DATA PROTECTION TERMS AND CONDITIONS

DATA PROTECTION TERMS AND CONDITIONS

I. IDENTIFICATION OF THE ADMINISTRATOR:
River Trip s.r.o.
ID: 24121851
registered office K dálnici 1395/13a Prague 10 - Uhříněves, 104 00
registered in the Commercial Register kept at the Municipal Court in Prague, Section C, Insert 18603
Contact person: Jakub Říha, tel. 734 255 064, email: info@rbprague.cz

II. LEGAL REGULATIONS:
We, Rivers Trip s.r.o., as the data controller, hereby inform you as a data subject about the processing of your personal data in
accordance with the relevant legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on
the protection of natural persons with regard to the processing of personal data and on the free movement of such data and
repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").
III. SCOPE OF PROCESSING:
We process personal data that you provide to us. If someone passes on your personal data to us, they must inform you in advance.
Similarly, if you provide us with personal data of a third party, it is your responsibility to inform such person and to ensure that
you have the appropriate legal authority to do so (in particular, to agree to these Privacy Policy).
We process your personal data within the following categories of personal data:
- Name and surname;
- birth number/date of birth or ID number;
- residential or registered office address;
- gender;
- nationality;
- personal telephone number;
- personal email address;
- information about the contractual relationship;
- information about the business;
- bank account number;
- image and visual information on behaviour and conduct;
- MAC address of the device connected to the Wi-Fi network.
We may also process other personal identification, address and communication data you provide to us for the processing purposes
set out below.
For the purposes of protecting our and third party's property from theft and damage and protecting the life and health of persons,
we process your personal data at some of our premises (ships) to the extent of similarity and image information about the
behaviour and actions of persons recorded by the operation of CCTV systems.
IV. MEANS AND METHOD OF PROCESSING:
We process your personal data both manually and by automated means. Automated processing of personal data occurs, for
example, for the purpose of implementing measures taken prior to the conclusion of a contract.
Some of our premises (ships) have their own camera system with one or more cameras and always one recording device. The
processing of personal data by the operation of the camera systems is necessary for the purposes of our or a third party's legitimate
interests, which cannot be achieved in any other way.
An unencrypted Wi-Fi network is available at some of our premises (ships). In this context, as data controller, we respect your
will as a data subject regarding the provision of your personal data. The protection of your privacy as a data subject is based on
your right to informational self-determination. It is therefore up to you whether you freely choose to use the free (unsecured) WiFi network on our ships.
We also automatically process cookies. Our website uses cookies to provide services, personalize ads and analyze traffic. By
using our website you agree to this. A cookie is actually a small text file that is created when you visit each website. It is used as a
standard tool to store information about how the website is used. By using cookies, we can distinguish (but not identify) individual
users and tailor content to specific preferences. Cookies are therefore important; without them, browsing our website would be
much more difficult.
Our website is automatically optimised for your access both from your computer and from your mobile phone, tablet or similar
device. We process your personal data for this case in a similar way as when you visit us from your computer.
You can also contact us with your questions about cruises and planned events via the online chat on our website.

V. PURPOSE OF PROCESSING:
We process your personal data for the following purposes:
- proper conclusion and subsequent performance of the contract, communication with you;
- keeping business records and remuneration;
- enforcing/protecting our rights under the contract between us and monitoring compliance with contractual and legal obligations;
- protecting our business activities;
- sending/providing our information or advertising communications and service offers;
- protecting our and third party's property by operating CCTV systems;
- providing wireless internet service via a free Wi-Fi network;
- Generating internal statistics and reports in the course of our business.
If you are our customer, we may send you commercial communications (or call you in the context of telemarketing) without your
consent.

VI. LEGAL TITLE OF PROCESSING:
The legal basis for the processing of your personal data is the following reasons:
- performance or conclusion of a contract;
- the performance of legal obligations imposed on us by applicable law;
- the necessity of the processing for the purposes of our or a third party's legitimate interests.
The provision of your personal data is a legal requirement and/or a prerequisite for entering into the intended contractual
relationship. We may process your personal data without your consent. If you do not provide us with your personal data, we
cannot enter into a contractual relationship with you.

VII. PROCESSORS (RECIPIENTS):
We may entrust the processing of your personal data for the above processing purposes (and thus disclose your personal data) to:
(i) our authorised employees, in particular:
(ii) senior employees;
iii - authorised employees (in particular from the sales department);
(iv) our executive assistant;
v - an accountant;
vi (ii) third parties/processors, in particular:
vii - the Commercial Director of the Administrator;
- IT support providers;
- software providers;
- the supplier of CCTV systems;
- Wi-Fi network supplier;
- cooperating companies within the holding structure of which we are a part.
Upon request, we will provide you with information about the specific persons to whom your personal data has been transferred
for processing.
Our company does not hold data about the payment cards you use to pay with us. Only the secure payment gateway and the
relevant banking institution have your payment card details.

VIII. STORAGE PERIOD:
The personal identification, address and communication data you provide will be retained for the duration of our contractual
relationship and for a period of 3 years from the end of the contractual relationship, unless a longer retention period is required by
the legislation by which we are bound.
Records from individual CCTV cameras located in some of our premises will be retained for a period of 10 days. A record of a
captured incident will be retained for the time necessary for case review and legal protection.
Your personal data provided by connecting a private device (phone, tablet, computer or similar device) to the free Wi-Fi network
available at some of our premises will only be retained for the duration of the wireless internet connection.

IX. SECURITY:
Your personal information is safe with us. We have put in place reasonable technical and organisational measures to prevent
unauthorised misuse of your personal data.

X. PERSONS UNDER 15 YEARS OF AGE:
Our website is not intended for persons under the age of 15. A child under the age of 15 may use our online shop and take
advantage of our services only with the consent of his/her legal guardian (i.e. the person exercising parental responsibility towards
him/her).

XI. YOUR RIGHTS REGARDING PROCESSING:
To the extent provided by the GDPR, you have the following rights as a data subject regarding the processing of your personal
data:
- The right to request access to your personal data;
- the right to rectification or erasure of your personal data;
- the right to restrict the processing of your personal data;
- the right to object to the processing of your personal data;
- the right to the portability of your personal data;
- the right to lodge a complaint against unlawful processing of your personal data with the supervisory authority - the Office for
Personal Data Protection, located at Pplk. Sochor 27, 170 00 Prague 7.
Date of issue: ___.___.______
_______________________
River Trip s.r.o., K dálnici 1395/13a, Prague 10 - Uhříněves, 104 00
Jaroslav Wetter, Managing Director
If you are interested in more detailed information on the processing of personal data, it will be provided to you upon request via
e-mail message sent to the above-mentioned contact person at the above-mentioned e-mail address.