Effective: May 29, 2026 · Version 1.0
1. Data Controller
The controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) is:
Tomáš Lášek
Owner of Apartmán Moravia
Pasohlávky 331, 691 22 Pasohlávky, Czech Republic
Reg. No.: 14025892
Email: info@apartman-moravia.cz
2. What data we collect and why
2.1 Booking form data
When you book your stay through the form on our website or by email, we process:
- First name and surname
- Email address
- Phone number (optional)
- Dates of stay and number of guests
- Any notes and requirements
Purpose: Processing the booking, communicating with you, fulfilling the accommodation agreement.
Legal basis: Performance of contract (Article 6(1)(b) GDPR).
2.2 Analytics data (Google Analytics)
If you consent in the cookie banner, we collect anonymized data about your visit:
- Pages you visited
- Time spent on the page
- Where you came from (e.g., Google search)
- Device type, browser, operating system
- Anonymized IP address (last part removed)
Purpose: Understanding how visitors use the site so we can improve it.
Legal basis: Your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
2.3 Cookies
The website uses two types of cookies:
- Necessary — store your consent/decline choice (kept in browser localStorage). No consent required.
- Analytical — only if you give consent. These are Google Analytics 4 cookies (_ga, _ga_*), stored for up to 24 months.
We do not use advertising cookies.
3. Data retention period
- Booking data: during the booking processing and 3 years thereafter (due to legal obligation to retain accounting records).
- Analytics data: 14 months in Google Analytics, then automatically deleted.
- Cookie consent: in your browser until you withdraw it or clear the site data.
4. Who we share data with
In addition to us, the following processors handle your data:
- Google LLC (Google Analytics 4) — anonymized analytics data. Based in USA. Transfer is carried out under EU Standard Contractual Clauses.
- Netlify, Inc. (hosting provider) — access to server logs containing visitor IP addresses. Based in USA, EU-U.S. Data Privacy Framework certified.
- Booking.com B.V. — if you book via Booking, your data is processed by this platform under its own privacy policy.
We do not share data with anyone other than the above.
5. Your rights
Under GDPR you have the following rights, which you can exercise by emailing info@apartman-moravia.cz:
- Right of access — request information about what data we process about you.
- Right to rectification — if the data is incorrect or incomplete, you can have it corrected.
- Right to erasure ("right to be forgotten") — request deletion of your data when no longer needed.
- Right to restriction of processing — you can temporarily limit data handling.
- Right to data portability — receive your data in a structured format.
- Right to object — to processing based on legitimate interest.
- Right to withdraw consent — at any time, without penalty. Simply click "Decline" in the cookie banner or clear the website data in your browser.
- Right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz/en).
6. Security
The website uses HTTPS encryption. Emails are stored with a standard provider with password-protected access and two-factor authentication. Only the owner of the apartment has access to the data.
7. Changes to the policy
We may update this policy from time to time. The date of the last update is in the document header. We will notify you of significant changes on the home page.
8. Contact
For any question or request regarding your personal data, please contact us:
Email: info@apartman-moravia.cz
Owner: Tomáš Lášek
Reg. No.: 14025892
This document complies with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 on Personal Data Processing.