This policy explains how Zámek Načeradec, a.s. processes the personal data of visitors to zameknaceradec.cz, our guests, people enquiring about corporate and family events, and newsletter subscribers. We comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.
1. Who is the controller of your data
Zámek Načeradec, a.s.
Company ID (IČO): 08797595, VAT ID: CZ08797595
registered office: Kosárkovo nábřeží 127/1, Malá Strana, 118 00 Prague 1, Czech Republic
registered in the Commercial Register kept by the Municipal Court in Prague, Section B, Insert 25008
establishment: Zámek Načeradec, 257 08 Načeradec, Czech Republic
For any data protection matters, please contact us at info@zameknaceradec.cz or by phone at +420 606 080 012.
2. What data we process, why and for how long
Corporate and other event enquiries
When you fill in the enquiry form, we process your first name, last name, e-mail, phone number, approximate date, number of guests and type of event. We use this data to handle your enquiry and prepare an offer. By ticking the mandatory box on the form, you confirm that you have read this policy.
- Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Retention: while your enquiry is being handled and then for no longer than 3 years after our last communication. If we enter into a contract, we keep the data for its duration and then for as long as required by law.
Accommodation bookings and gift vouchers
Online accommodation bookings and gift voucher purchases take place in the Previo booking system embedded in our website. We process the data you provide in your booking – in particular your name, contact details, dates of stay and the details needed for payment and invoicing.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
- Retention: for the duration of the contract and then for the period required by law.
Your stay at the castle
When you stay with us, Czech law requires us to keep a register of accommodated guests for the purposes of the accommodation fee (Act No. 565/1990 Coll., on local fees) and, for foreign nationals, a guest book under Act No. 326/1999 Coll., on the residence of foreign nationals. We keep these records for 6 years. Accounting and tax documents are kept for the period required by accounting and tax legislation, usually 10 years.
- Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).
News and commercial communications
If you subscribe to our newsletter in the website footer or tick the consent box in the enquiry form, we send you news, special offers and other commercial communications from Načeradec Castle by e-mail. We process your e-mail address, where applicable your name, and a record of your consent (date, place and wording of the consent).
- Legal basis: your consent (Art. 6(1)(a) GDPR and Section 7 of Czech Act No. 480/2004 Coll., on certain information society services).
- Retention: until you withdraw your consent.
- Withdrawing consent: at any time, easily and free of charge – via the link in every e-mail or by writing to info@zameknaceradec.cz. Withdrawal does not affect the lawfulness of processing before it.
E-mail and phone communication
When you contact us, we process the information you give us so that we can reply.
- Legal basis: steps prior to entering into a contract, or our legitimate interest in answering your query (Art. 6(1)(b) and (f) GDPR).
- Retention: for no longer than 3 years after our last communication.
3. Cookies and website analytics
- Essential cookies make the website work and remember your choice in the cookie bar (cookie_consent, valid for 1 year; the session cookie PHPSESSID, valid until you close your browser). They do not require your consent.
- Analytics and marketing tools managed through Google Tag Manager (for example Google Analytics) help us understand how the website is used. They run only with your consent given in the cookie bar.
You can withdraw your consent at any time by deleting cookies in your browser settings – the cookie bar will then appear again.
4. Embedded content and links
Some pages contain an embedded Google Maps map and the Previo booking system. When they are displayed, your browser connects to these providers’ servers and passes on information such as your IP address. We only link to Facebook and Instagram – once you follow such a link, the policies of those networks apply.
5. Who we share data with
We never sell personal data. We only share it to the extent necessary with:
- processors who run the website and our services for us – the web hosting and technical administration provider, the operator of the Previo booking system, the e-mail delivery service provider and the newsletter tool provider,
- Google (website analytics only with your consent, maps),
- public authorities where the law requires it (for example the foreign police).
Some processors may process data outside the European Union, in particular in the USA. Such transfers only take place under the conditions laid down by the GDPR – on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
6. Your rights
You have the right:
- to access your personal data,
- to have inaccurate data corrected,
- to have your data erased where we no longer need it or you have withdrawn your consent,
- to restrict processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw your consent at any time where processing is based on consent.
You can exercise your rights by e-mail at info@zameknaceradec.cz or by letter to our registered office. We will respond without undue delay and within one month at the latest. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
7. Further information
Providing your data is voluntary, but without it we cannot handle your enquiry or booking. No automated decision-making with legal effects on you takes place. We protect your data with appropriate technical and organisational measures, including an encrypted connection (HTTPS) and restricted access.
We may update this policy. The current version is always available on this page.