Privacy Policy
1. Data controller
Tales of Prague, operated by Petra Balášová, IČO: 23103051, with registered office at Sportovní 2136/12, Moravská Ostrava, 702 00 Ostrava, is the data controller (správce osobních údajů) for personal data submitted through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Sb., on the Processing of Personal Data.
2. What data we collect
When you use the contact form, we collect your name, email address, tour interest (optional), and message content. We do not collect payment information through this website. We also process certain technical information, such as your IP address and browser information, through Cloudflare Turnstile for spam prevention.
3. Purpose and legal basis
Your data is processed to respond to your inquiry and, where applicable, to arrange and provide the requested guiding service. The legal basis is:
- Article 6(1)(b) GDPR — responding to booking inquiries and taking steps prior to entering into a contract
- Article 6(1)(f) GDPR — protecting the website against spam and abuse
4. Third parties and processors
Your data may be processed by the following providers on our behalf:
- Cloudflare — website hosting, Turnstile spam protection (which may process your IP address for verification purposes), and delivery of your inquiry email to our inbox
- Google (Gmail) — email inbox provider, where your inquiry is received and stored so we can read and reply to it
Where personal data is transferred outside the European Economic Area, appropriate safeguards are applied in accordance with Chapter V GDPR, such as the EU-US Data Privacy Framework (where applicable) or the European Commission's Standard Contractual Clauses.
5. Retention
Inquiry data is retained only as long as needed to respond to your request and, if a tour is booked, for the duration required by Czech accounting and tax law where applicable (typically up to 10 years for invoicing records). Contact inquiries that do not result in a booking are retained only for as long as reasonably necessary to respond to the inquiry.
6. Your rights
Under the GDPR, you have the right to access, rectify, or erase your data, to restrict or object to its processing, and to data portability. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). You may exercise any of these rights by contacting us at info@talesofprague.com.
7. Cookies
This site uses only strictly necessary cookies, set by Cloudflare Turnstile for spam and bot protection. No analytics or marketing cookies are currently used. This section will be updated if that changes.
8. Contact
For any questions about this privacy policy, contact info@talesofprague.com.
