Privacy Policy (GDPR)
1. Data Controllers
The data controllers responsible for processing your personal data are:
GET PRAGUE GUIDE s.r.o.
Company ID (IČO): 05443016
Štěpánská 1742/27, 110 00 Prague 1, Czech Republic
Email: info@getpragueguide.com
Phone: +420 725 744 770
GET PRAGUE SERVICES s.r.o.
Company ID (IČO): 19208006
Štěpánská 1742/27, 110 00 Prague 1, Czech Republic
Email: info@getpragueguide.com
2. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
• Performance of a contract – reservations, ticket sales, accommodation, transportation and other booked services.
• Legal obligations – accounting, tax records, reporting to immigration police (for accommodation services).
• Legitimate interests – protection of property and persons via security cameras, service improvement, direct marketing to existing customers.
• Consent – newsletter subscriptions, analytical and marketing cookies, publishing customer reviews.
3. Categories of Data Processed
We process the following personal data:
• Identification data – name, surname, email, phone number.
• Reservation data – date, service type, number of people, special requirements.
• Payment data – payment method, order number, amount (we do not store card numbers).
• Technical data – IP address, cookie ID, device type, location.
• Camera recordings – video (and occasionally audio) footage in our business premises.
4. Recipients of Personal Data
Your personal data may be shared with the following recipients:
• IT and hosting service providers,
• accounting and tax consultants,
• booking platforms (e.g., Booking.com, GetYourGuide),
• marketing platforms (Meta, Google, Mailchimp),
• contracted service providers (drivers, guides, restaurants, hotels),
• legal advisors, public authorities or regulators where required by law.
5. Transfers Outside the EU
Some tools (e.g., Google, Meta, Mailchimp) may transfer your data outside the EU. Such transfers are based on Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46 GDPR.
6. Data Retention
• Accounting and tax data: 10 years.
• Reservation and communication data: 3 years from the last interaction.
• Camera footage: up to 14 days unless a security incident occurs.
• Marketing emails (based on consent): until withdrawn or max. 2 years.
7. Your Rights Under GDPR
You have the right to:
• access your personal data,
• request correction or deletion,
• object to processing or request its restriction,
• request data portability,
• withdraw your consent at any time,
• lodge a complaint with the Czech Data Protection Authority (www.uoou.cz).
8. Cookies and Website Analytics
Our website uses cookies:
• Essential cookies – necessary for website and booking system functionality,
• Statistical cookies – help us analyze anonymous traffic (e.g., Google Analytics),
• Marketing cookies – used for targeted advertising based on your behavior (e.g., Meta Pixel, Google Ads).
We request your explicit consent for non-essential cookies via a cookie banner (opt-in model).
9. CCTV System
We operate CCTV systems at selected locations for security purposes. Areas under surveillance are visibly marked. Recordings are retained for a maximum of 14 days. If audio is recorded, this has been legally assessed. Employees have been informed and provided written consent.
10. Email Marketing
We send newsletters only with your explicit consent (double opt-in). You can unsubscribe at any time using the link in each email. We do not collect marketing contacts without your permission.
11. Protection of Children
Our services are not intended for children under 15 years of age. If we process a child’s personal data, it is only with the explicit consent of a parent or legal guardian.
12. Data Security
We implement appropriate technical and organizational measures such as encryption, pseudonymization, access controls, employee training, confidentiality agreements, and data processing contracts.
13. Records of Processing Activities
In accordance with Article 30 of the GDPR, we maintain internal records of data processing activities. We can demonstrate the purpose, scope, legal basis and retention of each type of data processing.
14. Policy Updates
This privacy policy may be updated.
Last updated: 5 July 2025