Privacy Policy (GDPR)

Chalet Toksol — valid from 1 January 2024

1. Data Controller

The controller of your personal data is:
Toksol s.r.o.
Registered office: Vysočina, Czech Republic
E-mail: info@toksol.cz
Phone: +420 777 976 997

2. What Personal Data We Collect

When you make a reservation or contact us, we may collect the following personal data:

  • Name and surname
  • E-mail address
  • Phone number
  • Address (if required for invoicing)
  • Reservation details (dates, number of guests)
  • Payment information (for invoicing purposes only – we do not store full card details)

When you visit our website, we may also collect technical data (IP address, browser type, pages visited) through cookies and analytics tools for the purpose of improving our website.

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases:

  • Performance of a contract – processing necessary to fulfil your accommodation reservation and related services.
  • Legal obligation – compliance with accounting and tax regulations (e.g., keeping invoices for 5 years).
  • Legitimate interests – protection of property, security of the premises.
  • Consent – sending promotional newsletters or marketing communications (where you have explicitly opted in).

4. Data Retention

We retain your personal data only for as long as necessary for the purposes described above:

  • Reservation data: 3 years after the end of the stay.
  • Accounting documents: 5 years as required by law.
  • Marketing communications: until you withdraw your consent.

5. Data Sharing

We do not sell or rent your personal data to third parties. Your data may be shared with:

  • Online booking platform operators (e.g., Rezervace chalup) – solely for the purpose of processing your reservation.
  • Our accountant or tax advisor – to fulfil legal obligations.
  • Relevant authorities – if required by law.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – the right to obtain confirmation of whether we process your data and to receive a copy.
  • Right to rectification – the right to have inaccurate or incomplete data corrected.
  • Right to erasure – the right to request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
  • Right to restrict processing – the right to request that we limit how we use your data.
  • Right to data portability – the right to receive your data in a structured, machine-readable format.
  • Right to object – the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@toksol.cz. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority – the Czech Office for Personal Data Protection (www.uoou.cz).

7. Cookies

Our website uses cookies to ensure proper functionality and to analyse traffic. You can manage or disable cookies in your browser settings. Disabling certain cookies may affect the functionality of the website.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated version on our website with a new effective date.

This Privacy Policy is effective from 1 January 2024.