Privacy policy
Data controller
Valeriia Votinova
Company ID 06028047
Olgy Havlové 2931/37, 130 00 Praha 3 - Žižkov
info@bohemiaway.cz
What we process
The data you send us yourself by the form, e-mail, phone or WhatsApp: your name, contact details, company name and the details of the journey you need.
Why and on what basis
To answer your request, prepare an offer and provide the service you order. If you are asking for a service for yourself, the legal basis is entering into and performing a contract (Art. 6(1)(b) GDPR). If you write to us on behalf of a company, we process your contact details on the basis of our legitimate interest in communicating with business partners (Art. 6(1)(f) GDPR).
Do you have to give us your data?
No. Without your name and a way to reach you (e-mail or phone), however, we cannot reply. All other details are optional and help us prepare an accurate offer.
How long
Requests that do not lead to a booking are deleted within one year at the latest. Details of completed bookings are kept for as long as tax and accounting law requires, at most 10 years.
Who receives it
We do not sell your data or pass it to anyone for marketing. The website and e-mail are run for us by our hosting provider WEDOS Internet, a.s., based in the Czech Republic, as a processor. If you write to us on WhatsApp, your messages are also processed by WhatsApp Ireland Limited (Meta group); the data may be transferred to the USA, where it is protected by the EU–US Data Privacy Framework and standard contractual clauses. If you book a trip, only the driver or guide who provides it receives the details they need (name, phone, pick-up place and time).
Server logs
When you visit the website, our hosting provider’s server records technical data (IP address, time, page visited, browser type). It is used to keep the website running and secure, is kept for a limited time and is not used to track visitors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
Form protection
To protect the form against abuse, we keep a hash of the IP address a request was sent from for one hour. It is then deleted automatically. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
Cookies
This website uses no cookies or other tracking technologies.
Your rights
You have the right to access, correct and erase your data, to restrict its processing and to data portability. Where we process data on the basis of legitimate interest, you have the right to object. You can exercise your rights by e-mail at the address above. We do not use automated decision-making or profiling. You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).