SEE ALL TOURS
TOURS

Privacy Policy

Effective date: 25 February 2026

1. Data Controller

The controller of personal data is:

Alexander Went
IČO: 04848675
Registered in the Czech Republic as a sole trader (živnostník)
Email: alex@praguestory.com
Website: https://praguestory.com

(hereinafter referred to as the “Controller”)

2. What Personal Data We Process

When you submit a contact or booking form on this website (via Forminator), we may process the following personal data:

  • Name

  • Email address

  • Phone number (if provided)

  • Message content

  • Tour preferences or booking details

  • Technical data such as IP address (processed by hosting provider)

Important:
The form does not store submissions in the website database. The data is transmitted directly via email to the Controller and processed only for communication and booking purposes.

3. Purpose and Legal Basis for Processing

Your personal data is processed for the following purposes:

a) Responding to inquiries

Legal basis:
Article 6(1)(b) GDPR – taking steps prior to entering into a contract.

b) Tour booking and provision of services

Legal basis:
Article 6(1)(b) GDPR – performance of a contract.

c) Accounting and legal compliance

If an invoice is issued, personal data may be included in accounting records.
Legal basis:
Article 6(1)(c) GDPR – compliance with legal obligations under Czech accounting and tax regulations.

No automated decision-making or profiling is carried out.

4. Data Retention Period

  • Inquiry data (no booking): retained for up to 12 months.

  • Booking and invoicing data: retained in accordance with Czech accounting law (typically 10 years).

  • Email communication: retained as necessary for legitimate business purposes.

5. Data Recipients

Your data may be processed by:

  • Website hosting provider

  • Email hosting provider: WEDOS

  • Accounting software provider (if invoicing is required)

  • IT service providers (if applicable)

All service providers process data in accordance with GDPR requirements.

Your personal data is never sold or used for marketing purposes without consent.

6. International Data Transfers

Your data is primarily processed within the European Union. If any service provider processes data outside the EU, appropriate safeguards under GDPR (e.g., Standard Contractual Clauses) are applied.

7. Your Rights Under GDPR

Under the General Data Protection Regulation (EU) 2016/679, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of personal data

  • Restrict processing

  • Object to processing

  • Data portability

  • Lodge a complaint with the supervisory authority

Supervisory authority in the Czech Republic:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27
170 00 Praha 7
Website: https://www.uoou.cz

8. Data Security

The Controller implements appropriate technical and organisational measures to protect personal data, including:

  • SSL encryption (HTTPS)

  • Secure email hosting

  • Password-protected systems

  • Limited access to personal data

9. Cookies

This website may use essential technical cookies necessary for proper functioning. If analytical or marketing cookies are implemented, they are processed only on the basis of user consent.

10. Contact

For any questions regarding personal data processing, please contact:

Alexander Went
Email: alex@praguestory.com