privacy policy.

The data controller is:

Contact for personal data enquiries: rezervace@chatahra.cz

In operating bookings, the website or communication, the controller may cooperate with external suppliers and business partners, in particular the tenspace. platform and tenfold. s.r.o., where they provide technical, business, booking or operational support related to the stay. Such persons may access the data only to the extent necessary and for a specific purpose.

Depending on how you communicate with us or which service you use, we may process in particular the following data.

identification data.

First name, surname, date of birth, address of permanent residence or a similar address abroad, and identity-document data, where needed for the statutory registration of accommodated persons or to fulfil the accommodation provider's obligations.

contact data.

Email address, telephone number, delivery address, and where applicable the account, profile or platform through which you communicate with us.

booking and stay data.

The dates of the stay, the number of guests, the number of nights, information stated in the booking, notes and special requests, information needed for arrival, check-in, check-out and operational communication during the stay.

payment and accounting data.

Information about the order or booking, billing details, the amount, the payment status, the variable symbol, the order or booking number, and the data needed for accounting and tax records.

We do not process payment card details directly. This data is processed by the payment gateway provider, the bank, the payment service provider or the external booking platform through which the booking was made.

data needed for the statutory registration of accommodated persons.

As a provider of paid accommodation, we are obliged to keep a register of guests for the purposes of the local accommodation fee.

The register may record in particular the start and end of the stay, the guest's name and surname, address, date of birth, the type and number of the identity document, and the amount of the fee collected or the reason for exemption from it.

For foreign nationals, we also process the data needed to fulfil obligations towards the Police of the Czech Republic, in particular for reporting the accommodation of a foreign national and keeping the house register.

communication data.

The content of messages, emails, forms, enquiries, complaints, feedback, telephone communication and communication via social media or booking platforms.

technical data from the website.

IP address, device and browser type, operating system, information about the website visit, cookies and similar technologies according to the settings you choose in the cookie bar.

marketing data.

Information about whether you consented to receiving news, to marketing cookies, analytics or remarketing, and how you interact with our marketing communications.

We process personal data mainly so that we can arrange the booking, prepare the stay, communicate with you, fulfil our legal obligations and protect our rights.

booking and providing a stay.

We need the data in order to accept and confirm a booking, receive payment, send pre-arrival information, prepare the stay, handle booking changes, arrange check-in and check-out and any subsequent communication.

The legal basis is the performance of a contract or taking steps prior to concluding it.

purchase and redemption of a gift voucher.

If you buy a gift voucher, we process the data needed for the order, payment, issuing the voucher, its delivery and its subsequent redemption when booking a stay.

The legal basis is the performance of a contract. We may also retain some data in order to protect our rights, for example in the case of a complaint, a dispute or verifying the validity of a voucher.

communicating with you.

If you contact us via the form, email, telephone, social media, a booking platform or another communication channel, we process the data needed to handle your enquiry or request.

Depending on the circumstances, the legal basis is the performance of a contract, steps prior to concluding a contract, or our legitimate interest in handling the communication.

fulfilling the accommodation provider's statutory obligations.

We are obliged to process some data because legal regulations require us to. Typically this concerns the register of accommodated persons, the local accommodation fee, accounting, taxes and, for foreign nationals, obligations towards the Police of the Czech Republic.

The legal basis is compliance with a legal obligation.

accounting and taxes.

We retain data on tax documents, orders, payments and related documents to the extent and for the period laid down by legal regulations.

The legal basis is compliance with a legal obligation.

protecting our rights.

We may also process data in the case of a complaint, damage to property, breach of the terms of the stay, a dispute, debt recovery or other legal protection.

The legal basis is our legitimate interest in protecting our rights, property and legitimate claims.

improving the website and services.

Using analytics, we may monitor how people use our website, which pages they visit and where the clarity of the website, the booking process or the offer of stays can be improved.

Depending on the type of tool used, the legal basis is your consent or our legitimate interest for basic technical and operational data.

marketing.

If you give us your consent, we may send you news, offers of stays, information about available dates, gift vouchers or other services related to Chata HRA.

We use marketing, analytics and remarketing cookies according to your settings in the cookie bar.

The legal basis is consent. For proportionate communication with existing customers, our legitimate interest may also be the legal basis, where legal regulations allow it.

We do not pass on personal data to anyone unnecessarily. Only people and services that help us operate Chata HRA, or to whom the law requires us to pass it on, may access it.

This may in particular be:

• the provider of the booking system,
• the provider of the payment gateway and payment services,
• external booking platforms, if the booking was made through them,
• external business or technical partners handling the administration of bookings, the website or communication,
• accounting and tax advisers,
• the provider of email communication,
• providers of web hosting, IT services and website administration,
• website administrators and technical support,
• marketing and analytics tools,
• people arranging the cleaning, servicing, maintenance and operation of the property,
• public authorities, where the law requires us to pass on the data, for example the municipal office, the administrator of the local fee, the Police of the Czech Republic, the tax office or a court.

Where we use external processors, we ensure that they handle the data only according to our instructions and protect it in an appropriate manner.

Some services used for the website, analytics, marketing, communication, payments or the operation of bookings may come from providers established outside the European Union or the European Economic Area.

If such a transfer takes place, it occurs only under the conditions permitted by the GDPR, in particular on the basis of an adequacy decision, standard contractual clauses or other appropriate safeguards.

We retain personal data only for as long as we need it for the specific purpose or for as long as legal regulations require us to keep it.

As a guide:

• we retain booking and stay data for the duration of the contractual relationship and then for the period necessary to protect our rights,
• we retain accounting and tax documents for the period laid down by legal regulations,
• we retain the register for the accommodation fee for 6 years from the last entry,
• we retain house-register data and related data on the accommodation of foreign nationals for the period laid down by legal regulations, usually 6 years,
• we retain data from ordinary communication for the period needed to handle the enquiry and then for a reasonable period in case of follow-up communication,
• we retain data related to a complaint, damage or dispute for the period necessary to protect our rights,
• we process marketing data until consent is withdrawn or until it is no longer needed,
• we retain cookies according to their type and the settings stated in the cookie bar or a separate cookie policy.

We use cookies and similar technologies on the website. Some are necessary for the website and the booking process to function, others may help us measure traffic, improve the website or display more relevant offers.

We always use necessary cookies, because without them the website may not function correctly. We use analytics, marketing and similar cookies only according to your settings and the consent given, where consent is required.

You can adjust cookies via the cookie settings on the website, where this option is available.

Details may also be set out in a separate document:

Cookie policy

In connection with the processing of personal data, you have in particular the right to:

• know what data we process about you,
• request access to your personal data,
• request the correction of inaccurate or outdated data,
• request the erasure of data where we no longer need it or have no legal basis to continue processing it,
• request the restriction of processing,
• object to processing based on legitimate interest,
• request the portability of data,
• withdraw consent at any time, where we process data on the basis of consent.

Withdrawing consent does not affect the lawfulness of processing before it was withdrawn.

If you want to exercise your rights or have a question about how we process your personal data, write to us at:

rezervace@chatahra.cz

To protect your data, in some cases we may ask you to verify your identity.

You also have the right to lodge a complaint with the Office for Personal Data Protection.

We may update this policy from time to time, in particular if the way bookings or payments are handled, the tools we use, the operational setup or the legal requirements change.

The current version is always published on this website.