
GDPR
Privacy Policy
How we handle your data, what the cameras are for, and how you can request their deletion at any time.
Who is the data controller
The data controller is Zina Plchová, Company ID (IČO): 741 33 900, registered office at Velká Úpa 56, 542 21 Pec pod Sněžkou. Registered in the Trade Register, Trutnov.
Contact regarding personal data protection: info@chalupanahrani.cz, tel. +420 605 80 30 54.
What data we process
Through the inquiry and contact form, we process:
- first and last name,
- e-mail address,
- phone number (optional),
- stay dates and number of guests,
- the message you write to us.
The data is used exclusively to handle your inquiry, prepare a stay reservation, and for subsequent communication. We do not pass it on to anyone for marketing purposes.
How long we keep the data
We keep data from inquiries and reservations for as long as necessary to handle the stay, and then for the period required by law (typically 5 years for accounting records of completed stays). Inquiries that did not lead to a reservation are deleted within 12 months at the latest.
Marketing and newsletters
We do not send marketing e-mails or newsletters. In exceptional cases we may offer existing guests a discount on a future stay. If you do not wish to receive such communication, just let us know and we will remove you from it immediately.
Camera system
The cottage has two cameras installed:
- Outdoor camera at the entrance door — it only captures the entrance area for the purpose of protecting property and guest safety.
- Indoor camera in the common room with the kitchen — used exclusively for fire prevention and property protection (the cottage is a wooden building with a high fire risk). There are no cameras in bedrooms, bathrooms, toilets, or any other private areas.
Recordings are stored on an encrypted external drive in a locked environment out of reach of the public. Only authorised persons have access to the recordings, and they are automatically overwritten after 7 days. The recording does not capture sound, and no one normally has access to it — it is only made available in the event of an extraordinary situation (fire, damage, request by the Czech Police).
A notice about the camera system, including the controller's contact details and the purpose of processing, is displayed in front of the cottage entrance.
Legal basis for processing: the controller's legitimate interest in protecting property and the safety of persons (Art. 6(1)(f) GDPR).
Cookies and analytics
The website currently does not use analytical or marketing cookies. If we deploy, for example, Google Analytics in the future, we will add a cookie banner and obtain your consent in advance.
Disclosure of data to third parties
We do not pass on data to third parties for marketing purposes. Strictly necessary processing takes place with:
- the e-mail service provider (delivery of the confirmation e-mail),
- the accounting firm (for completed stays, on the basis of law),
- the operator of the e-chalupy.cz availability calendar (dates only, without guests' personal data).
Your rights
In accordance with the GDPR, you have the right to:
- access your personal data,
- have inaccurate data corrected,
- erasure ("the right to be forgotten"),
- restrict processing,
- object to processing,
- lodge a complaint with the Office for Personal Data Protection (uoou.cz).
How to request erasure
You can request the erasure of your data or a copy of it at any time by e-mail to info@chalupanahrani.cz with the subject "Request for erasure of personal data". We will handle your request within 30 days at the latest.
Note: if you were actually accommodated with us, we are required to keep certain data for the period required by law (accounting, guest register).
Last updated: 12 August 2026
