Privacy Policy
These privacy statements set out the terms on which MGM Holding s.r.o. (ID 02189640, entered in the Commercial Register kept by the Prague Municipal Court in Section C, File No. 216571, legal seat Orebitská 101/16, Žižkov, 130 00 Prague 3, Czech Republic), the owner of “Student republic” brand collects, processes and stores personal information (also known as personal data).
The protection and integrity of your personal information are important to us, as is safeguarding your private sphere.
We aim to offer you as comfortable a living space as possible as well as one tailored to your requirements – an experience punctuated by opportunities to meet new people, helping you feel at home in your new city. Our privacy policy explains which personal information we collect either directly or indirectly about you and how we use this data. Under no circumstances will The protection and integrity of your personal information are important to us, as is safeguarding your private sphere.
When you contact us, whether it be by email, telephone, through a form on our website or completing an application form for a room with us, we need to collect certain personal data relating to you to ensure you receive the best possible service from us.
We collect certain personal information relating to you throughout our relationship with you, whether it be you making an initial enquiry to view a room or applying for a room with us or entering into a contract with us for a room.
Who are We?
Student republic is owned by MGM Holding s.r.o., ID 02189640, legal seat Orebitská 101/16, Žižkov, 130 00 Prague 3, Czech Republic. Student republic provides student and young professional accommodation currently in Prague, Czech Republic and we strive to provide safe, affordable, comfortable, high-quality accommodation. Student Republic is a highly dynamic company with aim to provide agreeable accommodation in a friendly environment at affordable prices.
What is personal information?
Personal information is information which can be used to identify you or data which we can connect with you. Our privacy policy also states which decisions are available to you regarding the data collected by us and how you can make these decisions. The policy applies to all services offered by us. In addition, it applies websites and other interactions outside of the Internet, such as a visit to our buildings or the use of other services offered by us.
Data Protection Legislation
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – the GDPR – Student republic informs data subjects about the conditions under which personal data are processed.
Information about the Data Controller MGM Holding s.r.o., ID 02189640, entered in the Commercial Register kept by the Prague Municipal Court in Section C, File No. 216571, legal seat Orebitská 101/16, Žižkov, 130 00 Prague 3, Czech Republic in its capacity as the data controller.
Principles for Processing Personal Data
Student republic considers the protection of personal data to be important and pays careful attention to it. We process your personal data only in the scope necessary for executing our activities or in relation to the services you use. We protect personal data in accordance with law. The regulation applies the principles and rules arising from the GDPR:
The principle of lawfulness, which requires that we always process your personal data in accordance with law and based on at least one legal title.
The principle of fairness and transparency, which requires that we process your personal data fairly and in a transparent manner and that we provide you information about the manner of their processing together with information about who has access to your data. This includes our obligation to inform you of any case of a serious breach of security or compromise relating to your personal data.
The principle of purpose limitation, which allows us to collect your personal data only for a clearly defined purpose.
The principle of data minimization, which requires that we process personal data that is necessary, relevant, and adequate in relation to the purpose of the processing.
The principle of accuracy, which requires that we take all reasonable measures allowing us to ensure your personal data is regularly updated or corrected.
The principle of storage limitation, which requires that we store your personal data only for the period necessary for the specific purpose in relation to processing. As soon as the period or purpose for processing expires, we will delete your personal data or anonymized the data (altering the data so that they are no longer personally connected to you).
The principle of integrity and confidentiality, non-repudiation, and availability, which requires that we secure and protect your personal data against unauthorized or unlawful processing, loss, or destruction. For these reasons, we take technical and organizational measures for protecting your personal data. In addition, we ensure that only authorized staff has access to your personal data.
The principle of accountability, which requires that we are able to demonstrate compliance with all of the conditions stipulated above.
What information are we collecting?
Student republic the personal information it collects to the personal information required to provide the services you have requested. You may provide that information to us via our website enquiry form, over the telephone, via email, in person or through an application form. The types of personal information we collect may include, for example:
Data for identification - personal data which allow for the precise identification of the applicant or client (name, surname, date of birth), place of permanent residence, number of the client's ID, etc.;
Contact data - personal data which enables contact with the client (for example, the contact address, phone number, e-mail, etc. given by the client).
Copies of official documents,
Recorded correspondence with clients (including email communication).
Data originating from external sources - for example, publicly accessible registers such as the Commercial Register, etc.
Information about concluded contract
Information needed for bookkeeping
Information bank details and banking information
Special categories of personal data (sensitive data) processed only in exceptional cases with strict observance of applicable regulations on personal data (obligation towards Immigration police).
For security reasons, video cameras can be operating in the common areas of our buildings, though these are clearly visible and marked as such. The video cameras’ sole purpose is to prevent any specific dangers for tenants and the property as a whole, and therefore serve our legitimate interests.
What is the legal basis for using your information?
Student republic is required to have a “legal basis” for collecting, processing and storing your personal information. Under the Data Protection Legislation, there are six available lawful bases which allow for us to process personal information. These are:
Consent
Contract
Legal obligation
Vital interests
Public task; and
Legitimate interests.
As you have not yet entered (or may not enter) into a contract with us, the lawful basis that Student Republic relies upon when collecting, processing and storing your personal information is Legitimate Interests. That is on the basis that it is necessary for us to obtain and maintain your personal information on our systems in order to respond to your enquiry and see if we can allocate you a room in the property you have enquired about with a view to ultimately entering into a contract with you. If you have consented to us contacting you for marketing purposes, the legal basis for us contacting you for such purposes is Consent. In the event that we collect, process and store sensitive personal data about you, the lawful basis for us doing so will be your provision of explicit consent.
What do we do with your information?
Student republic will use the personal information you provide to us in the following ways:
To enter into and fulfill our obligations and exercise our rights under your contract with us;
To process payments from you in accordance with your contract with us and, if necessary, instruct and liaise with authorities, courts or debt collection agencies if you fall behind with your payments;
To operate CCTV systems and review CCTV footage for security purposes at our properties; and
To engage and make contact with you in the method you have requested.
The personal information we collect from you will be securely stored. It will be used by us in accordance with this privacy statement and also in accordance with your rights under the Data Protection Legislation. Occasionally, and only when relevant, Student republic may collect special categories of personal information (sometimes referred to as sensitive personal data) relating to you, such as information relating to your health and/or any disabilities you may have. Such information will be used to assess your accommodation needs and to ensure that your accommodation meets your requirements. By providing us with such sensitive personal information, you consent to us using it for these purposes. Should you not provide us with this consent, we may not be able to allocate you a room appropriate for your needs.
Do we share your personal information?
Student republic will disclose the personal data of its clients to public authorities, entities whom we must grant access to the data under the law – like Immigration police, administrative authorities, courts, court bailiffs, notary publics, court commissioners, insolvency trustees, etc. Student republic will also disclose the personal data to external service providers like accountants, tax advisers and other specialists, as well as to IT services providers. Student republic will process the personal data using its own staff and has implemented the technical, organizational, and personnel measures and precautions that guarantee a high level of protection and the non-disclosure of personal data of its clients.
How long we store your data for
We will store your personal information for as long as is necessary to fulfil our contract with you or provide our services, to adhere to applicable laws (including laws relating to the retention of documents), to resolve disputes with other parties or enable the use of our website. All the personal information which we store is subject to this privacy policy and our internal storage and deletion concept.
What are your rights?
The right of data subjects to information on processing
Data subjects are entitled to information on whether or not the controller processes their personal data and in what manner this processing is carried out.
The right to access personal data
If a controller processes the personal data of data subjects, the data subjects are entitled to obtain a copy of the data upon providing sufficient proof of their identity.
The right to corrections and supplementation
If the controller processes erroneous or outdated personal data, the controller is obliged to correct the data upon request of the data subjects.
The right to deletion (the right to “be forgotten”)
If consent was given to process data and there does not exist other legal grounds, or if the data subject believes that the controller no longer needs the personal data (because the purpose of the processing has expired), the data subject is entitled to request the termination of processing and deletion of the personal data.
The right to restricted processing
This involves restricting processing to just storing the data if the data subject contests the accuracy of the personal data and the controller needs an additional period for verifying the data or the data subject has objected to the processing based on the legitimate interest of the controller.
The right to data portability
The controller provides personal data in a structured, commonly used electronic format directly to the data subject. The controller may provide the personal data of a data subject to another controller only if it involves automated processing that is based on consent or an agreement, and if it is technically feasible.
The right to object
Data subjects may object to the processing of personal data that pertains to them only in the case of processing that is carried out in the public interest or based on the legitimate interest of the controller.
The right to review automated decisions
If data subjects are subject to decisions established solely on automated processing, they are entitled to review these decisions and any human intervention on the part of the controller.
The right to lodge complaints or to protection
Data subjects are entitled to lodge complaints against the processing of personal data with the supervisory authority (in the Czech Republic, this is the Office for Personal Data Protection) or to request court protection in relation to the supervisory authority, the controller, or the processor.
Exercising your rights
Data subjects are entitled to exercise their rights arising from the GDPR, commencing on 25 May 2018. The data subjects must exercise their rights against the controller of personal data by sending a request to Student Republic’s e-mail to the officer info@studentrepublic.cz. Prior to processing the request, Student republic is entitled and obliged to verify the identity of the requesting party.
The right to file a complaint with the Office for Personal Data Protection
Data subjects are entitled to lodge a complaint against the processing of personal data with the supervisory authority, which is the Office for Personal Data Protection.
Contact:
The Office for Personal Data Protection
address: Pplk. Sochora 27, 170 00 Prague 7
phone: +420 234 665 111
web: www.uoou.cz