Privacy policy
This policy describes how the accommodation Chata u jezera, Hostíkovice 71, processes the personal data of guests and people interested in staying, in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.
1. Data controller
The controller of your personal data is:
- Petra Bednár Skalová
- Registered address / place of business: Modrého 1104/3, 198 00 Prague 9, Czech Republic
- Company ID (IČO): 88002551
- Email: chataujezera71@gmail.com
- Phone: +420 777 936 944
(the “controller” or “we”). We have not appointed a data protection officer, as we are not required to do so by law. For any questions about personal data protection, please contact us at the email address above.
2. What personal data we process
We only process data that is adequate, relevant and necessary for the given purpose:
- Identification data: first name and surname, date of birth.
- Contact data: email, phone number, permanent address.
- Details of the stay: arrival and departure dates, number of persons, reason for any exemption from the local fee.
- Identity document data: ID card or travel document number.
- For foreign nationals also: citizenship, address abroad, visa number (if required), purpose of stay.
- Payment and billing data: amount and method of payment, invoice details (for companies: name, company ID, VAT ID).
- Content of communication: questions and messages sent by email, phone or via the form on the website.
- Technical data from the website: IP address and cookies as described in section 6.
Data about other guests (fellow travellers, children) is provided to us by the person who booked the stay. That person is responsible for informing them about this and about this policy.
3. Purpose and legal basis of processing
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Replying to a question, enquiry or request for information | point (b) – steps taken at the request of the data subject prior to entering into a contract; for general questions point (f) – legitimate interest in replying |
| Booking and performance of the accommodation contract (communication, payments, handing over the cabin) | point (b) – performance of a contract |
| Keeping the guest register and collecting the accommodation fee | point (c) – legal obligation (Czech Act No. 565/1990 Coll., on local fees, and the municipal ordinance) |
| Reporting the stay of foreign nationals to the Foreign Police | point (c) – legal obligation (Czech Act No. 326/1999 Coll., on the residence of foreign nationals) |
| Accounting and tax records | point (c) – legal obligation (Czech Accounting Act, VAT Act, tax regulations) |
| Establishing and defending legal claims (e.g. damage to the cabin, unpaid amounts) | point (f) – legitimate interest |
| Analytics and marketing cookies, sending news | point (a) – consent, which can be withdrawn at any time |
Providing data for concluding the contract and for meeting legal obligations is necessary. Without it, we cannot confirm the booking or accommodate the guests. If the legal rules on guest registration change (e.g. the introduction of the eTurista system), we will keep and pass on data in accordance with the regulations in force at the time.
4. Who we share data with
We do not sell your data. We only share it, to the extent necessary, with the following recipients:
- Processors who provide services for us under a data processing agreement: the operator of the booking system, the web hosting and email provider, an external accountant. Doplnit názvy: rezervační systém, webhosting a e-mail, účetní
- Public authorities, where required by law: the municipal office (accommodation fee), the Police of the Czech Republic (reporting foreign nationals), the tax office, or a court or other competent authority.
- Booking platforms (Airbnb, Amazing Places), if you book through them. They are independent controllers of your data and follow their own policies.
- Payment services (bank), if you pay through them.
We process data within the EU/EEA. If a processor is based outside the EU/EEA, we only transfer data to countries covered by a European Commission adequacy decision or on the basis of standard contractual clauses.
5. How long we keep data
| Data | Retention period |
|---|---|
| Questions and enquiries that did not result in a booking | until dealt with, no longer than 1 year |
| Booking and accommodation contract data | for the duration of the contract and then 3 years (limitation period for possible claims) |
| Guest register (accommodation fee) | 6 years from the date of the last entry |
| Register of foreign guests | 6 years from the date of the last entry |
| Accounting and tax documents | 5 years from the end of the accounting period; 10 years for VAT payers |
| Data processed on the basis of consent | until consent is withdrawn |
After these periods, we securely delete or anonymise the data.
6. Cookies, security and automated decision-making
Cookies. The website uses essential cookies that make it work and enable the booking form; we do not need your consent for these. We only use analytics cookies (Google Analytics) with your consent, which you can give or withdraw in the cookie bar on the website.
Security. We protect data with appropriate technical and organisational measures: an encrypted connection to the website (HTTPS), password-protected access for authorised persons only, and secure storage of paper records.
Automated decision-making. We do not make automated decisions about you and do not carry out profiling.
7. Your rights
In connection with the processing of your personal data, you have the following rights:
- Right of access – to find out whether we process your data, to what extent, for what purpose, who we share it with and how long we keep it, and to obtain a copy. The first copy is free of charge; we may charge a reasonable fee for further copies.
- Right to rectification – to ask for inaccurate or incomplete data to be corrected or completed.
- Right to erasure – to ask for your data to be deleted if it is no longer needed, the processing is unlawful, you raise a justified objection or you withdraw your consent. We cannot delete data that we are required to keep by law.
- Right to restriction of processing – while a disputed matter is being resolved, we will only store the data.
- Right to data portability – to receive the data you provided to us on the basis of a contract or consent in a machine-readable format, or to have it transferred to another controller.
- Right to object – to processing based on legitimate interest or for direct marketing. After an objection to marketing, we will no longer use the data for that purpose.
- Right to withdraw consent – at any time, without affecting the lawfulness of processing before the withdrawal.
- Right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
You can exercise your rights by email at chataujezera71@gmail.com. We will reply without undue delay, within 1 month at the latest. To protect your data, we may ask you to verify your identity.
8. Effect and changes
This policy is effective from 19 October 2026. We may update it, in particular when legal regulations or the services we use change. The current version is always published on the Chata u jezera website.