Rezidence Muzeum s.r.o.
Registered office: Křemenáčová 171/7, 104 00 Prague - Pitkovice
Company ID: 05110068, VAT ID: CZ05110068
(hereinafter referred to as the "Controller")
Protecting your personal data is our priority. This document informs you about what data we collect, for what purpose we process it, how we protect it, and what your rights are under Regulation (EU) 2016/679 (GDPR).
1. What data do we process?
On our website, we process the following personal data:
- When you visit the website: IP address and technical data about your browser and device, which Cloudflare processes to deliver the website and to protect it and its forms against bots and spam
- When you request accommodation or parking:
- Name, surname
- Email, phone number
- Number of people, number of children and their age
- Date of arrival and departure
- Vehicle license plate number
- Date and time of parking use
- When completing the registration form for legal purposes (data for the Foreign Police):
- Name, surname, date of birth
- Nationality, permanent address
- Passport or ID card number, visa number
- Date of arrival and departure
- Purpose of stay
- Signature
If you use "Fill in from your document" on the registration form, the photo of your document is read in your browser and is neither uploaded nor stored; only the fields you then send reach us.
2. Purpose of data processing
Your personal data is processed for the following purposes:
- Handling your request and booking of accommodation or parking
- Fulfilling legal obligations (e.g., reporting foreigners to the Foreign Police)
- Ensuring the operation of services (reservation systems, accounting)
- Protecting our forms against spam and abuse (Cloudflare Turnstile)
- Website traffic analysis using Google Analytics (only with your consent to analytics cookies)
- Showing our location on Google Maps (only when you choose to show the map)
3. Legal basis for processing
- Contract performance – e.g., your booking
- Legal obligation – e.g., reporting foreigners under Act No. 326/1999 Coll.
- Legitimate interest of the controller – protecting our forms against spam and abuse (Cloudflare Turnstile) and cookie-free, aggregated traffic statistics (Cloudflare Web Analytics)
- Data subject consent – analytics cookies (Google Analytics)
- Data subject consent – showing the map (Google Maps)
4. Sharing data with third parties
Your data may be shared with third parties only to the necessary extent:
- Reservation and registration systems: D-EDGE
- Accounting and tax services
- Website hosting, form protection and cookie-free traffic statistics: Cloudflare, Inc.
- Storage of form submissions and the guest register, delivery of form emails: Google (Google Workspace)
- Web analytics: Google Analytics (Google Ireland Ltd.), only with your consent
- Map: Google Maps (Google Ireland Ltd.), only when you show the map; Google processes this data as a separate controller under its own privacy policy
Our processors have signed a data processing agreement in accordance with GDPR.
5. Data retention period
We store personal data for only as long as necessary:
- Form data: max. 1 year after last interaction
- Data for accounting or legal purposes: according to legal deadlines
- Foreign Police registration data: according to legal obligation
6. Your rights
Under the GDPR, you have the following rights:
- Right of access to personal data
- Right to rectification or erasure
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with the Czech Data Protection Authority (www.uoou.cz)
To exercise your rights, contact us via email: info@rezidencemuzeum.cz
7. Data security
Your personal data is safe with us. We have taken technical and organizational measures to protect your data from unauthorized access, alteration, loss, or misuse.
8. Cookies
We use two kinds of cookies:
- Strictly necessary cookies and storage, which need no consent:
- cc_cookie stores your cookie choices (6 months).
- cf_clearance is set by Cloudflare's bot protection and records that your browser passed its security check (1 year).
- On pages with a form, Cloudflare Turnstile keeps the entry cf.turnstile.u in the local storage of its own frame (challenges.cloudflare.com) to tell people from bots. Turnstile sets no cookie on our website.
- Analytics cookies, only with your consent: Google Analytics sets _ga and _ga_* (up to 2 years).
When you first visit, a cookie banner lets you accept or reject analytics cookies and the map. You can change or withdraw your consent at any time via “Privacy settings” at the bottom of every page; withdrawing deletes the analytics cookies.
The map on the homepage is not loaded until you allow it, with “Show map” or in the privacy settings (category “Map”). Your browser then loads the map from Google, which receives your IP address and technical data about your browser and may set its own cookies, under Google's privacy policy (policies.google.com/privacy). Your choice is stored in cc_cookie, and you can withdraw it at any time via “Privacy settings”.
Cloudflare Web Analytics measures traffic without cookies and without identifying you. The fonts of the website are served from our own servers.
9. International data transfers
Some of our service providers (Google, Cloudflare) are based in the USA or may process data there. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which these providers are certified, or on standard contractual clauses.
10. Contact information
Rezidence Muzeum s.r.o.
Křemenáčová 171/7, 104 00 Prague - Pitkovice
Company ID: 05110068
Email: info@rezidencemuzeum.cz
Phone: +420 777 997 904