Privacy policy
How PROFI TANDEM s.r.o. processes the personal data of website visitors.
Effective from 1 October 2026
This is an English translation for information. In case of any discrepancy, the Czech version is binding.
Introduction
This policy explains how PROFI TANDEM s.r.o. processes the personal data of visitors to www.penzion-uctyrlistku.cz. We obtain personal data only through the contact form and, to the extent necessary, in the server’s operating logs. We do not use analytics or marketing cookies.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), and Czech Act No. 110/2019 Coll., on the processing of personal data, as amended.
Data controller
The controller of your personal data is:
- Company name: PROFI TANDEM s.r.o.
- Registered office: Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic
- Company ID (IČO): 19682433
- VAT ID (DIČ): CZ19682433
- Commercial register: registered under file no. C 389774 at the Municipal Court in Prague
- Data box ID: d3n6424
- E-mail: info@penzion-uctyrlistku.cz
- Phone: +420 721 236 683
The company has not appointed a data protection officer, as it is not required to do so under Article 37 GDPR. Please send any questions about the processing of personal data to the e-mail address or registered office above.
What data we process and why
We process only the data you send us yourself through the contact form, and technical data necessary for the secure operation of the website.
| Processing | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form (enquiry and booking) | type of enquiry, first name and surname, phone, e-mail, arrival and departure dates, number of people and children, message | handling the enquiry and follow-up communication | legitimate interest in responding to the enquiry, Art. 6(1)(f) GDPR; for an enquiry prior to entering into a contract, Art. 6(1)(b) GDPR | on the website 180 days (then deleted automatically); in the e-mail inbox no longer than 12 months after the enquiry has been handled; if a contract is concluded, for the archiving period of the contract documents |
| Server operating logs | IP address, date and time of access, requested address, browser type | ensuring operation and protecting the website against misuse and attacks | legitimate interest in securing the website, Art. 6(1)(f) GDPR | 30 days, then deleted automatically |
Filling in the form is voluntary. Without contact details, however, we cannot reply to you. We do not use data from the form to send marketing messages or for profiling.
Cookies
The website does not store any cookies for ordinary visitors, not even when the contact form is submitted (spam protection works without cookies). The website uses only one cookie, for logged-in site administrators:
| Cookie name | Purpose | Validity |
|---|---|---|
| SSESS… (random string) | keeping a site administrator logged in | 23 days or until logout |
This is a strictly necessary cookie, which under Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications, does not require consent. We do not use analytics, advertising or other tracking cookies.
Google Maps
The website includes a Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after you click the “Show map” button. Only then does Google receive your IP address, and it may store its own cookies; data may also be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. The legal basis is your consent (clicking the button), Art. 6(1)(a) GDPR. Without the click, nothing is loaded from Google. More at policies.google.com/privacy.
Recipients and processors
We do not sell personal data or pass it on to third parties for their own purposes. Only authorised staff have access to it, together with the following processor, with whom we have concluded a data processing agreement under Article 28 GDPR:
| Processor | Service | Registered office |
|---|---|---|
| BEST-HOSTING s.r.o., IČO 28823036 | web hosting and server operation; the e-mail inbox that receives messages from the form | Brněnská 700/25, 500 06 Hradec Králové, Czech Republic |
We may also pass personal data to public authorities where required by law.
Transfers outside the EU/EEA
We process personal data on servers in the European Union and do not transfer it to countries outside the European Union and the European Economic Area, with the exception of the Google map, which you load yourself (see above).
Your rights
In connection with the processing of your personal data, you have the following rights:
- access to the data we process about you (Art. 15 GDPR),
- rectification of inaccurate or incomplete data (Art. 16 GDPR),
- erasure of data where there is no longer a reason to process it (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- portability of data processed on the basis of a contract (Art. 20 GDPR),
- objection to processing based on legitimate interest (Art. 21 GDPR).
Please send your request to info@penzion-uctyrlistku.cz or to our registered office. We will handle it without undue delay and at the latest within one month of receipt. In complex cases we may extend this period by a further two months, in which case we will inform you (Art. 12(3) GDPR).
You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, e-mail posta@uoou.cz, uoou.gov.cz.
Security
The website communicates exclusively over an encrypted HTTPS connection. Only authorised persons have access to data from the form, and access is protected by a password.
No automated decision-making or profiling within the meaning of Article 22 GDPR takes place when your personal data is processed.
Changes to this policy
We may update this policy, for example when a processor or website features change. The current version is always published on this page, with the effective date stated at the top.