Privacy Policy
Who we are
The personal data controller is Bobová dráha Prosek a.s., Prosecká 906/34b, Vysočany, 190 00 Prague 9, ID No.: 07343663, VAT No.: CZ07343663, file number B 23713 registered at the Municipal Court in Prague.
Website: https://www.bobovadraha.cz
What personal data we process and why
- Ticket purchase / order – name, surname, contact details, order and payment information. Processing is necessary for the conclusion and fulfillment of the contract and to comply with our legal obligations, especially accounting and tax obligations. The legal basis is Article 6(1)(b) and (c) GDPR.
- Contact form / email communication – data you fill in the contact form or send us by email, we use only to handle your inquiry. The legal basis is Article 6(1)(f) GDPR, i.e. our legitimate interest in communicating with customers and handling requests.
- Cookies and similar technologies – we use technical cookies for the basic functioning of the website and the shopping cart. Analytical and possibly marketing cookies are used only according to the settings you choose on the website in the cookie bar at the bottom. Consent is not required for technical cookies; for other cookies, consent is required according to the cookie and privacy rules.
- Traffic analytics – if enabled, we use it to measure traffic and improve the website. For analytical cookies, active user consent is practically required; consent can be withdrawn at any time in the cookie settings.
Who has access to the data
Only authorized persons of the controller and possibly our contractual processors who provide us with website operation, hosting, email, accounting, payment gateway, or analytical tools have access to the data. We do not disclose data to anyone else except as necessary for the operation of services and fulfillment of legal obligations.
Transfer to third countries
If we use tools whose operators may transfer data outside the EU/EEA, this only happens in compliance with GDPR conditions.
How long we keep the data
We keep personal data only for the time necessary for the purpose of processing. GDPR requires keeping data only for the necessary period and setting deadlines for their deletion or review.
- order and accounting document data: for the period specified by legal regulations for accounting and tax documents,
- communication data: for the duration of the inquiry handling and a reasonable period thereafter for follow-up communication,
- reservation system data: for the duration of the relationship and subsequently for the time necessary to protect legal claims and fulfill legal obligations,
- cookies: depending on the type of cookies and consent settings.
Your rights
You have the right to access data, rectify, erase, restrict processing, object to processing, data portability, and the right to withdraw consent if processing is based on consent. You also have the right to file a complaint with the supervisory authority.
How to contact us
For questions about personal data protection, contact us using the contact details provided on the website.
Comments
Comments are not allowed on the website.
Final provision
We may update these policies occasionally, especially if the services used, legal requirements, or the method of personal data processing change.