The Cottage Gallery Spaces Activities Travel Guide Newsletter Reviews Book Now

Privacy Policy

How We Collect, Use, and Protect Your Personal Data

Last Updated: April 4, 2026
Effective Date: April 4, 2026
This policy applies to all personal data processing by Velenice Cottage.

1. Data Controller

Petra Ballaty and Libor Ballaty (individual property owners)

Address: Velenice 13, 28901 Velenice, Czech Republic

Contact: +420 773 111 324 or info@velenice.netwrks.cloud

We are responsible for all personal data processing conducted through this website and our booking services. As individual property owners operating a vacation rental accommodation business in the Czech Republic, we are classified as Data Controllers under GDPR.

If you have questions about your privacy or how we handle your data, please contact us using the information above.

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us through website forms. We do not collect more data than necessary for the purpose intended.

2.1 From Booking Inquiries

2.2 From Newsletter Signup

2.3 From Guest Reviews/Feedback

2.4 Automatic Collection

3. Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following legal grounds:

3.1 Consent (Article 6(1)(a))

3.2 Pre-Contractual Necessity (Article 6(1)(b))

3.3 Legitimate Interest (Article 6(1)(f))

4. How We Use Your Data

4.1 Booking Inquiries

4.2 Newsletter

4.3 Guest Reviews

4.4 Server Logs & Security

5. Data Retention - How Long We Keep Your Information

We keep your personal data only as long as necessary for the purpose for which it was collected. Here are our specific retention periods:

Data Type Retention Period Reason
Booking inquiries (no booking made) 2 years Legitimate business interest
Completed booking records 7 years Czech Act on Accounting (Law No. 563/1991 Coll.) - tax record retention
Newsletter subscribers Until unsubscribe Fulfilling marketing consent
Guest reviews Until withdrawal or request for deletion Maintaining reputation feedback
Server access logs 90 days Security and site maintenance
Rate-limiting data (spam prevention) Session only Real-time spam prevention

After the retention periods expire: Your data is securely deleted from our systems. If we hold invoices or records related to a booking, they are retained according to Czech accounting law (7 years) but your personal contact information is removed.

6. Who We Share Your Data With

6.1 Email Hosting Provider

Service: Email hosting for info@velenice.netwrks.cloud

Provider: Stableserver (cPanel email hosting)

Data Shared: Your email address, name, and message content (for booking inquiries, newsletters, feedback)

Location: Frankfurt, Germany (EU - GDPR compliant)

Purpose: To send you confirmation emails, newsletters, and responses to your inquiries

6.2 Web Hosting Provider

Provider: Stableserver (Frankfurt, Germany)

Data Processed: Server access logs containing IP addresses and request information

Purpose: Website hosting, security, and maintenance

6.3 External Booking Platforms

Important: If you book through Airbnb or Booking.com, your data is NOT automatically shared with us. You provide information directly to those platforms, and their privacy policies apply. We only see booking confirmation details they send us (not your full profile).

6.4 No Other Sharing

We do NOT share your personal data with any third parties beyond those listed above. We do NOT sell your data. We do NOT share data with marketing agencies or advertisers.

7. Your Rights Under GDPR and Czech Law

You have the following rights regarding your personal data as protected by GDPR Articles 15-21 and Czech GDPR Implementation Act (Law No. 110/2019 Coll.). To exercise any of these rights, email us at info@velenice.netwrks.cloud with your request.

7.1 Right to Access (Article 15)

What this means: You can ask us what personal data we have about you.

How to request: Email "Please provide all personal data you have about me" with your name and email address.

Response time: Within 30 days

Format: We'll provide your data in a readable format (PDF or document)

7.2 Right to Rectification (Article 16)

What this means: You can correct inaccurate data (e.g., if your email address is wrong in our records).

How to request: Email "Please correct my email address to [new address]" or specify what is inaccurate.

Response time: Within 30 days

7.3 Right to Deletion (Article 17 - "Right to be Forgotten")

What this means: You can ask us to delete your personal data.

Exceptions: If we're legally required to keep your data (e.g., accounting records for completed bookings under Czech law), we may not be able to delete all data, but we'll explain the reasons.

How to request: Email "Please delete my personal data" with your name and email address.

Response time: Within 30 days

7.4 Right to Data Portability (Article 20)

What this means: You can ask for your data in a portable format to transfer to another service.

How to request: Email "Please provide my data in machine-readable format" (CSV or JSON).

Response time: Within 30 days

7.5 Right to Withdraw Consent

What this means: If you provided consent (newsletter, reviews), you can withdraw it at any time.

For newsletter: Click the "Unsubscribe" link at the bottom of any newsletter email.

For reviews: Email us to request removal of your public review.

7.6 Right to Object (Article 21)

What this means: You can object to processing of your data.

How to request: Email your objection with explanation.

Response time: Within 30 days (we'll explain if we have grounds to continue processing)

8. Cookies and Tracking

8.1 What Cookies We Use

PHPSESSID (PHP Session Cookie)

8.2 What We Do NOT Use

8.3 How to Disable Cookies

You can disable cookies in your browser settings, but some website features (like forms) may not work properly. See our Cookie Policy for detailed browser instructions.

9. Data Security

We take the security of your personal data seriously. Here's how we protect it:

What we cannot guarantee: No method of internet transmission is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security. Use strong passwords and protect your email account.

10. Data Breaches

If we discover that your personal data has been compromised, we are legally required to:

  1. Notify you within 72 hours (if the breach poses a high risk)
  2. Notify the Czech Data Protection Authority (ÚOOÚ)
  3. Describe what happened and what data was affected
  4. Provide steps you can take to protect yourself

Contact for Data Breaches: If you believe your data has been compromised, email info@velenice.netwrks.cloud immediately with "DATA BREACH" in the subject line.

11. International Data Transfers

All data is stored in the EU (Frankfurt, Germany). We do not transfer personal data outside the EU/EEA, which means GDPR protections fully apply.

Exception: Fonts (Self-Hosted)

Fonts are hosted on our own servers - no data transfer to third parties.

12. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children. If we learn that we've collected data from a child under 16, we will delete it immediately.

13. Data Processing Agreements

We have data processing agreements in place with:

These agreements ensure that these processors handle your data according to GDPR requirements.

14. Your Rights If You're Unhappy

14.1 Contact Us First

If you have concerns about how we handle your data, please contact us first:

Email: info@velenice.netwrks.cloud
Phone: +420 773 111 324
Address: Velenice 13, 28901 Velenice, Czech Republic

We'll respond within 30 days.

14.2 Lodge a Complaint with Your Data Authority

If you're not satisfied with our response, you have the right to lodge a complaint with your national data protection authority:

Czech Data Protection Authority (ÚOOÚ)

15. Changes to This Policy

We may update this privacy policy when our practices change or as required by law. We will notify you of material changes by:

Your continued use of the website after updates means you accept the new policy.

16. Contact Information

For privacy questions or to exercise your rights:

Petra Ballaty and Libor Ballaty
Velenice 13, 28901 Velenice, Czech Republic
+420 773 111 324
info@velenice.netwrks.cloud

Document Version: 1.0
Last Updated: April 4, 2026
Effective Date: April 4, 2026