Privacy Policy (GDPR)

Privacy Policy (GDPR)

This document describes how SANSEI spol. s r.o. (hereinafter referred to as "Company" or "we") handles the personal data it obtains in connection with the provision of its services and the operation of the website https://sansei.cz (hereinafter referred to as "Website").

1. Personal data controller

- Business name: SANSEI spol. s r.o.

- Headquarters: Rybářská 839/2, Karlovy Vary, 36017, CZ

- ID: 29122040

- Managing Director: Olga Maksimova

- E-mail: montecavo@volny.cz

- Phone: +420 723 460 050

- Web: https://sansei.cz

The Company is the data controller. This means that it determines the purposes and means of the processing of personal data and is responsible for the compliance of the processing with applicable law.

2. What personal data we process

In connection with our activities, we may process in particular the following personal data:

1. Contact details: name, surname, e-mail, telephone;

2. Billing information: for invoicing (address, ID number, VAT number, etc.), if applicable;

3. Service data: information on booking massages (type of massage, preferred date, any notes on the treatment), data related to the stay in partner hotels;

4. Communication data: information provided by e-mail, telephone, contact forms;

5. Operational and technical data: IP address, cookies, behavioural data on the Website (for more information see the Cookies section).

3. Purposes and legal basis of processing

1. Provision of services

- Purpose: handling massage bookings, communication with clients, issuing tax documents.

- Legal basis: performance of the contract (booking and provision of massage services) and fulfilment of a legal obligation (Accounting Act).

2. Marketing and sending commercial messages

- Purpose: to offer similar services, special events or news via email.

- Legal basis: legitimate interest of the Company (for existing clients) or consent (for other recipients).

- You can unsubscribe at any time by clicking on the link in the email or by sending a request to our contact email.

3. Ensuring the security and improvement of the Website

- Purpose: protection against abuse, detection of technical problems, optimization of site functionality.

- Legal basis: the Company's legitimate interest in providing a secure and user-friendly Website.

4. Period of storage of personal data

- We only retain personal data for as long as is necessary for the purposes for which it was collected.

- We store contact and billing data related to orders in accordance with legal archiving periods (usually 10 years).

- We retain booking and communication data for record-keeping purposes and for any claims or defences for a maximum of 3 years from the last order, unless a longer period is required by law.

5. Transfer of personal data to third parties

- IT and hosting service providers: so that we can safely operate our Website and booking systems.

- Partner hotels: only if the booking is linked to a stay at one of our 20+ partner hotels (in which case we share the necessary data to organise the massage service).

- Public authorities: where required by law or necessary to exercise our legal rights.

Except as stated, we do not pass on personal data to other third parties.

6. Security of personal data

- We comply with security measures corresponding to current technical standards to prevent unauthorised access to personal data.

- Access to the data is restricted to authorised persons who have been instructed on the data protection policy and are subject to the obligation of confidentiality.

7. Rights of data subjects

Under current legislation (GDPR) you have the right to:

1. Right of access - to obtain confirmation of whether we are processing your data and to request a copy of the data we are processing.

2. Right to rectification - to request rectification of inaccurate or incomplete personal data.

3. Right to erasure ("right to be forgotten") - to request the erasure of personal data under certain conditions.

4. Right to restriction of processing - in some cases you can request restriction of processing.

5. Right to object - to processing on the basis of legitimate interest or processing for direct marketing purposes.

6. Right to portability - if the processing is based on consent or contract and is carried out by automated means, you have the right to obtain your personal data in a structured format.

7. Right to withdraw consent - if the processing is based on your consent, you can withdraw it at any time.

If you wish to exercise your rights, please contact us at montecavo@volny.cz or at the contacts listed above. If you disagree with how we handle your data, you also have the right to lodge a complaint with the supervisory authority (the Data Protection Authority).

8. Cookies and tracking technologies

- We use cookies on our Website to improve site functionality and analyse traffic.

- Some cookies are necessary for the proper functioning of the Website (essential cookies), others are used for traffic analysis or marketing.

- We inform you about the use of marketing and analytics cookies when you first visit the Site and require your consent where required by law. For detailed information about cookies, please see our Cookie Policy.

9. Changes to the Privacy Policy

We may update this policy from time to time, particularly due to changes in legislation or the scope of the services we provide. We will always post the new version on our website and may notify you by email if we make any material changes.

---

If you have any questions about this Privacy Policy, please do not hesitate to contact us:

SANSEI spol. s r.o.
Rybářská 839/2, Karlovy Vary, 36017, CZ
IČO: 29122040
E-mail: montecavo@volny.cz
Telefon: +420 723 460 050
Web: https://sansei.cz/
Jednatel: Olga Maksimova