Privacy policy

What the site collects itself

The site has no accounts, no sign-in, and payment details never reach us — you enter your card on the Comgate gateway. There is one exception: ordering a custom gift voucher. There you leave us a name, an e-mail, optionally a phone number, the recipient’s name and the dedication text.

With your consent it measures traffic through Google Analytics: pages visited, approximate location from your IP address, device type and where you came from. Without consent, not even that runs.

Who the data goes to

• d-edge (Availpro SAS) — the booking system at secure-hotel-booking.com. You enter booking details directly there and the hotel receives them as controller.
• Google Ireland Limited — Google Analytics and Google Tag Manager, only after consent.
• The chatbot provider — inserted through Google Tag Manager, so only after consent.
• inshop.cz — catalogue gift vouchers are sold in their e-shop, including checkout and invoicing.
• Comgate, a.s. — the payment gateway for custom vouchers. It processes the payment and returns only its result; your card number never reaches us.
• Google Ireland Limited (Firebase, Google Cloud) — voucher orders are stored in a Firestore database in a data centre in the Netherlands.
• Resend — sending the confirmation and the voucher itself by e-mail.

Legal basis and retention

Analytics and marketing processing rests on your consent (Art. 6(1)(a) GDPR) and lasts until you withdraw it, at most for the lifetime of the relevant cookies.

Booking data is processed to perform the accommodation contract (Art. 6(1)(b)) and kept further where the law requires it — accounting records and the guest register.

A gift voucher order is processed to perform the contract (Art. 6(1)(b)). We keep the order record for as long as the voucher is valid and then for as long as accounting and tax rules require; after that we delete or anonymise it. You can ask for deletion sooner once the voucher is no longer valid.

Your rights

You have the right of access to your data, to rectification and erasure, to restriction of processing, to data portability and to object. You may withdraw consent at any time — for cookies, via the “Cookie settings” link in the footer.

Write to recepce@hotelrajskazahrada.cz or to the hotel's postal address. If we do not satisfy your request, you may complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.