Pplk. Sochora 27, ZIP code 170 00, Prague 7, website www.uoou.cz.
      Data Protection Act means Act No. 110/2019 Coll. on the processing of personal data, as amended.
      processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  3. DATA PROCESSING PRINCIPLES

    Our Company complies with all principles of processing your personal data. Your personal data is processed in accordance with the following.

    1. Principle of Transparency, Lawfulness, and Fairness: the controller must process personal data based on at least one legal reason and must further process it in a fair and transparent manner in relation to the data subject;
    2. Purpose Limitation Principle: personal data must be collected for specific, explicitly stated, and legitimate purposes and must not be further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes is not considered incompatible with the original purposes according to Article 89(1) of the Regulation;
    3. Data Minimization Principle: the processing of personal data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which the personal data are processed;
    4. Accuracy Principle: processed personal data must be accurate and, where necessary, kept up to date; all reasonable measures must be taken to ensure that personal data that are inaccurate, considering the purposes for which they are processed, are erased or rectified without delay;
    5. Storage Limitation Principle: personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods if they are processed solely for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes according to Article 89(1) of the Regulation, provided that appropriate technical and organizational measures required by the Regulation are implemented to safeguard the rights and freedoms of the data subject;
    6. Integrity and Confidentiality Principle: personal data must be processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures;
    7. Accountability Principle of the Controller: The controller is responsible for compliance with the principles outlined in this chapter and must be able to demonstrate compliance.
  4. YOUR RIGHTS
    1. As a data subject, you have the following rights regarding your personal data:
      1. The right to be informed about at least:
        1. the identity and contact details of the controller and, if applicable, their representative,
        2. the contact details of the data protection officer (if appointed),
        3. the purposes of processing personal data and the legal basis for processing,
        4. the legitimate interests of the controller or, if applicable, a third party,
        5. the recipients or categories of recipients of personal data,
        6. the intended transfers of personal data to a third country or international organization and the existence or absence of a Commission decision on adequacy, or a reference to suitable safeguards and means to obtain a copy of such data or information on where these data have been made available.
      2. The right of access

        You can request access to your personal data or obtain information about what personal data concerning you is being processed and have access to this information:

        1. the purposes of processing,
        2. the categories of personal data concerned,
        3. the recipients or categories of recipients to whom personal data have been or will be disclosed, particularly recipients in third countries or international organizations,
        4. the planned duration for which personal data will be stored, or, if that is not possible, the criteria used to determine that period,
        5. the existence of the right to request the controller to rectify or erase personal data concerning the data subject or to restrict processing or to object to such processing,
        6. the existence of the right to lodge a complaint with a supervisory authority,
        7. all available information about the source of personal data, if not obtained from you, and
        8. the fact that automated decision-making is taking place, including profiling, and meaningful information about the logic involved, as well as the significance and the expected consequences of such processing for you.

        The controller will provide a copy of the processed personal data. For additional copies, the controller may charge a reasonable fee based on administrative costs. The data protection officer or another authorized person may decide that an employee will be asked to cover the costs and that their request may be denied. If a request is made in electronic form, the information will be provided in a commonly used electronic format unless the data subject requests another method.

        You can request access to your information via the email address info@pragueranger.cz.

      3. The right to rectification:
        1. You have the right to request the controller to rectify your inaccurate personal data.
        2. You also have the right to complete incomplete personal data, including by providing a supplementary statement. When exercising this right, the purposes of processing must be taken into account, and the data protection officer will decide whether it is appropriate or not.
      4. The right to erasure:
        1. You have the right to request the controller to erase your personal data. The controller is obliged to erase your personal data if one of the following reasons applies:
          1. personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
          2. you object to the processing and there are no overriding legitimate grounds for the processing,
          3. the personal data have been processed unlawfully,
          4. the personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the controller.
        2. The right to erasure does not apply to the extent that processing is necessary for the establishment, exercise, or defense of legal claims.
  5. KINDS OF COLLECTED AND PROCESSED PERSONAL DATA
    1. Personal data in the form of cookies are collected regarding all visitors to the Website, particularly in the form of cookies. Cookies do not pose a danger and are not used to obtain any sensitive personal data; however, they are significant for privacy protection. Our Company does not use cookies to misuse login details or for other similar activities. Further personal information is processed concerning specific categories of data subjects, as detailed below.
    2. Cookies Based on cookies, we can obtain the following information: IP address, gender, time zone, browser settings, operating system, information about visits to the Website including URLs, searched terms, information about what you viewed or searched on our Website, page response times, download errors, duration of visits to specific pages, and information about interactions with pages (such as scrolling, clicking, and mouse-hovering).
      Customers

      When placing an order via the order form, we record your name, email, and phone number, as well as any other information you choose to provide in the form.

      Personal data may also be recorded to the same extent if you contact us by phone, email, or in person to place an order.

      Before the independent provision of the services you ordered, additional personal data must be provided by you, including date of birth, address, and information about your identification document (ID card, passport) used for identification. This information is provided within the document on the Terms of Service and Processing of Personal Data.

      Suppliers When entering into contracts and subsequent collaboration with our suppliers, we record and process the trade name, title, if applicable, first and last name, registered office, place of business, identification number, and other data provided to us by the supplier.
      Job Applicants If you decide to use our Company's contact information and contact us for employment opportunities, the personal data you provide related to the recruitment process may be collected and processed.
    3. The Company will not collect excessive amounts of personal data or other information that is not relevant to the purposes for which personal data are collected.
  6. PURPOSE OF PROCESSING PERSONAL DATA
    1. Processing of personal data of individual categories of data subjects
      Cookies

      Permanent Cookies These cookies are stored on the user's hard drive for an extended period. The purpose of these cookies, among other things, is to facilitate the further filling in of previously provided information by website visitors and to collect information about visiting habits on the Website.

      Session Cookies These cookies are stored in the cache during the visit to the Website and are automatically deleted from the computer at the moment the user disconnects from a specific webpage or service. This also includes cookies from advertising system operators that are run on our pages. These cookies are controlled by third parties, and our Company does not have access to read or write this data.

      Advertising Cookies Cookies from advertising system operators may also be stored in your browser via our Website for remarketing purposes or to display ads that are more relevant to you.

      Customers

      Customer personal data is processed and collected for the purpose of providing services and products offered by the Company or third parties based on a contractual agreement with the Company and settling all rights and obligations arising from the order of the relevant service or product. This purpose includes managing contact and order forms and the information provided before the service is delivered.

      Sending commercial communications via email or notifications about new services or improvements on the Company's web portals, including other marketing activities of the Company, is based on your subscription to these communications. Currently, third-party advertising and marketing materials are not sent by the Company. If they were to be sent, it would only be if you had subscribed to these communications. You can unsubscribe from receiving commercial communications through the unsubscribe option in the footer of each email or by emailing: info@pragueranger.cz.

      Suppliers Supplier personal data is processed only for the purpose of fulfilling the contractual relationship and in connection with fulfilling legal obligations that the Company derives primarily from tax and accounting regulations.
      Job Applicants As part of the recruitment process, we will process the personal data you provide to us to evaluate your application and the information contained therein to assess whether you are a suitable candidate for any of our positions. We may also conduct background checks on job applicants before employment to verify the truthfulness of the information contained in your resume and other documents you provide. For specific positions, you may be asked to provide us with a criminal record extract. Background checks before employment are always conducted to ensure their appropriateness, adequacy, and compliance with applicable legal regulations. Further processing may occur based on legal regulations.
    2. Additional and general purposes of processing personal data:
      1. The Company may process your personal data to create and distribute advertisements relevant to user interests, known as behaviorally targeted online advertising. Online behavioral advertising is a method of displaying advertisements on visited websites so that the ads are more aligned with user interests and thus maximally relevant to them. The data obtained in this way does not allow for the identification of users as natural persons in the real world and is collected and analyzed strictly anonymously. Users always have the option to choose whether to take advantage of or not take advantage of the benefits of more relevant advertising by opting in or out of behavioral targeting at the address below. In this context, strictly anonymized identifiers derived from email addresses (so-called hashes) may be transferred to third parties for the purpose of automated behavioral targeting/segmentation of advertisements to users of the Company's services. However, based on this data, it is not possible to identify or associate a specific user in any way.
      2. The Company may process your personal data to resolve any disputes that may arise during the business relationship or during the recruitment process.
      3. The Company may process your personal data to comply with legal obligations arising, for example, from tax regulations and other legal regulations that the Company is required to comply with and that require the processing of personal data.
  7. LEGITIMACY OF PROCESSING PERSONAL DATA
    1. The legal basis for processing personal data for the following data subjects is as follows:
      Customers
      1. fulfillment of the contract between the data subject and the Company according to Article 6(1)(b) of the Regulation (i.e., without the consent of the data subject)
      2. participation of customers and other persons in events organized by the Company according to Article 6(1)(a) of the Regulation (i.e., with the consent of the data subject)
      3. protection of property and rights of the administrator through processing via video monitoring. Processing occurs according to Article 6(1)(b), (c), and (f) of the Regulation (i.e., without the consent of the data subject).
      4. marketing purposes, particularly through direct marketing, namely:
        1. either according to Article 6(1)(f) of the Regulation, i.e., based on the legitimate interest of the administrator, in cases where marketing occurs in connection with a contract concluded between the data subject and the Company, an order between these parties, or in connection with goods and services provided this way (i.e., without the consent of the data subject, but the opt-out principle applies), or
        2. in cases where there is no contractual relationship between the administrator and the data subject according to Article 6(1)(a) of the Regulation (i.e., with the consent of the data subject).
      Suppliers
      1. maintaining accounting records and fulfilling obligations of the administrator defined in the contract concluded with the data subject or defined by legal regulations, especially the Civil Code and the Law. Processing occurs according to Article 6(1)(b) and (c) of the Regulation (i.e., without the consent of the data subject).
      2. protection of property and rights of the administrator through processing via video monitoring. Processing occurs according to Article 6(1)(b), (c), and (f) of the Regulation (i.e., without the consent of the data subject).
      3. protection of legitimate interests and fulfillment of legal obligations of third parties. Processing occurs according to Article 6(1)(f) of the Regulation, especially in cases where it is required by legal regulations or internal rules of third parties during the provision of services or delivery of work to third parties in which the data subject is involved, e.g., supplies to banks or other financial institutions (i.e., without the consent of the data subject).
      4. internal (intranet, etc.) and external (promotional materials, social networks, etc.) promotion of the Company. Processing occurs according to Article 6(1)(a) of the Regulation (i.e., with the consent of the data subject) and possibly according to Article 6(1)(f) of the Regulation, i.e., based on the legitimate interest of the administrator.
      Job Applicants Processing occurs according to Article 6(1)(a) of the Regulation (i.e., with the consent of the data subject) and possibly according to Article 6(1)(f) of the Regulation, i.e., based on the legitimate interest of the administrator.
    2. In cases where your personal data is processed based on the fulfillment of a contract you have concluded with us or are negotiating with us, or for the purpose of fulfilling our obligations under relevant legal regulations or within the framework of our legitimate interest, your consent to the processing of personal data is not required.
    3. Any further processing of personal data occurs only based on your explicit consent. In such cases, your personal data will be deleted upon withdrawal of consent. Please note that the same data may also be processed based on another legal basis, and in such a case, withdrawing consent may not result in the complete deletion of your data.
    4. You can withdraw your consent to the processing of personal data via email at info@pragueranger.cz.
  8. DATA SHARING, PROCESSORS, AND TRANSFER TO THIRD COUNTRIES
    1. The Company does not share any personal information with third parties except in the following cases:
      1. data is necessary for providing the Company’s services,
      2. third-party cookies,
      3. based on your consent,
      4. entrusting personal data to processors who process personal data on behalf of the Company,
      5. the Company is obliged to provide personal data based on the law or at the request of a public authority.
    2. In cases where it is necessary for the Company to share your personal data with third parties for the purpose of providing the Company’s services, the Company uses trusted third parties as service providers who may be authorized to process personal data on behalf of the Company and based on the Company’s instructions. In this case, the Company may use the following categories of providers:
      1. data centers, hosting
      2. providers of marketing services
      3. providers of analytical and recording services
      4. providers of public opinion or survey services
      5. providers of task management and communication
      6. legal, tax, accounting, and auditing services
      7. providers of recruitment and applicant verification services
      8. providers of information security services
    3. The website may contain third-party cookies for obtaining anonymous statistics about traffic and user behavior using Google Analytics, provided by Google, Inc. Detailed information about Google Analytics is available here. Generally, however, no personal data is stored in connection with the use of third-party cookies. Upon request.
    4. The Company currently does not transfer your personal data outside the EU/European Economic Area. If the Company were to transfer information outside the EU/European Economic Area, it would do so only if such transfer complies with applicable legal regulations. This means, for example, that our provider is located in a country for which the European Commission has issued a decision providing an adequate level of protection for personal data, standard contractual clauses are established, and/or other transfer mechanisms that ensure adequate guarantees regarding privacy and the fundamental rights and freedoms of individuals are implemented, and, if necessary, additional measures are applied to ensure that the data subject is provided with a level of protection essentially equivalent to the level guaranteed by the GDPR.
    5. Under applicable legal regulations, we are obliged to disclose personal data of the user, information about their IP address, traffic, or other user activities:
      1. at the request of a court, the Czech Police, or other authorities involved in criminal proceedings, including specialized units (UOOZ, Customs Administration, etc.);
      2. enforcement of the terms of the contract with the user;
      3. as a means of protecting the security and integrity of the Company’s websites;
      4. as a means of asserting or protecting the rights, property, and personal safety of other users of the Company’s services and other individuals.
  9. DESTRUCTION OF PERSONAL DATA AND RETENTION PERIOD OF PERSONAL DATA
    1. The processing of personal data is terminated, and personal data will be immediately destroyed:
      1. as soon as the purpose for which the personal data was processed ceases,
      2. at the request of the data subject if:
        1. they are no longer necessary for the purposes for which they were collected or otherwise processed;
        2. the data subject has withdrawn their consent to processing;
        3. the data subject has raised an objection to the processing of personal data concerning them;
        4. the processing of their personal data is in violation of the GDPR Regulations for other reasons.
      3. after the period for which the personal data was stored has expired.
    2. Retention period of personal data: In general, personal data is retained for as long as necessary for the purpose for which it was processed. We keep your data for as long as necessary for the purposes of providing services or until you withdraw your consent to the processing of personal data. This does not affect the Company's right to process user data in accordance with applicable legal regulations, especially for the purposes of resolving disputes and final settlement of all rights and obligations related to the provision of the relevant service.
  10. BREACH OF PERSONAL DATA SECURITY
    1. All personal data that you provide to us is secured by standard procedures and technologies. In this context, it is not possible to guarantee 100% that the provided information cannot be accessed, copied, disclosed, modified, or destroyed by breaching the Company's physical, technical, or managerial security measures.
    2. A breach of personal data security is a breach that leads to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access to personal data that is transmitted, stored, or otherwise processed.
    3. Authorized persons are required to promptly inform the Company of any breach of personal data security, including the threat of such a breach.
    4. If the controller becomes aware of the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access to personal data, they will inform the Office for Personal Data Protection (ÚOOÚ) within 72 hours of becoming aware of such a breach. The controller will provide the ÚOOÚ with all information about the breach of personal data security in accordance with the requirements of the GDPR regulations.
    5. In the event of a breach of personal data security, the controller is required to take appropriate measures to mitigate the negative impact of such a breach on the data subjects and to inform the data subjects about the breach of their personal data security.
Cookies settings

Come directly the shooting range. We are located right in the centre accessible by public transport or by walk.

PUBLIC TRANSPORT

Lublaňská 1729/23, Praha 2, SHOW MAP Line C (red), station I.P. Pavlova

Copyright © 2024 Activity Prague s.r.o.