Privacy Policy
1. Data controller
The controller of your personal data is Václav Halm, Company ID (IČO) 68611404, registered office at Brněnská 447/1, 693 01 Hustopeče, Czech Republic — the operator of the U Halmů guesthouse and restaurant (hereinafter the “operator” or “we”).
Contact for enquiries and the exercise of your rights: halm@halm.cz, tel. +420 519 413 921 (reception).
We have not appointed a Data Protection Officer (DPO) — given the scope of our activities, this is not a legal obligation.
2. What data we process, for what purpose and on what legal basis
Accommodation and guest records. Data: first name and surname, date of birth, address, length of stay, document number and type, visa and purpose of stay where applicable, contact details. Purpose: providing accommodation services and meeting statutory obligations (the house and registration book). Legal basis: performance of a contract (Article 6(1)(b) of the Regulation) and compliance with a legal obligation (Article 6(1)(c)) under Act No. 326/1999 Coll., on the Residence of Foreign Nationals, and Act No. 565/1990 Coll., on Local Charges.
Online accommodation booking. Accommodation bookings are processed through the Previo booking system. The data entered during the booking process is processed by Previo as our data processor. Legal basis: performance of a contract (Article 6(1)(b)).
Email and telephone communication. If you contact us by email or telephone, we process the data you provide to us (name, email or phone number, and the content of your message). Purpose: handling your enquiry or request. Legal basis: our legitimate interest in answering your enquiry, or steps prior to entering into a contract (Article 6(1)(f) or (b) respectively). Our website has no contact form — communication takes place directly by email or telephone.
Website operation and security. When you visit the website, data such as your IP address and browser information may be processed in technical logs. Legal basis: legitimate interest in ensuring the operation and security of the website (Article 6(1)(f)).
Cookies and embedded third-party content. Our website does not set tracking cookies of its own. Some third-party content (the Previo booking system and Google Maps) loads only after you click; until then, no cookies from these services are stored on your device. For details, see our Cookie Policy.
3. Recipients and data processors
We share personal data only to the extent necessary with the following recipients:
- Previo — booking system (accommodation reservations),
- Cloudflare — website hosting and content delivery,
- Google — map service (only after you choose to load it),
- external accounting provider — bookkeeping services,
- public authorities, where required by applicable law.
We have data processing agreements in place with our processors. We do not share guest data with any other parties for marketing purposes.
4. Transfers to countries outside the EU
Some processors (in particular Google and Cloudflare) may process data on servers outside the European Union, e.g. in the USA. Any such transfer takes place on the basis of appropriate safeguards under the Regulation (standard contractual clauses, or an adequacy decision where applicable).
5. How long we keep data
- Statutory guest records (house and registration book): 6 years under Act No. 326/1999 Coll. and Act No. 565/1990 Coll.
- Accounting and tax documents: for the period set by accounting and tax regulations.
- Data from email or telephone communication: for the time needed to handle the enquiry and a reasonable period thereafter.
After the applicable retention period has expired, the data is securely deleted or anonymised. Data that we are required to retain by law may only be deleted once the applicable statutory retention period has elapsed.
6. Your rights
In relation to your personal data, you have the right:
- to access your data and obtain a copy of it,
- to rectification of inaccurate data,
- to erasure (the “right to be forgotten”) — except for data we must keep by law,
- to restriction of processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw consent you have given (this does not affect the lawfulness of processing prior to withdrawal).
You can exercise your rights using the contact details provided in Section 1. You also have the right to lodge a complaint with the competent supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, uoou.gov.cz.
7. Cookies
Information about cookies and embedded third-party content can be found in our separate Cookie Policy.
8. Changes to this policy
We may update this policy from time to time. The current version is always available on our website.
Effective from: 14 June 2026.