GDPR - Personal data procesing

Section 1 – Declaration on the protection of personal data

The protection of your personal data is important to us. The company Nobless Line s.r.o., with head offices at Václavské náměstí 19, 110 00 Prague 1, registered with the business register kept by the Municipal Court in Prague, Section C, entry 54565 (hereafter merely Nobless Line), undertakes to protect personal data provided.

Below you will find information about what data we process at Nobless Line, and why and how we process it, including information about how to contact us should you have any questions relating to the processing of your personal data. We undertake to handle your data in a way that prevents its misuse.

Section 2 – Basic terms and information

Personal data – personal data is every piece of information about an identified or identifiable natural person (data subject).

Data subject – a data subject is a natural person to whom personal data relates and who can be identified or who is identifiable from this personal data.

Personal data administrator – the administrator is the natural or legal person who determines the purposes and means of personal data processing and who is primarily responsible for its processing. Unless given otherwise in these principles or in the conditions relating to a specific service, the personal data administrator is the company Nobless Line.

Personal data processor – the processor is the natural or legal person who processes personal data for the administrator on the basis of the instructions of the administrator.

Personal data processing – processing is any operation or set of operations performed with personal data or sets of personal data with or without the use of automated procedures such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, inspection, use, disclosure by transfer, dissemination or any other disclosure, arrangement or combination, limitation, and erasure or other destruction.

What legal regulation covers personal data processing?

Personal data processing is subject, first and foremost, to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Section 3 – Personal data processing at Nobless Line

What data is processed?

We will process your personal data to the extent to which it has been provided to us by you, i.e. in particular to the extent of your forename, surname, e-mail address, telephone number and IP address.

For what purpose is your data processed?

We process your personal data for the purpose of the assurance of travel services, i.e. for the purposes of the reservation of tickets and accompanying services.

In addition to the ticket ordering process, we also use your data for the purposes of promotion and the provision of information so that we can send you news about our services in our newsletters. You can raise an objection to the use of your data for the purposes of promotion, market research and public opinion research at any time by writing to the address Nobless Line s.r.o., Václavské náměstí 19, 110 00 Prague 1 or to the e-mail address zelenka@noblessline.cz.

The personal data collected with your agreement in accordance with Article 6, paragraph 1, point (a) of the General Data Processing Regulation when you register to subscribe to our newsletter will be used for communication with you (e.g. for the sending of messages about services, system reports, e-mails with confirmation of your registration, information about your user account, information about your tickets and routes, and information about your travel profile) and for the sending of our newsletter.

What is the legal basis to processing?

The legal basis to the processing of your personal data given above is:

1) The contractual relationship according to Article 6, paragraph 1, point (b) of the General Data Protection Regulation. The company processes personal data that has been provided to it voluntarily (in accordance with Article 6, paragraph 1, point (b) of the General Data Protection Regulation) for the purpose of the processing of a contract associated with the ordering of a ticket and further for the performance of transportation and establishing a customer account or within the framework of measures adopted before the closure of the contract.

For this purpose, we require your forename, surname, e-mail address and mobile telephone number, i.e. essential information.

2) Our justified interest in accordance with Article 6, paragraph 1, point (f) of the General Data Protection Regulation. On the basis of our justified interest in accordance with Article 6, paragraph 1, point (f) of the General Data Protection Regulation, we process essential information for the following purposes:

Data stored for the purpose of processing a contract and the performance of transportation by coach will be provided to third parties (e.g. providers of IT services, transportation, customer services, services involving the sending of mass e-mails and newsletters and payment services) only to the necessary extent within the scope of registration and for the performance of sales of tickets and the assurance of accompanying services.

For how long will you process my personal data?

We will process your personal data for the duration of the conferral of your agreement. It goes without saying that you can revoke this agreement at a later date.

How and when may I revoke my agreement to the processing of my personal data?

Should you be interested in revoking your voluntarily conferred agreement to the processing of your personal data, you can do so in electronic form by writing to the e-mail address zelenka@noblessline.cz (state “GDPR – revocation of agreement” as the subject of your e-mail). The revocation of your agreement does not affect the legality of processing based on your agreement during the period before you revoke your agreement. Revoking your agreement also has no effect on the processing of personal data processed on a legal basis other than your agreement (i.e. in particular if processing is essential to the fulfilment of a contract or legal obligation or for other reasons given in the valid legislation).

Who will have access to my personal data?

Only employees of the company Nobless Line s.r.o., as personal data administrator, and third parties (processors) will have access to your personal data, and this only for the period and to the extent absolutely necessary. These processors provide technical IT services and provide us with suitable guarantees of the fact that your personal data will be secure.

These processors are the entities eSports.cz, s.r.o., Doudlebská 836/30, 326 00 Plzeň, reg.no. (IČ): 26340933 and ProfiSMS s.r.o., Rohanské nábřeží 678/29, 186 00 Prague 8, reg.no. (IČ): 03676307. The standards required to secure your personal data are maintained in all cases during their transfer. A written contract on personal data processing is always closed with all processors.

How can I contact you as administrator?

You can contact us for the administration of your personal data at the e-mail address zelenka@noblessline.cz or in writing at the address of the head offices of the administrator Nobless Line s.r.o., Václavské náměstí 19, 110 00 Prague 1. In such case, we are entitled to demand proof of your identity for the purpose of preventing access to your personal data by unauthorised persons. All communication between you and the administrator is monitored for the purpose of increasing the quality of services and storing records on the performance of the legal obligations of the administrator.

What rights do I have in connection with personal data protection?

You have the following rights in particular in relation to your personal data:

a) the right to revoke your agreement at any time;

b) the right to correct and supplement your personal data;

c) the right to demand the limitation of processing;

d) the right to raise objections or complaints to processing in certain cases;

e) the right to demand the transfer of your data;

f) the right of access to your personal data;

g) the right to be informed of any violations of the security of your personal data in certain cases;

h) the right to the erasure of your personal data (the right “to be forgotten”) in certain cases; and

i) other rights stipulated in General Data Protection Regulation No. 2016/679.

Am I obliged to provide my personal data?

You provide your personal data entirely voluntarily. You are not obliged in any way to provide it. You are not threatened by any sanctions if you do not provide your personal data. The provision of personal data is, however, a condition of registration and the closure of a contract associated with the ordering of a ticket. The provision of certain data (forename, surname, e-mail address and telephone number) is also a condition of making a reservation and the provision of a service.

How is my personal data secured?

All the personal data you provide us in our reservation system and by telephone and e-mail is secured by standard procedures and technologies. It is not, however, objectively possible to entirely guarantee the security of your personal data, for which reason it is also not possible to completely guarantee that no third party can gain access to the personal data provided or that it cannot be copied, published, altered or destroyed by a breach of the administrator’s security measures. In this context the administrator nevertheless guarantees that it conducts regular checks as to whether the system contains any weak points and whether it has been exposed to attack, and uses the kind of security measures that can be sensibly demanded of the administrator in order that no unauthorised access to the personal data provided occurs and that provide adequate security with a view to the current state of the technology. The security measures adopted are regularly updated. Each data subject, however, bears responsibility for maintaining a unique password and other details on any accounts and for continued checks relating to access to his or her account.