Privacy Policy

Data controller

Jindřišská věž s.r.o.
Company ID: 26170736
Registered office: Na Pankráci 53, Prague 4, Czech Republic
Contact email: info@jindrisskavez.cz
Phone: 608 346 521

Introduction

This Privacy Policy (the “Policy”) describes how Jindřišská věž s.r.o. (the “controller”, “we”, “us”) collects, uses, stores and protects personal data of website visitors and customers. The information applies to the processing of personal data in connection with the use of the website, contact forms, reservations, newsletters, marketing and other communication.

Scope and sources of data

We collect personal data that you provide to us directly (e.g. when filling out a form) as well as data obtained automatically when you visit our website (technical and analytics data).

Categories of personal data processed

• Identification data: first name, last name.
• Contact data: email address, phone number, home/company address (if provided).
• Communication data: message text, reservation notes, related information.
• Payment and invoicing data: if you use services that require invoicing (limited, potentially shared with our accounting processor).
• Technical data: IP address, browser type and version, language settings and time of access as needed to display the page. Google Analytics cookies and pages visited are processed only after you consent to analytics cookies.
• Other data: optional profiles or preferences you share with us (e.g. newsletter interest).

Purposes of processing and legal bases

Data retention periods

• Contact and communication data: for as long as necessary to handle the inquiry and any follow-up requests, typically retained for 3 years unless otherwise required by law or contract.
• Contract performance and invoicing data: for statutory periods (e.g. accounting records – 10 years or as required by local legislation).
• Marketing consents: until consent is withdrawn.
• Analytics data: typically anonymized; where it constitutes personal data, retained only as long as necessary for the purpose.

Recipients / processors

Personal data may be shared with:

• IT service and hosting providers (processors).
• Email service providers and newsletter distribution tools.
• Accountants and tax advisors.
• Other third parties where necessary for contract performance or due to legal obligations. Before sharing, we ensure processors provide adequate safeguards for data protection (data processing agreement).

Transfers to third countries

If personal data is transferred outside the EU/EEA, we safeguard the transfer using appropriate mechanisms (standard contractual clauses, adequacy decisions or other legal mechanisms) and inform you in specific cases.

Cookies and tracking technologies

The site remembers your choice in the jv-consent cookie. Google Analytics 4 loads only after you allow analytics cookies. We do not use marketing cookies. The map on the Contact page loads only after a click, and Google may then store its own cookies.

• Necessary cookies: store whether you accepted or rejected cookies. Without them, the banner appears again on the next visit.
• Analytics cookies: Google Analytics 4 (G-SXZ1RYN4Y2) measures visits only after consent. Google may store _ga cookies and process browser and page data. You can withdraw consent via Cookie settings in the footer.

Your rights

You have the right to:

• request access to your personal data,
• request correction of inaccurate data or completion of incomplete data,
• request erasure (“right to be forgotten”) where there is no legal reason for further processing,
• request restriction of processing,
• object to processing based on legitimate interest or for direct marketing purposes,
• request data portability (in a structured, commonly used and machine-readable format),
• withdraw consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal),
• lodge a complaint with the supervisory authority (in the Czech Republic: the Office for Personal Data Protection).

How to exercise your rights

Send requests to exercise your rights to info@jindrisskavez.cz or by post to the controller’s registered office address. In your request, include your name, a description of your request and a copy of an identity document if necessary to verify your identity. We will respond without undue delay, no later than within 1 month (in exceptional cases this may be extended by a further 2 months).

Data security

We use technical and organizational measures to protect personal data (encrypted transmission – HTTPS, access controls, backups, processor agreements). Access to data is limited to authorized staff and contracted processors on a need-to-know basis.

Profiling and automated decision-making

We generally do not carry out fully automated decision-making or profiling based solely on automated processing that would produce legal effects or similarly significantly affect you. If such processing occurs, you will be informed separately and provided information about the logic, significance and expected consequences.

Children’s data

Our services are not intended for minors without the consent of a legal guardian. If we discover that we have processed a child’s personal data without appropriate consent, we will take steps to delete such data.

Changes to this policy

This Policy may be updated. In the event of material changes, we will inform users in advance (e.g. via a notice on the website or by email) and, if necessary, request consent again. We keep records of the Policy version and the time consent was granted (consent_version, consent_timestamp, IP and User-Agent).

Contact and supervisory authority

For questions about personal data processing, contact us at info@jindrisskavez.cz or by post to the controller’s registered office address. You have the right to lodge a complaint with the supervisory authority – in the Czech Republic: the Office for Personal Data Protection (www.uoou.cz).