Privacy policy.

Data controller

The controller of your personal data is Wohltat s.r.o., company ID (IČ) 27871223, registered office Heinemannova 2698/11, 160 00 Praha 6 - Dejvice, the operator of Hotel Červena Liška (Podlesí 124, 362 35 Potůčky).

For any data protection matters, contact us by e-mail at cervenaliska124@gmail.com or by phone at +420 773 161 964.

What data we process and why

We only process data to the extent necessary for each purpose:

• Enquiries via the contact form, e-mail or phone – name, phone number or e-mail, the text of your message and the website language. Purpose: to answer your enquiry and prepare a booking. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general questions, our legitimate interest in communicating with you (Art. 6(1)(f) GDPR).
• Technical data – IP address, browser type, time and URL of the request. It is processed in the server logs of our hosting provider; we also briefly use the IP address to protect the form against spam (limiting the number of submissions). Legal basis: our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
• Visitor statistics (Google Analytics) – only if you give your consent, see below. Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications).

Providing your data is voluntary, but without contact details we cannot reply to you. We do not sell your data, we do not use it for automated decision-making or profiling, and we do not send you marketing messages without your consent.

Cookies

Cookies are small text files that a website stores in your browser. We need strictly necessary cookies for the website to work (remembering the language and your cookie choice); they do not require consent. We only store analytics cookies with your prior consent.

On your first visit you can accept all cookies, reject them or choose individual categories. Rejecting is as easy as accepting and does not affect how the website works. We remember your choice for 6 months and then ask again. You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer, and you can also delete cookies in your browser settings.

Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand which pages interest visitors, which devices and countries they come from and how to improve the website. It processes a pseudonymous device identifier, the pages visited, browser and device information and an approximate location derived from the IP address (Google Analytics 4 does not store the IP address itself).

We do not use advertising features or share data for advertising purposes. Statistics are kept in Google Analytics for 14 months. Data may be transferred to Google LLC in the USA on the basis of the European Commission adequacy decision (EU-US Data Privacy Framework). More in Google’s privacy policy: policies.google.com/privacy.

Who we share data with

We only make data available to processors who help us run the website, and only to the extent necessary:

• our website hosting provider (server logs);
• Resend, Inc. (USA) – technical delivery of contact form messages to our mailbox;
• Google Ireland Limited / Google LLC – the Gmail mailbox where we receive enquiries, and Google Analytics (only with your consent).

Where data is transferred outside the European Economic Area, it is protected by the European Commission adequacy decision (EU-US Data Privacy Framework) or by standard contractual clauses. We only share data with other parties where the law requires us to (e.g. public authorities).

How long we keep data

• Enquiries and correspondence – until the enquiry is dealt with, at most 12 months after the last contact. If a booking is made, we keep the data for the period required by accounting and tax law.
• Technical logs – for the period set by the hosting provider, usually no more than 30 days; data used to protect the form against spam is kept only briefly in the server’s memory.
• Google Analytics statistics – 14 months; the lifetime of each cookie is listed in the table above.
• Your cookie choice – 6 months.

Your rights

In connection with the processing of your personal data you have the right:

• to access your data and receive a copy;
• to have inaccurate data corrected;
• to have your data erased if we no longer need it or process it unlawfully;
• to restrict processing;
• to data portability;
• to object to processing based on our legitimate interest;
• to withdraw your consent at any time – this does not affect the lawfulness of processing before the withdrawal;
• to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

You can exercise your rights by e-mail at cervenaliska124@gmail.com. We will reply without undue delay and within one month at the latest.

Changes to this policy

We may update this policy, for example when the services we use on the website change. The current version is always published on this page; the effective date is shown at the top.