This policy explains how we process personal data when you use this website and order a room decoration. The controller is the operator named on this page. You can contact us about privacy at the email address shown.

1. What data we process

Order details: decoration, extras, hotel name, check-in date and time, name on the booking, reservation number, greeting card text and special requests.
Contact details: your name, email address and WhatsApp number.
Communication: messages you send us on WhatsApp or by email.
Technical data: basic information your browser sends (for example IP address) needed to deliver the website, and — only with your consent — analytics data (see the cookie policy).

Please do not include sensitive data (for example health information) in free-text fields, except allergy information you want us to take into account.

2. Why we process it and on what legal basis

To handle your request and order — preparing an offer, confirming details, arranging access with the hotel and decorating the room (Art. 6(1)(b) GDPR — steps before entering into a contract and performance of the contract).
To meet legal obligations — for example accounting and tax records (Art. 6(1)(c) GDPR).
To handle complaints and protect our rights (Art. 6(1)(f) GDPR — legitimate interest).
Website analytics — only if you allow it in the cookie banner (Art. 6(1)(a) GDPR — consent).

3. Who receives your data

We share data only as far as necessary:

Your hotel — the name on the booking, dates and, if provided, the reservation number, so the hotel can let us into the room.
Service providers (processors): Web3Forms (delivery of the order form to our email), our email provider, WhatsApp / Meta (communication), our payment provider (payment link), Cloudflare (website hosting) and Google (analytics, only with your consent).

Some of these providers may process data outside the European Economic Area. In such cases transfers are based on an adequacy decision (for example the EU–US Data Privacy Framework) or standard contractual clauses.

4. How long we keep data

Requests that do not lead to an order: up to 12 months.
Order data: for the duration of the contract and then as long as required by law — accounting documents are kept for 10 years.
Analytics data: according to the cookie policy.

5. Your rights

You have the right to access your data, to rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time — for analytics via “Cookie settings” in the footer. To exercise your rights, contact us by email.

You also have the right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

6. Security

We use encrypted connections (HTTPS) and give access to your data only to people who need it to handle your order.

7. Changes

We may update this policy. The current version is always published on this page.

Privacy policy