Privacy Policy
This notice explains data handling for contact, accommodation enquiries, stays and website use. General consent to personal-data processing is not required for an enquiry or statutory guest records.
1. Controller and contact
The controller is Jindřich Blahož, business ID (IČO) 74174347, registered address Řemíčov 29, 391 43 Řemíčov, Czech Republic, operator of Penzion Zoo Mikulov at Piaristů 23, 692 01 Mikulov. Send privacy questions and requests to info@zoosedlec.cz, call +420 602 448 128 or write to the registered address.
2. Data collected
For contact and accommodation enquiries, we process the name, e-mail, phone, dates, room category, number of guests and any children’s ages or note provided. Data comes from you or the person enquiring for your group. Please do not put health information or other sensitive data in a note.
For a confirmed stay, we also process contract, payment and billing information. Statutory guest records require, as applicable, name, date of birth, address, document type and number, stay dates and visitor-tax information; foreign guests also provide nationality and other legally required data. The web enquiry does not require document copies or payment-card details.
Website use may generate technical data such as IP address, request time, browser information and page visited. The scope of any measurement depends on enabled tools and your consent settings.
3. Purposes and legal bases
We handle enquiries and stays under Article 6(1)(b) GDPR: pre-contract steps requested by you and contract performance. Statutory guest records, visitor tax, foreign-guest reporting, accounting and tax duties use Article 6(1)(c).
Routine questions, website security and the protection of legal claims use legitimate interests under Article 6(1)(f); you may object. Optional analytics and marketing technologies, if enabled, require consent under Article 6(1)(a). Consent is not required for an enquiry or stay.
4. Recipients and services
Data is accessible to authorised operator personnel and, as necessary, technical-support and accounting providers. The website and electronic records use Google Firebase: Hosting for the website, Cloud Firestore for records and Firebase Authentication for authorised administrator access. The database uses the European europe-west4 region (Netherlands); the website uses the global Firebase Hosting network. Provider information: https://firebase.google.com/support/privacy.
Our server processes submitted forms; operational e-mails and enquiry notifications use the WEDOS service. Provider information: https://wedos.com/cs/privacy-data-protection/. Accommodation enquiries are saved in electronic records; contact-message content is sent by e-mail, while only technical delivery and duplicate-prevention data remains in the database. Legally required data is disclosed to relevant authorities, particularly the local visitor-tax administrator, the Czech Police for foreign-guest reporting and tax authorities.
5. Processing outside the European Economic Area
Google services may involve processing outside the European Economic Area even with a European database location. Firebase terms describe adequacy decisions or standard contractual clauses and related safeguards: https://firebase.google.com/terms/data-processing-terms. You may ask the controller for information about the applicable safeguards and a copy.
6. Retention
Contact and unconfirmed-enquiry data is kept as needed for handling and related communication. Contract and complaint data is kept during contract performance and then as necessary to establish or defend legal claims, based on the claim, limitation period and any ongoing proceedings.
Statutory guest registers are kept for 6 years after the last entry; documents replacing a foreign-guest register for 6 years after the stay ends. Accounting and tax records are kept for the legally required period for the document concerned. Website consent choices are valid for no more than 180 days; you may clear the browser-storage record at any time.
7. Cookies and browser storage
The website saves consent choices in localStorage under penzionzoo_cookie_consent. Necessary technologies support website operation and security; administrator sign-in technologies are for authorised administrators.
Google Analytics and Meta Pixel are not enabled at website launch. Any later activation requires appropriate consent and updated information on measurement and data recipients. You may refuse or change your choice through Cookie settings in the footer. Withdrawal does not affect the lawfulness of earlier processing.
8. Your rights and providing data
Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability, object and withdraw consent. Erasure does not apply to data that must still be retained by law or as necessary to protect legal claims. You may complain to the Czech Office for Personal Data Protection: https://uoou.gov.cz.
Enquiry and contract data is provided voluntarily; without essential contact and stay information, we cannot handle an enquiry. Statutory guest-record data is mandatory. A person confirms availability and conditions; we do not make automated decisions with legal or similarly significant effects.