Privacy Policy

Effective Date: 5/4/2025

Controller Information

  • Karel Křesťan
  • Registered Address: Kloboučnická 1602/10, Praha, 140 00
  • Company ID (IČO): 18023223
  • VAT Number (DIČ): CZ9707122327
  • Contact Email: apartman.krestan@gmail.com

1. Introduction

This Privacy Policy outlines how we collect, use, and protect your personal data when you use our services, including bookings made through our website, Smoobu booking engine, or via email. We are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Czech Act No. 110/2019 Coll., on Personal Data Processing.

2. Data Collection

  • We collect personal data directly from you or through third-party platforms (e.g., Smoobu, Booking.com, Airbnb) when you:
    • Make a reservation
    • Contact us via email or phone
    • Fill out forms on our website
  • Types of data collected:
    • Identification Data: Full name, date of birth, nationality, passport or ID number
    • Contact Information: Email address, phone number, permanent address
    • Booking Details: Dates of stay, room preferences, special requests
    • Payment Information: Credit/debit card details (processed securely via third-party payment processors)
    • Legal Requirements: Data required by Czech law for the Foreign Police (e.g., purpose of stay)

3. Purpose and Legal Basis for Processing

  • We process your personal data for the following purposes:
    • Booking and Accommodation Services: To manage reservations, check-ins, and check-outs. (Legal basis: Article 6(1)(b) GDPR – Contract performance)
    • Legal Obligations: To comply with Czech laws requiring the registration of guests with the Foreign Police. (Legal basis: Article 6(1)(c) GDPR – Legal obligation)
    • Communication: To send booking confirmations, respond to inquiries, and provide customer support. (Legal basis: Article 6(1)(b) GDPR – Contract performance)
    • Marketing (with consent): To send newsletters and promotional offers. (Legal basis: Article 6(1)(a) GDPR – Consent)
    • Security: To ensure the safety and security of our guests and property. (Legal basis: Article 6(1)(f) GDPR – Legitimate interests)

4. Data Retention

  • We retain your personal data only for as long as necessary to fulfill the purposes outlined above, and in accordance with legal requirements:
    • Booking Records: Retained for 6 years to comply with accounting and tax laws.
    • Guest Registration Forms: Retained for 6 years as required by Czech accommodation laws.
    • Marketing Data: Retained until you withdraw your consent.

5. Data Sharing and Transfers

  • We may share your personal data with:
    • Service Providers: Such as Smoobu (booking engine), payment processors, and IT support services.
    • Legal Authorities: Including the Czech Foreign Police, tax authorities, and other regulatory bodies as required by law.
  • We ensure that all third parties respect the security of your personal data and comply with GDPR requirements.

6. Data Security

  • We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
    • Secure servers and firewalls
    • Encryption of sensitive data
    • Access controls and authentication procedures
    • Regular security assessments

7. Your Rights

  • Under the GDPR, you have the following rights:
    • Access: Request access to your personal data.
    • Rectification: Request correction of inaccurate or incomplete data.
    • Erasure: Request deletion of your personal data, subject to legal obligations.
    • Restriction: Request restriction of processing under certain conditions.
    • Data Portability: Request transfer of your data to another service provider.
    • Objection: Object to processing based on legitimate interests.
    • Withdraw Consent: Withdraw consent at any time for processing based on consent.
  • To exercise any of these rights, please contact us at apartman.krestan@gmail.com.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, analyze website traffic, and for marketing purposes. For detailed information, please refer to our Cookie Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. We encourage you to review this policy periodically.

10. Contact Information

  • Email: apartman.krestan@gmail.com
  • Address: Kloboučnická 1602/10, Praha, 140 00

Supervisory Authority

If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů):

  • Website: https://www.uoou.cz
  • Address: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic