Privacy policy

Draft for legal review. Last updated: 09.11.2026.

1. Who processes your data

The personal data controller is Bílá duha s.r.o., IČO 28506626, U staré cihelny 2879/5, Žižkov, 130 00 Praha 3, Czech Republic (“we”). For data protection questions, write to info@bohemiapragtour.eu.

2. What data we collect and why

• Tour booking: name, e-mail, phone number, selected tour, date and number of people. We need them to process your booking, issue an invoice and contact you about the trip. Legal basis — performance of a contract (Art. 6(1)(b) GDPR).
• Consent confirmation: the time the form was sent, the consent text and an anonymised IP address. We need them to confirm that you have read the terms. Legal basis — legitimate interest (Art. 6(1)(f) GDPR).
• Newsletter: e-mail — only if you ticked the corresponding box. Legal basis — consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Cookies and analytics: only after your consent in the cookie banner. See the Cookie policy for details.

3. How long we keep data

• Unpaid booking requests — 12 months, then deleted automatically.
• Paid bookings and invoices — 10 years, as required by Czech accounting law.
• Newsletter data — until consent is withdrawn.

4. Who we share data with

The website hosting provider (ACTIVE 24, s.r.o., Czech Republic), the e-mail service, as well as carriers, hotels and partners — only to the extent necessary to organise your trip. Data is never sold to third parties.

5. Your rights

You can request access to your data, its correction, deletion, restriction of processing and portability, and you can object to processing. To do so, write to info@bohemiapragtour.eu. You also have the right to lodge a complaint with the Úřad pro ochranu osobních údajů (Office for Personal Data Protection) (uoou.gov.cz).