This policy applies to the website www.sumavskavlcice.cz and to all accommodation facilities operated under the Šumavská Vlčice brand, including their websites, booking system and online check-in:
It applies to everyone who books a stay with us, stays with us, buys a gift voucher, subscribes to our newsletter or otherwise contacts us. The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related Czech legislation.
The controller of your personal data is BioAktiv CZ s.r.o., registered office at Bořivojova 878/35, 130 00 Prague 3, Czech Republic, Company ID (IČO) 24845957, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 179821 (“we”).
Please send any request or question about your personal data to ubytovani@sumavskavlcice.cz or by post to our premises at Strážný 124, 384 43 Strážný, Czech Republic.
Bookings and additional services. First name and surname, email, phone number, address, dates of stay, number and composition of guests, your notes and requests, additional services ordered (e.g. wine or other goods and services for your stay) and payment details. If you want an invoice issued to a company, also the company name, company ID, VAT number and billing address.
Register of accommodated guests. For each guest: first name and surname, date of birth, nationality, type and number of identity document and permanent address. For foreign nationals also other details required by the Act on the Residence of Foreign Nationals (e.g. purpose of stay, visa number). You fill in the details in the online check-in, to which we will send you a link, or we record them when you arrive.
Fellow travellers. If you book a stay for other people as well, you also provide us with their details. Please make them aware of this policy. For children we process only the data required by law.
Gift vouchers. Name, email and payment details of the buyer and, where applicable, the name of the recipient if you state it on the voucher.
Communication and newsletter. The content of our communication and the email address for sending news and offers.
Website data. IP address, device and browser information and information on how you use the website, collected through cookies according to your settings in the consent banner (see section 6).
Photo of your ID. In the online check-in we also ask you to take a photo of your identity document. This is voluntary. The photo is not a condition of your stay and no law requires us to collect it. We ask for it so that we can verify that the details entered are correct and do not have to copy them out for you on site. We do not ask for a photo for children. You may cover any details we do not need for verification (e.g. your personal identification number) on the photo.
What we use the photo for. Solely to verify the details entered. We do not send it anywhere, do not publish it and do not use it for anything else. Once we have checked the details against it, it is no longer shown in your check-in and is subsequently deleted.
Contactless key handover. A completed check-in with a photo of your ID allows us to hand over the keys via a contactless key box where we have one. You can then collect the keys yourself whenever it suits you. If you do not upload the photo, you are of course still welcome to stay with us. Your arrival will just take a little longer, as we will verify and record the details on site and hand over the keys in person.
How long we keep the photo. The photo of your ID is deleted automatically no later than 14 days after your departure. You do not need to ask for this, the application takes care of it. On request we will delete it at any time sooner, just write to us.
Legal basis. We process the photo on the basis of your consent, which you give in the online check-in before uploading it and which you may withdraw at any time. For a Czech identity card, this is also the holder's consent to a copy being made under the Identity Cards Act. Withdrawing consent does not affect the lawfulness of processing before its withdrawal. We enter the check-in details into the register of accommodated guests that we are required to keep by law (see section 4).
| Purpose | Legal basis |
|---|---|
| Handling bookings, accommodation, additional services, sale of gift vouchers, communication with you | Performance of a contract and steps prior to entering into it (Art. 6(1)(b) GDPR) |
| Register of accommodated guests for the local accommodation fee | Legal obligation under Act No. 565/1990 Coll., on Local Fees (Art. 6(1)(c) GDPR) |
| Guest register (domovní kniha) and reporting the stay of foreign nationals to the Police of the Czech Republic | Legal obligation under Act No. 326/1999 Coll., on the Residence of Foreign Nationals (Art. 6(1)(c) GDPR) |
| Invoicing and accounting | Legal obligation under the Accounting Act and the VAT Act (Art. 6(1)(c) GDPR) |
| Protection of our rights, enforcement and defence of claims, protection of property | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending offers of our services to accommodated guests | Legitimate interest and Section 7(3) of Act No. 480/2004 Coll. (see section 5) |
| Newsletter for people who have not yet stayed with us | Consent (Art. 6(1)(a) GDPR) |
| Photo of your ID in the online check-in | Consent (see section 3) |
| Analytics and marketing cookies | Consent given in the cookie banner |
What we cannot accommodate you without. The data for the register of accommodated guests is required by law and we cannot accommodate you without it. We need the data necessary for the booking to conclude the contract. Everything we process on the basis of consent is voluntary.
Automated decision-making. We do not carry out automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.
To accommodated guests we may send offers of our similar services, i.e. accommodation and stays under the Šumavská Vlčice brand, to the email address given in the booking. We do not need your consent for this, but you can refuse these emails when booking by ticking the relevant box, and at any time later via the link in every email or by writing to ubytovani@sumavskavlcice.cz.
To other interested people we send news only if they subscribe themselves. You can withdraw your consent at any time in the same way.
We do not send offers from third parties, including partners, without your explicit consent. Newsletters are sent via the Czech service Smartemailing.
Cookies are small files that a website stores in your browser. We use three categories:
We manage consent using the Cookiebot tool. You can change your choice or withdraw consent at any time via the cookie settings icon on the website or here: change cookie settings. The tools may differ between individual websites. You will find the current list of specific cookies, their purpose and storage period in the overview below, which is updated automatically.
For the Meta Pixel, we and Meta Platforms Ireland Ltd. are joint controllers for the collection and transfer of data from our website. Any further processing of this data is the responsibility of Meta in accordance with its own policies.
Only our staff who take care of your booking and stay, and processors who provide technical operations for us, have access to your data. We have a contract with every processor that obliges them to protect the data and use it only according to our instructions.
| Recipient | Role |
|---|---|
| Singula soft s.r.o. | Booking system, online check-in and websites |
| NetTech s.r.o. | Hosting and server administration (data stored in the EU) |
| Cybot A/S (Cookiebot) | Cookie consent management |
| Google Ireland Ltd. | Google Analytics and Google Tag Manager, subject to your consent |
| Meta Platforms Ireland Ltd. | Meta Pixel, subject to your consent (joint controller) |
| SmartEmailing s.r.o. | Sending news and offers |
Disclosure required by law. We report data on accommodated foreign nationals to the Police of the Czech Republic (Foreign Police) via the Ubyport system. On request, we submit the register of accommodated guests to the municipality of Strážný for inspection of the local accommodation fee. We may also disclose data to other public authorities where required by law (e.g. the tax office or the Police of the Czech Republic).
Transfers outside the EU. Google and Meta may transfer data to the USA. This is done on the basis of the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. We process all other data within the EU.
| Data | Retention period |
|---|---|
| Photo of your ID | No later than 14 days after departure, then deleted automatically |
| Register of accommodated guests (name, date of birth, identity document, address) | 6 years from the last entry under the Act on the Residence of Foreign Nationals and the Act on Local Fees |
| Invoices and accounting documents | For the period required by the Accounting Act and the VAT Act, no longer than 10 years |
| Other booking data and mutual communication | 4 years from the end of the stay, as contractual claims may be asserted within 3 years |
| Email address for sending offers | Until you unsubscribe or withdraw consent, no longer than 5 years from your last stay or subscription |
| Cookies | According to the settings and validity period of the individual cookies (see section 6) |
After the photo of your ID has been deleted, the data in the statutory register therefore remains until the statutory period expires. Once the periods stated above have passed, we delete or anonymise the data.
You can exercise all of your rights by email at ubytovani@sumavskavlcice.cz. We will reply without undue delay and within one month at the latest. To make sure we do not disclose your data to someone else, we may ask you to verify your identity.
Security. We protect data with technical and organisational measures: encrypted transmission (HTTPS), access control limited to authorised persons, backups and automatic deletion of ID photos.
Changes to this policy. We may update this policy, in particular when legislation changes (e.g. after the introduction of the eTurista system) or when the services we use change. You will always find the current version on this page.
This policy is valid and effective from 7 October 2026. This is a translation of the Czech version, which prevails in case of any discrepancy.
