Privacy Policy

1. What data we process

To handle a booking we process your first and last name, email address, and optionally a phone number (only if you provide it, for quick contact in case of a change).

To keep the website secure we also record, to the necessary extent, technical data: admin login attempts and submitted bookings as an irreversible fingerprint (hash) of the IP address, and the variable symbol for each payment.

2. Purpose and legal basis

• Handling and managing the booking and related communication — performance of a contract (Art. 6(1)(b) GDPR).
• Protecting the website against spam and abuse — the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Keeping accounting and tax records for received payments — compliance with a legal obligation (Art. 6(1)(c) GDPR).

3. Retention period

We keep booking data for the period necessary to handle the booking and any complaints, and then delete it. Accounting and tax records are kept for the period required by law (usually 10 years). Technical security records are deleted on an ongoing basis (a matter of days).

4. Sharing with others

We do not share personal data with third parties except the provider of web hosting and email services, WEDOS Internet, a.s., Company ID (IČO) 28115708, registered office at Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic, which processes it as a processor under a contract and solely for running the website and delivering emails.

We do not transfer data outside the European Union, we do not carry out profiling or automated decision-making, and we do not use the data for marketing or sell it.

5. Cookies and local storage

The website uses only technically necessary storage: a temporary session for forms and the admin area, and the browser’s localStorage to remember your chosen light/dark mode and language. We do not use any third-party analytics, advertising, or tracking tools. Because these are strictly necessary functions, no cookie consent is required.

6. Your rights

You have the right to access your data, to rectify or erase it, to restrict processing, to data portability, and to object to processing based on legitimate interest. Submit your requests to info@olgastrekavka.com.

You also have the right to lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.