Personal data protection

1. Introduction

This document explains how MAJESTIC s.r.o., ID: 02016699, located at Českomoravská 1181/21, Prague 9, operator of PrivateToursCzech.cz, processes your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data we process

  • Identification data (name, surname)
  • Contact information (email, phone)
  • Reservation details
  • Billing information
  • Optional notes and preferences
  • Technical data (IP address, cookies)

3. Purpose of processing

  • Booking and service fulfillment
  • Customer communication
  • Accounting and legal compliance
  • Technical operation and analytics
  • Marketing (with consent)
  • Affiliate program management

4. Legal basis for processing

  • Contract performance
  • Legal obligation
  • Legitimate interest
  • Consent (for marketing and cookies)

5. Data recipients

  • Drivers and partners
  • Accountants and tax advisors
  • IT and mailing providers
  • Analytics and advertising platforms
  • Payment processors
  • Authorities as required by law

6. Data retention period

  • Bookings and invoices: 5 years
  • Marketing: until consent withdrawn, max 3 years
  • Cookies: based on settings (typically 14–365 days)

7. Your GDPR rights

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to lodge a complaint with the DPA

8. Data security

  • Technical and organizational measures
  • Access restricted to authorized personnel

9. Cookies

  • Operational, analytical, and marketing cookies
  • Cookie banner on first visit
  • See “Cookies Policy” for more details

10. Contact & updates

  • Any updates will be published on the website
  • Contact: support@privatetoursczech.cz