Who is the Data Controller?
The data controller of your personal data is Kateřina Hajná, with registered office at Pod hotelem 10, Prague 10, 100 00, Company ID (IČO): 23154101, operating the website: https://explore-prague.com. I process your personal data as the data controller, meaning I determine how personal data will be processed, for what purpose, for how long, and I select any other processors who will assist me with the processing.
Contact Details
If you need to contact me during the processing of your personal data, you can reach me at:
Phone: +420 725 499 959
E-mail: info@explore-prague.com
Declaration
I declare that as the controller of your personal data, I comply with all legal obligations required by applicable legislation, in particular the Act on the Protection of Personal Data and the General Data Protection Regulation (GDPR), in the following manner:
- I will process your personal data only on the basis of a valid legal ground, primarily legitimate interest, performance of a contract, legal obligation, or given consent.
- I fulfill the information obligation pursuant to Article 13 of the GDPR before starting to process your personal data.
- I support you in exercising and enforcing your rights under the Act on the Protection of Personal Data and the GDPR.
Scope of Personal Data and Purposes of Processing
I process personal data that you voluntarily provide to me for the following reasons (to fulfill these purposes):
- Provision of Services, Contract Performance
Your personal data, such as email and optionally phone number (or Skype/Messenger, etc.), are necessary for the performance of the contract (e.g., sending links for flights, accommodation, attractions, arranging consultations). - Accounting
If you are my customer, I need your billing data to fulfill the legal obligation of issuing and keeping records of tax documents. - Marketing – Sending Newsletters
Your personal data (e-mail, name), gender, information about clicks in e-mails and the time they were opened are used for direct marketing – sending commercial communications. If you are my customer, I do this based on legitimate interest, as I assume you are interested in my news, and this is done for a period of 5 years from your last order. If you are not my customer, I send newsletters only based on your consent, for a period of 5 years from granting it. You may withdraw this consent at any time using the link in every e-mail. - Advanced Marketing Based on Consent
Based on your consent, I may send you offers from third parties or use your e-mail address for remarketing and targeted advertising on Facebook, for a period of 5 years from the date the consent was given. You may withdraw this consent at any time via the link in every e-mail. - Photographic Documentation – Live Events, etc.
Based on your consent, I may use your photographs including on the internet, social media, feedback, etc., until you withdraw this consent. I retain your data for the duration of the statute of limitations, unless the law stipulates a different retention period or unless I specify otherwise in particular cases.
Cookies
When you visit my website, I record your IP address, the time spent on it, and the referring page. I consider the use of cookies for measuring traffic and customizing website content to be a legitimate interest because I believe this way I can offer you better services.
Cookies for targeted advertising are processed only based on your consent. My website can also be browsed in a mode that does not allow the collection of personal data. You can disable cookies on your computer.
Security and Protection of Personal Data
I protect your personal data using modern technologies that correspond to current technical development. I take all possible technical and organizational measures to prevent misuse, damage, or destruction of your data.
Transfer of Personal Data to Third Parties
My collaborators have access to your data. To perform some processing operations, I use the services of specialized processors who focus on data protection.
These are providers of the following platforms:
- Operators of applications for communication, websites, and invoicing
- Operators of applications for email communication and customer support
- Facebook, Google, Instagram (if used, you agree that your data may be stored outside the EU)
- Providers of accounting and tax services
- Providers of IT services and hosting, including cloud storage
- Providers of assistance services for customer support
- Providers of legal services
- Providers of payment gateways
- Providers of printing and postal services
In the future, I may use other applications or processors, while imposing at least the same security and processing quality requirements on them as I require for myself.
Transfer of Data Outside the European Union
I process data exclusively within the EU or in countries that ensure an adequate level of protection, as determined by the European Commission’s decisions.
Your Rights Regarding Personal Data Protection
In connection with the protection of personal data, you have several rights. If you wish to exercise any of these rights, please contact me via e-mail: info@explore-prague.com
You have the right to information, which is already provided on this information page with the principles of data processing. Under the right of access, you can contact me at any time, and I will provide you within 14 days with an overview of which personal data I process about you and for what purpose. If there are any changes or you find that your data is outdated or incomplete, you have the right to correct or supplement it.
You may exercise the right to restrict processing if you believe that I am processing inaccurate data about you, that the processing is unlawful but you do not want all data deleted, or if you object to the processing. You can restrict both the scope of personal data and the purpose of its processing (for example, by unsubscribing from the newsletter you limit the purpose of processing for sending commercial communications-)
The right to data portability – if you want to transfer your personal data to another controller, I will proceed the same way as with the right of access, but I will send you the information in a machine-readable format. I need at least 30 days to fulfill this request.
The right to erasure (“to be forgotten”) – you have the right to have all your personal data deleted. Even if I do not wish to forget you, if you request it, I will delete all your personal data from my system and from the systems of all other processors, including backups. I need 30 days to fulfill this right.
In some cases, I am obliged to retain data, for example due to legal requirements for keeping tax documents. In such cases, I will only delete data that is not required by other legal regulations. I will inform you about the completion of the erasure by email.
Complaint to the Office for Personal Data Protection
If you feel that I am handling your data unlawfully, you may contact the Office for Personal Data Protection. However, I would appreciate it if you informed me first so that I can resolve the issue.
Unsubscribing from Newsletters and Commercial Communications
I send you emails with inspiration, articles, products, or services based on my legitimate interest if you are my customer. If you are not yet a customer, I send these emails only based on your consent. If you wish to stop receiving my emails, you can unsubscribe at any time using the link in every email I send.
Confidentiality
All collaborators involved in processing your data are bound by confidentiality. This confidentiality obligation continues even after the cooperation ends, and your data will not be shared with third parties without your consent.
These personal data processing principles are effective from June 17, 2025.