Privacy Policy

1. Data controller

The controller of personal data is Tailor Group s.r.o., with its registered office at Chopinova 498/8, 353 01 Mariánské Lázně, Czech Republic, Company ID (IČO): 09256385, VAT ID (DIČ): CZ09256385 (the “controller”).

Contact email for personal data protection matters: hotelmanager@tailorgroup.cz. This policy applies in particular to visitors to www.villamatylda.cz, prospective customers and hotel guests.

2. Personal data we process

Depending on the nature of the contact and services provided, we may process identification and contact details (first and last name, address, telephone number and email), reservation and stay details, billing and payment information, correspondence and technical website usage data (such as IP addresses and cookie information).

Health data, where necessary for the provision of healthcare services, are subject to special rules and appropriate safeguards; specific information must also be provided in connection with the relevant healthcare service.

3. Purposes and legal bases

Handling enquiries and reservations, and entering into and performing contracts for accommodation or other services: Article 6(1)(b) GDPR.

Compliance with legal obligations, particularly accounting, taxation and guest registration: Article 6(1)(c) GDPR.

Protection of legal claims, security and necessary operational communication: legitimate interests under Article 6(1)(f) GDPR, taking into account the rights of individuals.

Sending marketing communications: depending on the circumstances, on the basis of consent or a statutory exception for our own similar services offered to existing customers, always with an easy opt-out.

Optional analytics and marketing cookies: on the basis of prior consent where required by law.

4. Recipients of personal data

To the extent necessary, data may be disclosed to IT and hosting providers, booking and hotel management system providers, payment service providers, accountants and other contracted processors, or to competent public authorities where required by law.

Where data are transferred outside the European Economic Area, we will ensure appropriate legal transfer mechanisms and safeguards under the GDPR.

5. Retention periods

We retain data only for as long as necessary for the relevant purpose or as required by law. Reservation and contract data may be kept for the duration of the contractual relationship and thereafter for the period necessary to protect legal claims. Accounting and tax documents are retained for the applicable statutory periods.

Data processed on the basis of consent are retained until consent is withdrawn or the stated period expires; withdrawal does not affect the lawfulness of prior processing. Specific periods must reflect the systems actually used and internal policies.

6. Your rights

You have the right to request access to, rectification or erasure of your personal data (where statutory conditions are met), restriction of processing and data portability in the cases provided for by the GDPR. You may object to processing based on legitimate interests and may object to direct marketing at any time. Consent may be withdrawn at any time.

Send your requests to hotelmanager@tailorgroup.cz. You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, www.uoou.gov.cz).

7. Cookies and analytics tools

The website may use essential cookies for its operation and analytics or marketing cookies, for example in connection with Google Analytics, Google Ads or Sklik, only if those services are actually deployed and in compliance with applicable law.

Essential cookies may be stored without consent. Other cookies requiring consent must not be activated before consent is given. Visitors must be able to reject optional cookies and subsequently change or withdraw consent through the website’s cookie settings. Simply continuing to browse does not constitute consent.

Details of individual cookies, their providers and expiry periods should be included in an up-to-date cookie list available on the website.

8. Security and incidents

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. We assess personal data breaches and notify the supervisory authority or affected individuals in the circumstances and within the time limits required by the GDPR.

9. Updates to this policy

This policy may be updated from time to time, particularly following changes to systems, services or legal requirements. The current version is published at www.villamatylda.cz.