Privacy Policy | My Apartment in Europe
Miroslav Horanský
Business ID (IČO): 75258986
Registered office: Ellnerové 3104/4, Prague 10 – Záběhlice, Czech Republic
Registered in the Trade Register of the Municipal District Prague 10
Email: info@myapartmentineurope.com
Phone: +420 605 407 932
Website: https://myapartmentineurope.com/
(hereinafter referred to as the “Controller”)
Within the scope of his business activities, the Controller processes the personal data of natural persons. This personal data protection and processing policy informs data subjects about the scope, purpose, and legal grounds for processing their personal data, as well as the rights they hold in this connection under Regulation of the European Parliament and of the Council of the European Union 2016/679, commonly known as the GDPR.
Personal Data Controller
The Personal Data Controller is Miroslav Horanský, Identification Number 75258986, with its registered office at Praha 10, Záběhlice, Ellnerové 3104/4, registered in the Trade Licensing Register of the Municipal District Office of Prague 10, contact e-mail: info@myapartmentineurope.com,
contact telephone: +420 605 407 932,
website: https://myapartmentineurope.com/.
The Controller processes personal data in accordance with the GDPR and the relevant legal regulations of the Czech Republic.
Scope and Sources of Processed Personal Data
The Controller processes personal data provided to him by the Client within the scope of a service inquiry. This data is obtained via the web form, e-mail, telephone communication, social networks Facebook and Instagram, or communication applications WhatsApp and Messenger.
The processed personal data primarily includes the first name and surname, e-mail address, telephone number, data regarding the requested period of stay and location, the number of persons including the eventual age of children if necessary for the accommodation reservation, information about the selected accommodation, and any other specifications voluntarily provided by the Client within the inquiry or subsequent communication.
The Controller explicitly does not process payment data or credit card details of Clients, as the payment takes place directly between the Client and the accommodation provider.
Purpose and Legal Basis of Processing
Personal data is processed for the purpose of handling inquiries and negotiating terms, which includes communication with the Client, searching for accommodation, and negotiating more favorable terms with the accommodation provider. Furthermore, data is processed to fulfill legal obligations in the area of bookkeeping and tax obligations in the event that invoices or financial documents are issued. The third purpose is the legitimate interest of the Controller for the reason of protecting rights and legal claims, for example, for defense in the event of a legal dispute.
The legal basis for processing is the performance of a contract or the taking of steps prior to entering into a contract at the request of the Client pursuant to Article 6 of the GDPR, the fulfillment of legal obligations of the Controller, and the legitimate interest of the Controller.
Transfer of Personal Data to Third Parties and Third Countries
The personal data of the Client may be transferred to the necessary extent to the accommodation provider for the purpose of successfully completing negotiations and making the accommodation reservation for the Client. Furthermore, data may be transferred to technical service providers, such as web hosting operators, e-mail service providers, and cloud storage providers, or to external accountants and legal representatives if necessary for the fulfillment of legal obligations.
Due to the utilization of international communication platforms operated by Meta Platforms and the WhatsApp application, personal data may be transferred to third countries outside the European Economic Area. These transfers are secured with appropriate protection guarantees, primarily through standard contractual clauses approved by the European Commission.
The Controller acts solely as a communication intermediary and is not a contractual party to the accommodation contract. The contractual relationship arises directly between the Client and the Accommodation Provider, who becomes an independent controller of the Client personal data for the purposes of the accommodation itself.
Retention Period of Personal Data
Personal data processed for the purposes of handling inquiries and negotiating accommodation is retained for the duration of the communication and subsequently for a period of three years from the conclusion of the last communication with the Client for reasons of protecting legal claims and statutory limitation periods. In the event that a taxable transaction occurs on the basis of the mediation, documents containing personal data are retained for a period of ten years in accordance with the relevant tax and accounting regulations of the Czech Republic. After the expiration of the specified periods, personal data is securely and irreversibly deleted or anonymized.
Rights of Data Subjects
Under the GDPR, the Client has the right of access to his personal data and to obtain information about its processing. Furthermore, the Client has the right to rectification of inaccurate or incomplete personal data, and the right to erasure if the data is no longer needed for the specified purposes or if the legal ground has ceased to exist. Other rights include the right to restriction of processing in cases defined in Article 18 of the GDPR, the right to data portability to another controller in a structured format, and the right to object to processing based on the legitimate interest of the Controller.
The Client also has the right to lodge a complaint with a supervisory authority. The competent authority in the Czech Republic is the Office for Personal Data Protection with its registered office at Pplk. Sochora 27, 170 00 Prague 7. However, the complaint may also be lodged in the country of residence of the Client, such as with the local data protection authority, including the Information Commissioner Office in the United Kingdom or other national supervisory bodies.
Security of Personal Data
The Controller declares that he has adopted all appropriate technical and organizational measures to ensure a high level of personal data protection. Access to personal data is restricted solely to the Controller, and the data is protected against unauthorized access, loss, misuse, or alteration by means of secure passwords, encryption, and technical security of communication devices.
Cookies
The websites of the Controller may use technical, functional, and analytical cookies in order to ensure the correct functioning of the website and to improve the user experience. Details regarding the use and settings of cookies are available in a separate banner or in the designated section of the website.
Final Provisions
The Controller reserves the right to update this Policy in the event of changes in legislation or the functionality of services. The current version is always available on the website.
This personal data protection and processing policy enters into force on January 1, 2026.