1. Data Controller
David Dočekal, IČO (Business ID): 01800621, with registered office at Školská 689/20, 110 00 Prague 1, a natural person engaged in business registered in the trade register (hereinafter “controller”), processes personal data of natural persons in connection with the provision of accommodation services at D&D Apartment Praha.
Contact for data protection matters: ddaparment305@gmail.com
2. What Personal Data We Process and Why
For the purpose of contract performance and legal obligations (Art. 6(1)(b) and (c) GDPR):
- Full name, date of birth, nationality, passport or ID card number, permanent address — required by Act No. 565/1990 Coll. and Act No. 326/1999 Coll., recorded in the guest register and transmitted via the UBYPORT system
- Email address, phone number — for communication during the reservation and stay
- Check-in and check-out dates, number of guests — for the purpose of providing accommodation services
For the purpose of the controller’s legitimate interest (Art. 6(1)(f) GDPR):
- Data from the booking form on the website (name, email, dates of stay, number of guests, message) — for the purpose of handling inquiries and preparing offers
3. Data Retention Period
We retain personal data for the period strictly necessary to fulfil the purpose of processing. Guest register data is retained for 6 years from the end of the stay in accordance with tax regulations. Email correspondence is retained for 3 years from the end of the last reservation.
4. Recipients of Personal Data
- Ministry of the Interior of the Czech Republic / Czech Police — legal obligation to register accommodated foreign nationals via the UBYPORT system
- Resend Inc. (USA) — email communication processor; transfer to a third country is carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission
- Vercel Inc. (USA) — website hosting and analytics provider; transfer to a third country is carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission
Personal data is not transferred to any other third parties or used for marketing purposes.
5. Your Rights
As a data subject, you have the right to:
- request confirmation of whether personal data concerning you is being processed, and if so, the right to access such data (Art. 15 GDPR)
- rectification of inaccurate personal data (Art. 16 GDPR)
- erasure of personal data if the purpose of processing has ceased (Art. 17 GDPR)
- restriction of processing in the cases set out in Art. 18 GDPR
- portability of personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
- object to the processing of personal data (Art. 21 GDPR)
- lodge a complaint with the Office for Personal Data Protection (www.uoou.cz), Pplk. Sochora 27, 170 00 Prague 7
- judicial remedy under Art. 79 GDPR
You may exercise your rights by email at: ddaparment305@gmail.com
6. Automated Decision-Making and Profiling
The controller does not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
7. Cookies and Analytics
The website ddapartmentprague.com uses Vercel Analytics for anonymous traffic monitoring. This analytics does not use cookies and does not collect personal data — it tracks only aggregate statistics. We do not use any tracking or advertising cookies.
8. Validity and Updates
These policies are effective from 1 June 2026. The controller reserves the right to update these policies.