Privacy Policy

1. Who we are

The data controller is:

Lenka Jansová
Company ID (IČ): 19487452
K Žabárně 880, Rtyně v Podkrkonoší
Email: chaloupkapodlipou@gmail.com
Phone: +420 602 967 096

2. What personal data we process and why

a) Contact form (Web3Forms)

Through the contact form, we collect:

  • Name
  • Email
  • Message

Purpose of processing: responding to inquiries, requests, and general communication.
Legal basis: legitimate interest or pre-contractual actions.

b) Post-reservation form (Google Forms)

After confirming a reservation, we ask guests for:

  • First and last name
  • Date of birth
  • Residence address
  • Citizenship / nationality
  • Additional legally required information (e.g., under the Accommodation Act, Foreigners' Residence Act)

Purpose of processing: fulfilling legal obligations towards local authorities.
Legal basis: legal obligation under the Foreigners' Residence Act and local regulations.

3. Who has access to the data

Data from the contact form are processed via the cloud service Web3Forms, which securely forwards them to us by email.

Data necessary for legal obligations (e.g., name, address, date of birth) are collected via Google Forms, where they are securely stored in our Google account infrastructure.

Both services act as data processors and we have signed Data Processing Agreements (DPAs) with them in accordance with Article 28 GDPR. Data are not transferred outside the European Economic Area (EEA), or are protected by standard contractual clauses (SCC) ensuring adequate protection.

Recipient categories include:

  • Operational team (data controller)
  • Providers of form and email services
  • Relevant authorities to whom we are legally obliged to provide data (e.g., Accommodation Act, Foreigners' Residence Act).

4. How long we keep the data

  • Contact messages: up to 12 months
  • Data for local authorities: as required by law (e.g., 6 years)

5. Your rights

In accordance with GDPR, you have the right to:

  • request access to your data
  • rectify or delete your data
  • restrict processing
  • object to processing
  • lodge a complaint with the Data Protection Authority (www.uoou.cz)

6. Data security

Data are protected by technical and organizational measures. Only authorized persons have access, and data are not further shared or sold.

7. Use of cookies

This website may use cookies to improve functionality or analyze traffic. By using the website, you agree to this.

Updated on: July 21, 2025