Privacy policy

This policy describes how HOTEL HUKVALDY s.r.o. (the “hotel” or the “controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data. The controller has not appointed a data protection officer because it is not legally required to do so; please direct all questions to the contact above.

1. What data we process and why

Accommodating guests

Name and surname, date of birth, permanent address, number and type of identity document, nationality, purpose and length of stay and, for foreign nationals, visa number. We process this data because the law requires us to (Art. 6(1)(c) GDPR) – in particular to keep a register of guests under Czech Act No. 565/1990 Coll., on local fees, and to report the stay of foreign nationals under Czech Act No. 326/1999 Coll., on the residence of foreign nationals. We also process it to perform the accommodation contract (Art. 6(1)(b) GDPR).

Booking stays and services

Name, e-mail, phone, dates of stay, number of guests, requests regarding your stay, payment details. The processing is necessary to conclude and perform the contract (Art. 6(1)(b) GDPR). Online bookings are made through the Previo booking system; payment details are processed by the payment gateway provider, and the hotel has no access to payment card data.

Contact form, e-mail and phone

Name, e-mail, phone and the content of your message. We use this data only to handle your question, enquiry or booking of a table, wellness or an event – at your request and on the basis of our legitimate interest in communicating with you (Art. 6(1)(b) and (f) GDPR).

Newsletter

If you subscribe to our newsletter on the website, we process your e-mail address and information about when you subscribed and whether you open our e-mails and what you click on in them (so that we know which offers interest you). We send you e-mails with special stays and hotel news on the basis of your consent (Art. 6(1)(a) GDPR and Section 7 of Czech Act No. 480/2004 Coll., on certain information society services). You can withdraw your consent at any time using the unsubscribe link in every e-mail or by e-mail to info@hotelhukvaldy.cz.

Website traffic (analytics cookies)

Only if you give your consent in the cookie banner, we use Google Analytics 4 to measure how visitors use the website: which pages they view, where they came from, what device and browser they use, their approximate location (country and city derived from the IP address, which Google Analytics does not store) and selected actions on the website – clicks on the phone number or e-mail, form submissions and the progress of an online booking (the selected room, dates and price, not your name, contact or payment details). We distinguish visitors by a random identifier in a cookie, not by name. We process this data on the basis of your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications). Without your consent, Google Analytics is not loaded at all. You can withdraw your consent at any time – see Cookies.

Accounting and taxes

Data on documents (invoices, receipts) and, for companies, also the company ID and VAT ID. We are required to process this data by Czech Act No. 563/1991 Coll., on accounting, and Czech Act No. 235/2004 Coll., on value added tax (Art. 6(1)(c) GDPR).

Protecting the hotel’s rights

To the extent necessary, we may also process data to establish or defend legal claims, e.g. in the event of damage to property or an unpaid stay (legitimate interest, Art. 6(1)(f) GDPR).

We do not send commercial communications (newsletters) without your explicit consent. We do not use your data for automated decision-making or profiling.

2. How long we keep data

After this period, we delete or anonymise the data.

3. Who we share data with

We do not sell personal data. We share it only where required by law, or with trusted processors who provide services for us and are bound by contract and confidentiality:

• Previo s.r.o. – booking system and booking management,
• Netlify, Inc. – website hosting and receiving messages from forms,
• Google Ireland Ltd. – website traffic measurement (Google Analytics), only with your consent,
• Ecomail.cz, s.r.o. – sending the newsletter, only with your consent,
• payment service providers, our accountant and tax adviser, IT and e-mail service providers,
• public authorities to the extent required by law – the Police of the Czech Republic (reporting the stay of foreign nationals), the municipality of Hukvaldy (local accommodation fee), the tax office, courts.

If a processor processes data outside the European Economic Area (e.g. in the USA), this happens only with appropriate safeguards – on the basis of the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.

4. Cookies and third-party content

Cookies are small files that a website stores in your browser. We need essential cookies (and similar browser storage) for the website to work, and no consent is required for them. We use analytics cookies only with your consent, which you give or refuse in the cookie banner on your first visit. We do not use advertising cookies.

You can change or withdraw your consent at any time: open cookie settings (the link is also in the footer of every page). After you withdraw consent, we delete the analytics cookies and Google Analytics stops loading.

Some parts of the website also embed third-party content, which may store its own cookies and process data about your device (e.g. IP address) when loaded:

• Google Maps (Google Ireland Ltd.) – the map on the Contact page,
• YouTube (Google Ireland Ltd.) – the video on the home page; the player loads only after you click, in privacy-enhanced mode,
• Previo – the booking form on the Booking page, which uses cookies necessary to complete a booking.

Processing by these services is governed by their operators’ policies, e.g. the Google Privacy Policy. You can restrict or block cookies at any time in your browser settings.

5. Your rights

In connection with the processing of your personal data, you have the right:

• of access to your personal data and to information about its processing,
• to rectification of inaccurate data or completion of incomplete data,
• to erasure of data if it is no longer needed and no legal retention obligation prevents it,
• to restriction of processing,
• to data portability for data you have provided to us,
• to object to processing based on legitimate interest,
• to withdraw consent where processing is based on consent (this does not affect the lawfulness of processing before withdrawal),
• to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

You can exercise your rights by e-mail to info@hotelhukvaldy.cz, by phone on +420 774 190 141 (Ondřej Holub) or in writing to the hotel’s address. We will reply without undue delay, at the latest within one month. To protect your data, we may ask you to verify your identity.

6. Security

We have adopted technical and organisational measures to protect personal data against unauthorised access, loss or misuse. The website is operated exclusively over an encrypted HTTPS connection, and only authorised hotel employees and contracted processors have access to the data, to the extent necessary for their work.

7. Changes to this policy

We may update this policy from time to time. The current version is always published on this page.

This policy is effective from 31 October 2026.