Privacy
How we handle your personal data
When you send us an enquiry or stay with us, you trust us with a few details about yourself. This page sets out plainly which details those are, what we need them for, how long we keep them and what you can ask us to do with them at any time. We follow Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing. Last updated: 13 August 2026
1Who handles your data
Data controller
ZLATÉ JESENÍKY s. r. o.
Olomoucká 1292/17a, 618 00 Brno, Czech Republic
Company ID (IČO): 26943417
registered in the Commercial Register kept by the Regional Court in Brno,
file no. C 47321
Accommodation: Chalupa Polňačka, Polní 278, 793 56 Rýžoviště, Czech Republic
Phone: +420 602 880 888
E-mail: ubytovani@zlatejeseniky.cz
We are not required to appoint a data protection officer and have not appointed one. Please use the contacts above for anything related to your data.
2What we process and why
Non-binding enquiry
The form in the Contact section asks for your name, e-mail, optionally a phone number, your preferred dates, the number of adults and children, the chosen type of accommodation and your message. We need these to reply and agree the details of your stay.
Legal basis: steps taken at your request before entering into a contract — Art. 6(1)(b) GDPR.
The form currently stores nothing on our server — it opens your own e-mail application with a pre-filled message that you send yourself. Your details therefore travel by ordinary e-mail and we keep them in our mailbox.
Booking and the stay itself
Once the dates are agreed we also need your home address, and from guests who are not Czech citizens the date of birth, nationality and travel document number.
Legal basis: performance of the accommodation contract — Art. 6(1)(b) GDPR.
Guest register
As an accommodation provider we are required by law to keep a register of guests. This follows from Czech Act No. 565/1990 Coll., on local charges, and for foreign nationals from Act No. 326/1999 Coll., on the residence of foreign nationals. Stays of foreign nationals are also reported to the Czech foreign police.
Legal basis: compliance with a legal obligation — Art. 6(1)(c) GDPR. These details cannot be withheld; without them we are not allowed to accommodate you.
Accounting and tax
Payment records carry your identification and payment details. We must keep them under Act No. 563/1991 Coll., on accounting, and tax legislation.
Legal basis: compliance with a legal obligation — Art. 6(1)(c) GDPR.
Cookies and running the site
Necessary cookies keep the site working and are stored without your consent. Analytics and marketing cookies are switched on only if you agree in the banner shown on your first visit. You can change or withdraw that consent at any time in .
Legal basis: legitimate interest in running the site for necessary cookies (point f), your consent for the rest (point a).
3How long we keep it
| Data | Retention period |
|---|---|
| Enquiry that did not lead to a booking | 6 months from the last message |
| Accommodation contract and related correspondence | 4 years from the end of the stay (limitation period) |
| Guest register | 6 years from the last entry |
| Accounting records | 10 years from the end of the tax period |
| Cookie consent | 12 months, then we ask again |
Once the period is over, the data is deleted or shredded.
4Who else sees it
We do not sell your data and we do not pass it to anyone who does not need it. It may reach:
- our hosting and e-mail provider, on whose servers the site and mailbox run;
- the booking portal e-chalupy.cz, if you book through it;
- our accountant, who processes the paperwork;
- the Police of the Czech Republic — reporting stays of foreign nationals;
- the Rýžoviště municipal office — for the local stay charge;
- a lawyer or court, should a debt ever have to be recovered.
All processors are bound by confidentiality and a processing agreement. We do not transfer data outside the European Economic Area.
5Your rights
You can exercise these rights with us at any time. Just write to the e-mail address or call the number in section 1 — we will respond within one month at the latest, free of charge.
- Know what we hold about you — we will give you a copy.
- Have it corrected if it is inaccurate or incomplete.
- Have it erased — except for records we are required by law to keep.
- Restrict processing while something is being clarified.
- Receive it in a machine-readable form or have it sent elsewhere.
- Object to processing based on legitimate interest.
- Withdraw consent where you gave it — cookies, for instance. Processing carried out before the withdrawal remains lawful.
If you believe we are mishandling your data, tell us first — most things are sorted out straight away. You can also go directly to the supervisory authority:
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz
6Security and automated decisions
Data is kept on password-protected devices and in password-protected mailboxes, paper records in a locked cabinet. Only people who genuinely need it for their work have access.
We carry out no automated decision-making or profiling — nothing that concerns you is decided by a machine.
7Changes to this page
If the way we process data changes, we will update this page and change the date at the top. It is worth checking back now and then.