Information about the processing of personal data

Data Controller and Contact Information

Your personal data will be processed by bookUP s.r.o, located at Kubánské náměstí 1391/11, Vršovice, 10000 Prague 10, ID number 19293828, registered with the Municipal Court in Prague under file number C 384284 (hereinafter referred to as the "controller" or "we").

Contact Information:

Phone: +420 296 363 199
Email: info@bookup.cz

Contact Information of the Data Protection Officer:

Marek Kadeřábek
Phone: +420 296 363 199
Email: osobni.udaje@bookup.cz

Processed Personal Data, Legal Basis, and Purpose of Processing

By registering for the bookup.cz service (hereinafter referred to as the "Service"), you are entering into a contract with us. This contract is the legal basis for processing personal data.

For the purpose of providing the Service, we will process your identification and contact details, which are marked as mandatory during registration, including all updates made by you, as well as the IP address of your computer, information about the date and time of registration and its possible termination, and further details about your orders and purchases within the Service (identification of ordered/purchased products and products accessible to users within the Service; if you purchase a product directly from us, then also information about payment for this product, the beginning and end of product provision, and in the case of regularly renewed subscriptions, the period for which the subscription is renewed).

If you have provided non-mandatory data during your registration, or if such data have been updated by you, we will use this data to improve the Service for the duration of its provision. The legal basis for this processing is the legitimate interest of our company in the development of the Service. Non-mandatory data provided can be deleted or changed at any time in your user interface.

We will use your email address and any non-mandatory data for sending commercial communications related to the Service for the duration of its provision. The legal basis for this processing is the legitimate interest of our company in the development of the Service. You can opt out of receiving these commercial communications at any time using the method specified in each commercial communication or in your user interface.

If you purchase a product through the Service, you are entering into a contract with us, or with an authorized seller identified within the Service, for the provision of the respective product. This contract is the legal basis for processing personal data. Personal data processed when providing the respective product and the person responsible for processing these personal data are specified in the terms of provision of the respective product within the Service. Providing personal data is not mandatory; however, if you do not provide personal data marked as mandatory during registration, we will not be able to provide you with the Service and will not conclude a contract with you for its provision.

Recipients of Personal Data and Location of Personal Data Processing

Employees of our company and, if necessary, external processors assigned specific tasks related to the purpose of personal data processing have access to your personal data.

We will not disclose your personal data to anyone except for providing data about the product order to its authorized seller within the Service. Conversely, the authorized seller will provide us with information about the product you purchased in order to display the purchase or to make the product accessible within the Service.

Your personal data will be stored electronically on servers located exclusively in the member states of the European Union.

Duration of Personal Data Processing

We will process your personal data collected for the purpose of fulfilling the contract for the duration of the contractual relationship and further in accordance with the statutory limitation periods established by the Civil Code for a period of 10 years from the termination of the contractual relationship. After the termination of the contractual relationship, the legal basis for this processing will be our company's legitimate interest in protecting its rights and demonstrating compliance with obligations arising from the contract.

Any optional personal data provided or updated by you during registration or at any later time, which you have not deleted yourself, will be processed until the provision of the Service is terminated.

Your Rights Regarding Personal Data Processing

You have the right to request access to your data at any time. This means that upon your request, we will provide you with information about what personal data we process, for what purpose, from which source these personal data were obtained, and for how long they will be processed.

You have the right to request correction of inaccurate personal data, or their completion if they are incomplete, at any time. You also have the right to request the erasure of personal data that are no longer necessary for the purpose for which they were originally collected, or which the controller is no longer authorized to use for other reasons (e.g., if they were processed unlawfully, their erasure is required by law, etc.).

Furthermore, you have the right to object to the processing of your data for direct marketing purposes (sending commercial communications) at any time. If you do so, your personal data will no longer be used for this purpose. You also have the right to object to the processing of your personal data based on our legitimate interest. In such a case, we will continue to process your data only if it is demonstrated that there are compelling legitimate reasons for such processing.

You have the right to request restriction of the processing of your personal data – this means that you can ask us not to erase your data when we would otherwise be required to do so, and you can also ask us not to continue processing your personal data until it is clarified whether the processed data are accurate or whether your objection to the processing of personal data has been justified.

You have the right to data portability – this means that you can request us to provide you, or a controller designated by you, if technically feasible, with the personal data processed by us in electronic format so that they can be easily transferred to another controller (service provider). This right applies only to personal data that we have obtained in electronic format, based on your consent or a concluded contract.

How to Exercise Your Rights

You can exercise your rights (including the right to lodge a complaint) with the data controller, which is our company. You can contact us in writing, by telephone, or by email (contact details are provided above).

If you believe that there has been a breach of the law or the European Regulation on the protection of personal data in the processing of your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection at Pplk. Sochora 27, 170 00 Prague 7, tel. +420 234 665 111, email: posta@uoou.cz, website: https://www.uoou.cz.

These Information on the processing of personal data of registered users of the bookup.cz service are valid from June 1, 2023.