1. Introduction

This Privacy Policy (hereinafter referred to as the “Policy”) explains how personal data of website visitors and customers are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Data Controller

The controller of personal data is:

Bc. Tomáš Adler
Business ID (IČO): 87214687
Registered address: Bucharova 302, 543 02 Vrchlabí – Hořejší Vrchlabí, Czech Republic
E-mail: info@chalupa-horskypotok.cz
Phone: +420 736 749 702

The controller has not appointed a Data Protection Officer, as this obligation does not arise under applicable law.

3. Personal Data We Process

Depending on the method of contact or reservation, we may process the following personal data:

• first and last name
• e-mail address
• telephone number
• reservation details (stay dates, number of guests, price)
• payment-related information (without storing full payment card details)
• IP address
• cookies

Foreigners’ Register

In accordance with legal obligations, the controller maintains a foreigners’ register.
In this case, the following data may be processed:

• first and last name
• date of birth
• nationality
• travel document number
• duration of stay

4. Purpose of Processing

Personal data are processed for the purpose of:

• responding to enquiries sent via contact forms, e-mail or phone,
• concluding and performing accommodation contracts,
• managing reservations and communication with guests,
• fulfilling legal obligations (especially guest registration duties),
• protecting the legitimate interests of the controller,
• measuring website traffic and improving website functionality.

5. Legal Basis for Processing

Personal data are processed on the basis of:

• performance of a contract,
• compliance with legal obligations,
• legitimate interests of the controller,
• consent of the data subject (especially for cookies and marketing tools).

6. Data Retention Period

Personal data are stored:

• for the duration necessary to perform the contract,
• for the period required by legal regulations,
• for the duration of legitimate interest,
• or until consent is withdrawn, where processing is based on consent.

7. Recipients of Personal Data

Personal data may be disclosed to:

• accounting and IT service providers,
• accommodation and reservation platforms (e.g. Booking, e-Chalupy),
• providers of analytical and marketing tools.

Personal data are not transferred outside the European Union unless necessary due to the use of specific services (e.g. Google).

8. Cookies and Analytical Tools

The website uses cookies.

In particular, we use:

• technical cookies necessary for website functionality,
• analytical cookies (Google Analytics 4),
• marketing cookies (Facebook Pixel – planned for future use).

The use of cookies is managed via the Complianz cookie banner, where users can adjust their preferences at any time.

9. Rights of Data Subjects

Data subjects have the right to:

• access their personal data,
• rectification of inaccurate data,
• erasure of personal data (where legally permissible),
• restriction of processing,
• object to processing,
• data portability,
• lodge a complaint with the supervisory authority.

10. Data Security

The controller has implemented appropriate technical and organisational measures to protect personal data against misuse, loss or unauthorised access.

11. CCTV System

No CCTV or camera surveillance system is operated in the accommodation facility.

12. Final Provisions

This Privacy Policy is valid and effective as of the date of its publication on the website.

The controller reserves the right to update this Policy in the event of changes in legislation or personal data processing practices.