Legal
Protection of Personal Data
Information on the processing of personal data pursuant to Regulation (EU) 2016/679 (GDPR)
Effective date: 1 January 2025
1. Data Controller
The controller of your personal data within the meaning of Art. 4(7) GDPR is:
PARADISES s.r.o.
IČ: 04139275
Registered office: Soukenická 1665/36, 110 00, Nové Město
E-mail: paradisemstudio@gmail.com
Phone: +420 777 082 424
2. Categories of Personal Data Processed
We process personal data only where you voluntarily provide it — for example by submitting a contact form, gift voucher request, or job application. Depending on the context, this may include:
- Identification data — first name, last name
- Contact data — phone number, e-mail address
- Communication content — message text, special requests
- Employment data — CV, work experience (job applicants only)
We do not collect special categories of personal data (health data, biometric data, etc.) and we do not carry out automated individual decision-making or profiling.
3. Purposes and Legal Basis for Processing
Handling enquiries and reservations
We process your data to respond to your enquiry, confirm bookings, and provide the service you requested.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps
Gift voucher orders
We process your data to prepare, personalise, and deliver the gift voucher you ordered, and to arrange payment.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract
Job applications
We process application data to assess suitability for the advertised position. Data is used solely for recruitment purposes.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller
Legal obligations
In certain cases we are required by law to retain data (e.g. for accounting and tax purposes).
Legal basis: Art. 6(1)(c) GDPR — compliance with a legal obligation
4. Retention Periods
Personal data is retained only for as long as necessary for the stated purpose or as required by applicable law:
- Enquiries and reservation data: up to 12 months after last contact
- Gift voucher orders: up to 3 years for accounting and tax purposes
- Job applications: up to 6 months after the recruitment process ends
- Accounting documents: 5 years as required by Czech accounting law
After the applicable retention period has expired, data is securely and irreversibly deleted.
5. Recipients and Data Transfers
We do not sell or rent your personal data to third parties. Data may be disclosed only:
- To data processors who provide technical services (website hosting, e-mail delivery) — these parties are bound by data processing agreements and may not use the data for their own purposes.
- To public authorities if required by law (e.g. tax office, law enforcement).
We do not transfer personal data outside the European Economic Area (EEA). If this were to change, we would ensure adequate safeguards in accordance with Chapter V GDPR.
6. Your Rights as a Data Subject
Under GDPR you have the following rights, which you may exercise at any time by contacting us at paradisemstudio@gmail.com:
Right of access
Obtain confirmation of whether we process your data and receive a copy of it.
Right to rectification
Request correction of inaccurate or incomplete personal data.
Right to erasure
Request deletion of your data where there is no longer a lawful basis for its processing ("right to be forgotten").
Right to restriction of processing
Request that we limit the processing of your data in certain circumstances.
Right to data portability
Receive your data in a structured, commonly used, machine-readable format.
Right to object
Object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
We will respond to your request within 30 days of receipt. The service is provided free of charge; however, we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.
7. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes GDPR or applicable national law, you have the right to lodge a complaint with the competent supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů — ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7
Website: www.uoou.cz
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and accidental loss, destruction or damage. These measures include:
- Encrypted HTTPS connection for all website traffic
- Access controls limiting data access to authorised staff only
- Regular review of security measures
9. Changes to This Notice
This notice may be updated to reflect changes in our processing activities or legal requirements. The current version is always available at this page. We recommend reviewing it periodically. Material changes will be communicated via the website.
Questions about your personal data? Contact us: paradisemstudio@gmail.com · +420 777 082 424