Personal data protection

Dear Amenity Resorts s.r.o. (“the Amenity company”) greatly values your trust and emphasizes the protection of your data, incl. personal data, during their processing. All processing of personal data is carried out by the company exclusively in accordance with valid and effective legal regulations, in particular in accordance with the General Data Protection Regulation (“GDPR”). In this privacy statement, you will find a detailed description of the processing of your personal data carried out by Amenity, within the scope set out in Articles 13 and 14 of the GDPR. For a simpler and faster search for the required information, you can use the interactive content below with a quick transition to the desired section.

I. Processing log files

1.1. When you visit the Amenity website, so-called log files are created and processed. This consists of the data below, which may (or may not) include personal data, which is sent to Amenity’s website server by the browser used on the terminal device with which you visited the website. These are the following data: information about the website from which you visited the Amenity website; information about the IP address of the device with an Internet connection that sent the request; information on the date and time of access; information about the name and URL of the displayed file; information about the website/application from which access was made (URL referrer); information about the browser used, or about the operating system of the used end device with an Internet connection and the designation of the connection provider.

1.2. If you are in your browser or operating system or in other settings of your end device have given consent to so-called geographic localization, this function is used exclusively so that you can be offered individual services in relation to your current location (e.g. the service of finding the nearest store).

1.3. The purpose of processing log files by Amenity is to: ensure a problem-free connection to Amenity’s website; ensuring comfortable use of Amenity’s website/applications; and evaluation of system security and stability.

1.4. The legal reason for the processing of log files is the legitimate interests of the company Amenity (Article 6, paragraph 1, letter f) of the GDPR), and therefore the processing of personal data is not subject to your consent as a data subject.

1.5. The processing time of the log files has been set by the company Amenity for 3 months with regard to the monitored purposes. After this time, the entire log file will be automatically deleted, incl. any personal data. Data about the geographical location of your end device, if you have agreed to their processing.

2. Processing of personal data within the e-shop

2.1. General information 2.1.1. The company Amenity operates an e-shop, which is available on the website eshop.amenity.cz (“E-shop”), in which you can purchase goods, both after prior registration and without registration. 2.1.2. In connection with the individual steps of the purchase in the E-shop (e.g. registration, purchase of goods, obtaining feedback on the completed purchase, etc.), Amenity will process your personal data as described below. 2.2. Processing of personal data within the user account 2.2.1. In order to make shopping convenient and faster, you can set up a user account in the E-shop after entering your e-mail address and password and fill in (and change) your identification and contact information. Thanks to this, you will not have to fill in your personal data every single purchase in the E-shop. 2.2.2. The purpose of processing your personal data within the user account is to simplify and speed up the subsequent conclusion of individual purchase contracts for goods purchased in the E-shop. 2.2.3. The legal reason for this processing of your personal data lies in the so-called fulfillment of a contractual obligation or actions aimed at concluding a contract (Article 6, paragraph 1, letter b) of the GDPR), and therefore it is a processing of personal data that is not subject to your consent as a data subject. 2.2.4. The processing time of your personal data within the user account is determined in accordance with the purpose of processing, so that the personal data specified in the user account will be processed by Amenity until you cancel your user account, or until you request its cancellation by Amenity. 2.3. Processing of personal data as part of the purchase of goods in the E-shop 2.3.1. When purchasing goods in the E-shop, Amenity will process your identification and contact personal data, as well as data about the purchased goods and the method of payment and delivery. 2.3.2. In the event that you purchase alcoholic beverages or tobacco products in the E-shop, Amenity will also process information about your age in order to fulfill its obligations arising from legal regulations. 2.3.3. The purpose of processing your personal data when purchasing goods in the E-shop is: conclusion and fulfillment of the purchase order discounts on goods, incl. its delivery; and in the case of age data, compliance with the obligations set by Amenity as sellers of alcoholic beverages and tobacco products by law. 2.3.4. The legal reason for this processing of personal data thus lies in the fulfillment of a contractual obligation (Article 6, paragraph 1, letter b) of the GDPR) and, in the case of the processing of age data, in the fulfillment of a legal obligation (Article 6, paragraph 1, letter c) of the GDPR). This is therefore the processing of personal data that is not tied to your consent as the data subject. 2.3.5. The period of processing of your personal data has been set with regard to the monitored purposes for a period of 5 years from the conclusion of the relevant purchase contract. After this period, your personal data will be deleted, unless there is a need to retain them for other purposes, e.g. protection of Amenity’s rights from a possible dispute, or valid and effective legal regulations do not stipulate longer periods for the retention of this personal data. 2.4. Processing of personal data when withdrawing from the contract for goods purchased in the E-shop 2.4.1. In the event that you withdraw from the purchase contract for goods purchased in the E-shop, Amenity will process your identification, contact information, as well as data about the goods to which the withdrawal from the purchase contract applies, which you will provide in the relevant form. 2.4.2. The purpose of processing your personal data in the event of withdrawal from the contract is to fulfill the obligation to return to you the purchase price paid for the goods to which the withdrawal from the purchase contract relates. 2.4.3. The legal reason for this processing of personal data therefore represents the fulfillment of legal, or contractual obligations (Article 6(1)(b) and (c) of the GDPR), and this is therefore the processing of personal data that is not subject to your consent as a data subject. 2.4.4. The period of processing of your personal data in connection with the withdrawal from the purchase contract for goods purchased in the E-shop was set at 90 days from the provision of the data. After this period, your personal data will be automatically deleted. 2.5. Processing of personal data to obtain feedback on the purchase made 2.5.1. The company Amenity highly values the opinions of its customers, and therefore finds out through feedback their experience with shopping in the E-shop, so that it can possibly adjust the purchase process to make it as convenient as possible for customers. 2.5.2. In order to determine your satisfaction with the course of the purchase and the entire purchase process, Amenity will process your e-mail address for the purpose of sending a satisfaction questionnaire in the form of a commercial communication in the sense of § 7 of Act No. 480/2004 Coll. Completing the questionnaire is voluntary. 2.5.3. In this case, the purpose of processing your e-mail address is Amenity’s interest in finding out the experience and satisfaction of customers with purchases in its E-shop, so that it can make any adjustments to its processes and thereby ensure the greatest possible customer satisfaction with purchases. 2.5.4. The legal reason for the processing of your e-mail address thus lies in the legitimate interests of the company Amenity (Article 6, paragraph 1, letter f) of the GDPR), and it is thus the processing of personal data that is not tied to your consent as a data subject. 2.5.5. The processing time of your e-mail address was set with regard to the purpose being monitored, and it will be anonymized after the second sending of the questionnaire and subsequently deleted.

3. Processing of personal data in connection with the claim of purchased goods

3.1. In connection with a claim for purchased goods, Amenity will process your personal data to the extent necessary for its settlement, i.e. min. to the extent of your identification and contact data and further data on the claimed goods. 3.2. The purpose of processing your personal data in this case is to process the claimed complaint, as well as to protect the rights of Amenity. 3.3. The legal reason for the processing of your personal data when making a complaint thus lies in the fulfillment of Amenity’s legal obligation to handle your complaint (Article 6(1)(c) GDPR) and further in Amenity’s legitimate interests (Article 6(1)(f) ) GDPR), and this is therefore the processing of personal data that is not tied to your consent as a data subject. 3.4. The time for personal data processing depends on the time necessary to process the complaint and then the time necessary to protect the legitimate interests of Amenity.

4. Processing of personal data for the purpose of sending the newsletter

4.1. If you are interested, you can subscribe to the newsletter that Amenity prepares for its customers on the Amenity website. In order to subscribe to the newsletter, it is necessary that you provide Amenity with some of your personal data for processing, namely min. in the range of your e-mail address. 4.2. In order to make sure that there were no errors when entering the e-mail address, we use the so-called double-opt-in procedure, where after entering your e-mail address in the login field, a confirmation link is sent to this e-mail address , and only when you click on this confirmation link will your e-mail address be included in our distribution list for sending the newsletter.

5. Processing of personal data in connection with consumer competitions

5.1. If you participate in a consumer competition organized by Amenity for its customers, Amenity will process your personal data to the extent provided, min. however, to the extent necessary for the implementation of the competition. More detailed conditions for the processing of personal data are always specified in the rules of each individual competition. 5.2. In this case, the purpose of processing your personal data is the implementation of the relevant competition and the associated promotion of Amenity as its organizer. 5.3. The legal reason for the processing of your personal data then lies in the fulfillment of a contractual obligation (Article 6, paragraph 1, letter b) of the GDPR) from the contract that is created by your participation in the competition between Amenity and you as a participant in the competition. This is therefore the processing of personal data that is not tied to your consent as the data subject. 5.4. The period of processing of personal data is specified in the rules of each specific competition.

6. Processing of personal data within the framework of the business relationship with contractual partners

6.1. As part of business cooperation, it is necessary for Amenity to process some personal data of contractual partners (natural persons doing business), their contact persons of contractual partners (legal persons and/or natural persons doing business) or persons participating in the establishment and implementation of the contractual relationship. (Some) of the following categories of personal data may be processed: personal identification data (e.g. name, surname, position held, date of birth, etc.); contact personal data (e.g. employer’s address, work mobile phone number or e-mail address, etc.); data documenting entries in public registers (e.g. extract from the commercial or trade register, etc.); data on the progress of the contractual relationship (e.g. due date, etc.); data on the ownership structure of the contractual partner; photographs and camera recordings (e.g. from the delivery of goods, etc.); other data related to the contractual relationship (e.g. Compliance initiatives regarding a possible violation of legal regulations, etc.). 6.2. Amenity will obtain personal data from you and the contractual partners themselves and, in justified cases, also from third parties (e.g. financial authorities or notifiers of possible Compliance initiatives, etc.) 6.3. In this case, the purpose of processing your personal data consists in: establishing and implementing a contractual relationship; (e.g. concluding a purchase contract for the supply of food or other products / concluding a contract for the provision of services / concluding a purchase contract for the sale of Amenity gift cards, etc.); fulfillment of obligations set by Amenity by legal regulations (e.g. in conjunction with legal regulations to prevent the legalization of proceeds from criminal activity, etc.); and the protection of Amenity’s legitimate interests (e.g. the exercise of legal claims from the contractual relationship, control of access to Amenity’s premises during negotiations, etc.). 6.4. The legal reason for the processing of your personal data by Amenity is: fulfillment of a contractual obligation (Article 6 paragraph 1 letter b) GDPR); fulfillment of a legal obligation (Article 6, paragraph 1, letter c) GDPR); and Amenity’s legitimate interests (Article 6(1)(f) GDPR). This is therefore the processing of personal data, which is not bound to your consent as a data subject, since without knowledge of your personal data, the Amenity company would not be able to achieve the above purposes 6.5. Amenity will process your personal data for the above-mentioned purposes for the time necessary to achieve them. The processing time is mainly based on the relevant legal regulations, such as the Accounting Act, the Value Added Tax Act or the Income Tax Act.

7. Processing of personal data within the framework of claims settlement

7.1. Although Amenity tries to prevent such situations and limit them as much as possible, in certain cases there are situations where Amenity’s customers may suffer some damage in connection with the sale of products (for example, this is damage caused by defective products). 7.2. As part of solving a damage event, Amenity must process the personal data of injured persons, witnesses and pests, namely min. to the extent of identification and contact personal data, data on the damage caused and other necessary related data. 7.3. The purpose of processing your personal data in this case is to resolve the damage incident, i.e. to clarify the course of damage, identify the damage, determine the amount of damage and possible compensation for damage. 7.4. The legal reason for the processing of your personal data by Amenity is: the fulfillment of a legal obligation to compensate for the damage caused, if Amenity is responsible for the damage (Article 6, paragraph 1, letter c) GDPR); Amenity’s legitimate interests in compensation for the damage caused to it (Article 6(1)(f) GDPR). With regard to the legal reasons for the processing of your personal data, this is processing that is not subject to your consent as a subject here data. 7.5. Amenity will process your personal data for the above-mentioned purpose for the time necessary to achieve it, unless there is a need to process it for other purposes (e.g. for the needs of court proceedings, i.e. for other legitimate interests of Amenity).

8. Processing of media representatives’ personal data

8.1. Representatives of the media may, in connection with the performance of their profession, contact the company Amenity with their questions, especially via the e-mail address eshop@amenity.cz. The company Amenity will questions, incl. to process voluntarily provided personal data (identifying personal data and the area of interest of the relevant media representative). 8.2. The purpose of processing your personal data consists in: answering the question raised; and records of contacts of Amenity media representatives in cases where it needs to communicate important facts to the public through them (e.g. withdrawal of a certain product, etc.). 8.3. The legal reason for the processing of your personal data, with regard to the above-mentioned purposes, consists in: fulfillment of the contractual obligation established by your inquiry for the purpose of processing the inquiry (Article 6, paragraph 1, letter b) of the GDPR); and Amenity’s legitimate interests in communicating with the public in the case of keeping records of contacts of media representatives (Article 6, paragraph 1, letter f) GDPR). With regard to the legal reasons for the processing of your personal data, this is processing that is not bound to your consent as the data subject. 8.4. Personal data processed for processing your inquiry will be processed for 90 days and then automatically anonymized. Your personal data kept in the records for communication with the public will be processed for the duration of your active communication with Amenity and subsequently deleted after 2 years from the end of active communication.

9. Cookies files and processing of personal data / Google Analytics / Targeting and RE-targeting

9.1. General information 9.1. Amenity uses so-called cookie files on its website. These are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit websites, and do not harm it in any way. Information associated with your end device that was used to display the website is stored in cookie files. 9.2. Although cookies do not allow the identification of a specific user of the end device, they can still be considered personal data within the meaning of the GDPR under certain conditions. For this reason, Amenity applies the same rules to the handling of these files as it does to the handling of personal data. 9.3. On the one hand, Amenity uses so-called SESSION COOKIES, which help recognize that you have already visited some of Amenity’s pages, or that you have already logged in to your user account in the E-shop. Session cookies are automatically deleted after you leave the Amenity website. 9.4. In addition, Amenity uses so-called TEMPORARY COOKIES, which are stored on your end device for a specified period of time and enable Amenity to recognize when you next visit the website that you have already visited this website in the past and what settings you have made, incl. goods that you have placed in the E-shop basket. The goal of these cookies is to simplify and make your movement through the Amenity website more pleasant. 9.5. Cookies are used by Amenity for the following purposes: statistical evaluation of its website traffic; optimizing your website; streamlining Amenity’s product offering by displaying personalized advertising derived from user behavior on the website, or application or newsletter. 9.6. With regard to the stated purposes, the legal reason for the processing of this personal data lies in the legitimate interests of Amenity (Article 6(1)(f) GDPR). This is therefore the processing of personal data that is not tied to your consent as the data subject. 9.7. You can generally prevent the storage of cookie files on your end device, valid for all cookie files used by Amenity, in the following ways: by changing your browser settings according to the instructions in the cookie file usage policy; or by raising an objection with Amenity in the manner specified in point 12.9 of this Privacy Statement. 9.8. Preventing the storage of cookie files on your end device may lead to the fact that you will not be able to use some functions of the website to their full extent. If you have set up a customer account and are logged in, the information stored in cookie files will also be assigned to your customer account. 9.10. Google Analytics 9.10.1. To optimize the website, Amenity uses the analytical tool Google Analytics, developed and operated by Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). 9.10.3. Google analytics analyzes the behavior of website users by means of pseudonymized profiles that it creates on the basis of cookie files that collect the following data: browser type/version; the operating system used; referer URL (previously visited page); the computer name of the host from which the access was made (IP address); server query time. 9.10.4. The company uses the so-called masking of IP addresses in the Google Analytics tool, where the IP address is already collected in a shortened format, and therefore any identification of the user of the end device is impossible. 9.10.5. The data created by the cookie files are sent to a Google server in the United States of America for analysis by the Google Analytics tool. Google does not connect the IP address contained in cookie files with any other data available to it. 9.10.6. The processing time of cookie files within the Google Analytics tool is set to 14 months. They will then be automatically deleted. Further information on the protection of personal data in connection with Google Analytics can be found on the Google Analytics website. 9.10.7. You can prevent the storage of cookie files for the Google Analytics tool in the following ways: the procedure described in point 9.8. above; by downloading and installing this browser add-on; or, especially in the case of mobile devices, by clicking on this link, which will download the so-called opt-out cookie file, which will prevent the future collection of cookies on the Amenity website (this opt-out cookie file only works in the browser through which it was downloaded ).

10. Processing of personal data on social networks

10.1. General information 10.1.1. The company Amenity also uses social networks for the purposes of communication with the public, in the form of setting up and operating its pages on these social networks and further by implementing plugins of these social networks into its websites. 10.1.2. Within social networks, your personal data is processed by their operators. In those areas of social networks that Amenity can influence by setting parameters, Amenity is considered, together with the operator of the relevant social network, a so-called joint controller within the meaning of Article 26 of the GDPR. 10.1.3. The company Amenity has no influence on the processing of personal data by operators of individual social networks, nor is it aware of the scope of this processing. It cannot be ruled out that social network operators do not use web tracking methods, do not create personalized profiles of your behavior, etc. More information on the processing of personal data by the relevant social network operator can be found in the terms of use of the relevant social network or the terms of personal data protection. Links to websites containing these documents can be found in clause 11.1 below. 10.1.4. In this case, the purpose of processing your personal data is to ensure Amenity’s communication with the public. 10.1.5. The legal reason for processing your personal data for the above-mentioned purpose is the legitimate interests of Amenity (Article 6, paragraph 1, letter f) GDPR). This is the processing of personal data that does not require your consent as a data subject. 10.1.6. Amenity will not store or process your personal data in any way. Information about the processing time of your personal data by the operator of the relevant plugin is not available to Amenity. 10.2. Processing of personal data on Amenity’s Fanpages 10.2.1. Amenity has established and operates Fanpages on the following social networks: Facebook, available at https://www.facebook.com/amenityresorts/. 10.2.2. As part of the use of Fanpages, personal data is processed both by Amenity and by the operator of the social network itself. The company Amenity and the operator of the relevant social network thus processing personal data as so-called joint administrators (see point 11.1 below for details). 10.2.3. The personal data that you post on one of Amenity’s Fanpages (such as comments / videos P images / public messages, etc.) is processed by Amenity in the form of sharing them on this Fanpage, exclusively for the purpose of communicating with the public. 10.2.4. The legal basis for the processing of your personal data is therefore the legitimate interests of the company Amenity (Article 6, paragraph 1, letter f) of the GDPR), and thus the processing of personal data is not subject to the consent of the data subjects. 10.2.5. Amenity will process your personal data on the relevant Fanpage until the relevant post is removed by you or Amenity. 10.2.6. In the event that Amenity conducts a consumer competition through its Fanpage, the personal data of the competition participants will be processed according to the rules set out in point 6 above.

11. Recipients of your personal data

11.1. Joint administrators 11.1.1. As set out in clause 10 above, Amenity is a joint administrator in certain cases Your personal data with social network operators, namely: in the case of the social network Facebook with Facebook Inc., with registered office at 1601 South California Avenue, Palo Alto, CA 94304, USA. More information on the terms of use of the Facebook social network and the processing of your personal data can be found in particular at the following links: http://www.facebook.com/policy.php http://www.facebook.com/about/privacy/your-info- on-other#applications http://www.facebook.com/about/privacy/your-info#everyoneinfo in the case of the social network Instagram with Instagram Inc., with registered office at 1601 Willow Road, Menlo Park, California 94025, USA. More information on the terms of use of the Instagram service and the processing of your personal data can be found in particular at the following links: https://help.instagram.com 11.1.2. We would like to inform you that operators of individual social networks can use tracking tools and create personalized profiles. This processing of personal data is fully the responsibility of the relevant social network operator as the administrator of personal data. 11.2. Other beneficiaries as independent administrators 11.2.1. In the event that it is necessary for us to forward your request, question, claim or damage event to our contractual partner (supplier of the relevant product) for handling, as an independent controller of your personal data in the sense of the GDPR, we will only do so if you give us permission to do so express consent to the transfer of your personal data. 11.3. Transfer of personal data outside the European Union or the European Economic Area 11.3.1. Amenity generally does not transfer your personal data to recipients located outside the European Union or the European Economic Area. 11.3.2. However, if, in exceptional cases, your personal data should be transferred to recipients outside the European Union or the European Economic Area, Amenity will only do so if the GDPR conditions are met, i.e. Article 44 et seq. GDPR.

12. Your rights related to the protection of personal data

12.1. Overview 12.1.1. As a data subject within the meaning of the GDPR, you have the following rights in connection with the processing of your personal data, subject to the fulfillment of the conditions provided for in the GDPR: the right to withdraw your consent to the processing of your personal data at any time, if the processing is based on this consent (see point 12.2 below); the right to access the personal data that Amenity processes about you (see point 12.3 below); the right to correct inaccurate data and complete incomplete personal data (see point 12.4 below); the right to delete personal data that Amenity processes about you (see point 12.5 below); the right to restrict the processing of your personal data (see point 12.6 below); the right to portability of your personal data (see point 12.7 below); the right to object to the processing of your personal data (see point 12.8 below); the right to object to the processing of your personal data for direct marketing purposes (see point 12.9 below); and the right to lodge a complaint about the processing of your personal data with a supervisory authority (see point 13.10 below). 12.2. The right to revoke the consent granted 12.2.1. In accordance with Article 7(3) of the GDPR, you may at any time revoke your consent to the processing of personal data that you have given to Amenity and based on which Amenity processes your personal data. 12.2.2. You can withdraw your consent in any way, preferably by post or e-mail addressed to Amenity as the administrator of personal data at the contact details listed below in point 13. 12.2.3. Revocation of consent to the processing of personal data does not affect the legality of the processing of personal data prior to its revocation. 12.3. Right to access personal data 12.3.1. In accordance with Article 15 of the GDPR, you have the right to obtain confirmation from Amenity as a personal data controller as to whether it is processing your personal data. 12.3.2. If Amenity will process your personal data, then you have the right to obtain access to this personal data, as well as to information: about the purposes for which your personal data is processed; about the categories of your personal data that are processed; about recipients or categories of recipients to whom your personal data has been or will be made available; about the planned period for which your personal data will be stored, or if it cannot be determined, the criteria used to determine this period; about the fact that you have the right to request correction, erasure and/or restriction of the processing of your personal data, as well as the right to object to this processing; on the right to file a complaint about the processing of personal data to the supervisory authority; about sources of personal data, if Amenity has not obtained it from you; about the fact whether automated decision-making takes place, including profiling, and if so, then also information about the procedure used, as well as the meaning and expected consequences that such processing may have for you. 12.3.3. Should Amenity transfer your personal data to a third country or an international organization, you have the right to be informed of the appropriate safeguards according to Article 46 of the GDPR that apply to such transfers taxes apply. 12.4 Right to rectification 12.4.1. In accordance with Article 16 GDPR, you have the right to correct inaccurate, or completion of incomplete personal data that Amenity processes about you, without undue delay, when inaccuracy, or becomes aware of the incompleteness of the processed personal data. 12.5 Right to erasure 12.5.1. Pursuant to Article 17(1) of the GDPR, you have the right to have Amenity, as the controller of your personal data, delete this personal data without undue delay if any of the following reasons are given: the processed personal data are no longer needed for the purposes for which have been collected or otherwise processed; you revoke your consent on the basis of which your personal data was processed, and there is no other legal reason for their processing; you object to the processing of your personal data pursuant to Article 21 paragraph 1 or 2 of the GDPR, and in the event of an objection pursuant to Article 21 paragraph 1 of the GDPR, there are no reasons that would entitle Amenity to continue processing your personal data; personal data were processed unlawfully; personal data must be deleted by Amenity to comply with a relevant legal obligation; and/or personal data were collected in connection with the offer of information society services in accordance with Article 8 paragraph 1 of the GDPR. 12.5.2. If Amenity has disclosed your personal data and is now required to delete that personal data, it will take reasonable measures, taking into account the available technology and the cost of implementation, to ensure that third parties processing that personal data are informed that you wish them to delete all references to this personal data, their copies or replicas. 12.6. Right to restriction of processing 12.6.1. In accordance with Article 18 of the GDPR, you have the right to request that Amenity limit the processing of your personal data if any of the following cases occur: you deny the accuracy of your personal data that is being processed; the processing of your personal data is illegal and instead of erasing your personal data, you request the restriction of their use; Amenity, as the administrator of your personal data, no longer needs this data for processing purposes, but you require it for the determination, exercise or defense of legal claims; or you have objected to the processing of your personal data in accordance with Article 21, paragraph 1 of the GDPR, and it has not yet been verified whether the legitimate reasons of Amenity as a personal data controller outweigh the legitimate reasons against the processing of your personal data. 12.7. Right to Portability 12.7.1. In accordance with Article 20 of the GDPR, you have the right to receive the personal data that Amenity processes about you, and which you yourself have provided for processing, in a structured, commonly used and machine-readable format, as well as the right to transfer this data to another controller. You have this right only if: the processing of your personal data is based on your consent to their processing; and the processing of your personal data is carried out automatically. 12.8. General right to object to processing 12.8.1. In accordance with Article 21 paragraph 1 of the GDPR, you have the right, for reasons relating to your specific situation, to object to the processing of your personal data. 12.8.2. The right to object to the processing of your personal data applies to the processing of your personal data that Amenity carries out for the purpose of its legitimate interests, i.e. on the basis of Article 6 paragraph 1 letter f) GDPR. This is the processing of your personal data for: protection of Amenity’s website in the form of processing log files (see point 1 above); finding feedback with a purchase in the E-shop (see point 2.5 above); settlement of your complaints (see point 3 above); asserting Amenity’s claims against business partners (see point 6 above); protection of Amenity’s claims when dealing with claims (see point 7 above); communication with media representatives (see point 8 above); analysis of user behavior on websites (see point 9 above) and communication with the public via social networks (see point 10 above). 12.8.3. Amenity will not further process your personal data after receiving your objection, unless legitimate reasons are given that outweigh the interests, rights or freedoms justifying your objections, or Amenity will process your personal data for the determination, exercise or defense of legal claims. 12.8.4. You can deliver your objections to Amenity in any form, but preferably via an e-mail message sent to the e-mail address: eshop@amenit.cz. 12.9. Right to object to direct marketing 12.9.1. In accordance with Article 21, paragraph 2 GDPR, you have the right to object at any time to the processing of personal data carried out for the purposes of direct marketing, incl. profiling. 12.9.2. Objections to the processing of your personal data in connection with direct marketing can be lodged with Amenity in any way, but preferably at the e-mail address eshop@amenity.cz 12.9.3. After delivery of your objection, Amenity will not further Vour personal data for direct marketing purposes, incl. profiling, process. 12.10. The right to file a complaint with the supervisory authority 12.10.1. As a data subject, you have the right to file a complaint with a supervisory authority about the processing of personal data carried out by Amenity. 12.10.2. The supervisory authority for the processing of personal data carried out by Amenity is the Office for the Protection of Personal Data (www.uoou.cz).

13. Contact details

13.1 Identification of the administrator of personal data 13.1.1. The administrator of your personal data processed in accordance with this Privacy Statement is Amenity. The contact details of Amenity are as follows: Amenity Resorts s.r.o. with registered office at Ratajova 1113/8, 148 00, Prague 4 Kunratice, IČO: 276 50 626 entry in the commercial register kept at the Municipal Court in Prague file number C 121600. 13.2. Contact details of the administrator for questions or exercising your rights 13.2.1. You can contact Amenity in writing at the above address or by e-mail or by phone, when contact details can be found at https://eshop.amenity.cz. 13.3. Contact details of the representative 13.3.1. Amenity has established a personal data protection officer to whom you can contact with your questions about the processing of personal data carried out by Amenity. The personal data protection officer of Amenity can be contacted by e-mail sent to the e-mail address eshop@amenity.cz.