GDPR

Legal basis for processing

We process the small amount of data described in our privacy policy on two bases: performance of a contract, where the data is needed to make and honour a booking, and legal obligation, where Czech accounting law requires a record to be kept.

We do not rely on legitimate interest for marketing, because we do not do any.

Your rights in full

The GDPR gives you the following rights over data we hold about you. All of them are exercised by writing to [email protected].

• Access — a copy of what we hold, and an explanation of why.
• Rectification — correction of anything inaccurate.
• Erasure — deletion, except where accounting law requires retention.
• Restriction — a pause on processing while a dispute is resolved.
• Portability — a machine-readable copy of data you provided.
• Objection — to any processing you disagree with.
• Withdrawal of consent — at any time, where consent was the basis.

How to make a request

Email [email protected] describing what you want. Because we deliberately hold so little, we may need the phone number used for the booking in order to locate anything at all — this is the only identifier we have.

We respond within one month. There is no charge.

Sharing and transfers

We do not sell data and we do not share it for marketing. Data is shared only with the processors we need to operate: our payment provider, our messaging provider, and our website host. All operate within the EU or under an adequacy decision.

Complaints

If you are unhappy with how we have handled your data, you may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.cz. We would rather you told us first, but you are under no obligation to.