Privacy Policy

Last updated: June 2026

1. Data Controller

GET-A-TOUR s.r.o.
Záhřebská 562/41, Vinohrady (Praha 2), 120 00 Praha, Czech Republic
IČO: 21316350
Email: [email protected]

2. What Data We Collect

When you submit a booking request or contact form, we collect:

  • Full name
  • Email address
  • Phone number
  • Preferred tour date and number of persons
  • Any additional information you provide in the message field
  • IP address and approximate location (country/city) for security purposes
3. How We Use Your Data

Your data is used exclusively to:

  • Process and confirm your tour booking
  • Communicate with you about your tour
  • Send you a follow-up request for a review (once, after the tour)
  • Comply with legal obligations

We do not sell, share, or rent your personal data to third parties.

4. Legal Basis

We process your data on the basis of:

  • Contract performance — to fulfil your booking request (Art. 6(1)(b) GDPR)
  • Legitimate interest — to send a one-time review request after your tour (Art. 6(1)(f) GDPR)
  • Legal obligation — to comply with applicable Czech and EU law (Art. 6(1)(c) GDPR)
5. Data Retention

We retain your personal data for up to 3 years after your last interaction with us, unless a longer retention period is required by law (e.g. tax records: 10 years).

6. Your Rights

Under GDPR, you have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Restriction — ask us to limit how we use your data
  • Objection — object to processing based on legitimate interest
  • Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, please email [email protected]. We will respond within 30 days.

7. Cookies

Our website uses only functional cookies necessary for the site to operate (session, CSRF protection). We do not use advertising or tracking cookies.

8. Security

Your data is stored on secure servers protected by SSL encryption. Access is restricted to authorised personnel only.

9. Supervisory Authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Czech data protection authority:
Úřad pro ochranu osobních údajů (UOOU)
www.uoou.cz

10. Changes

We may update this Privacy Policy from time to time. The current version is always available at get-a-tour.com/privacy.