Privacy Policy

This policy explains how we handle personal data collected through this marketing website. The way the CheckinGuest guest app handles guest and police registration data is covered separately in the CheckinGuest privacy policy.

Who we are

The controller of data collected through this website is Prague Retreat Management s.r.o., IČO 22473874, registered at Revoluční 1082/8, Nové Město, 110 00 Praha 1, Czech Republic. You can reach us at info@pragueretreat.com.

What we collect on this site

• Contact form: your name, email address, an optional property or company name, the reason you select, and your message.

We do not use analytics or advertising trackers on this website.

Why we use it, and the legal basis

We use this data only to answer your enquiry and follow up about our products. The legal basis is taking steps at your request before any contract, and our legitimate interest in responding to people who contact us.

Who it is shared with

We do not sell your data or share it for advertising. Two providers process it on our behalf, under our instructions:

• Supabase, for the database that holds your contact messages.
• Vercel, which hosts this website.

The other suppliers listed in our sub-processor list (for example payment processing, document reading, email delivery and police transmission) are used by the CheckinGuest product, not by this website.

Where your data is stored

Data collected through this website is stored in the European Union. Our database and file storage are hosted in Ireland, and the website runs in Frankfurt, Germany.

How long we keep it

We keep enquiry data only for as long as we need it to deal with your enquiry and any follow-up, and then delete it. The six-year retention that Czech law requires for a guest register applies to the CheckinGuest product, not to enquiries you send through this website.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete it, restrict its use, or object to our using it;
• provide it in a portable format.

Email info@pragueretreat.com and we will respond within one month. You can also complain to the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.cz.

International transfers

Your data stays in the EU. Where a provider's parent company is outside the EEA (for example Supabase, whose parent is registered in Singapore), its data processing agreement incorporates Standard Contractual Clauses approved by the European Commission.

Security

We use reasonable technical and organisational measures to protect the data we hold, and limit access to it.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.