Effective date: 1 January 2026

Introduction

This Privacy Policy explains how personal data of website visitors and accommodation guests of Moser Apartment Carlsbad is processed.

Data Controller

Controller: Bc. Miroslav Štechr
Registered address: Za Mlýnem 1733, 253 01 Hostivice, Czech Republic
Company ID: 88056465
Email: info@moserapartment.cz

Scope of processed personal data

We process in particular the following categories of personal data:

• identification data (e.g., name and surname),
• contact data (e.g., email address, phone number),
• stay-related data (e.g., stay dates, number of guests, booking reference),
• technical data related to website usage (e.g., IP address, device type, browser, system and security logs).

Purpose and legal basis of processing

a) Communication and handling requests

We process personal data for communication, responding to enquiries and handling requests.
Legal basis: legitimate interest or performance of a contract.
Retention period: for as long as necessary to handle communication and afterwards for a reasonable period.

b) Bookings, stay and service provision

We process personal data to accept and manage bookings, provide accommodation and related services.
Legal basis: performance of a contract.
Retention period: as long as necessary to perform the contract and subsequently as required by law and/or for the protection of legal claims.

c) Compliance with legal obligations

In connection with providing accommodation services, personal data may also be processed for the purpose of fulfilling legal obligations (e.g., legal obligation to register accommodated guests).
Legal basis: legal obligation.
Retention period: according to statutory retention periods.

d) Website operation and security

Technical data may be processed for security purposes, protection against misuse, fraud prevention and ensuring stable website operation.
Legal basis: legitimate interest.
Retention period: usually short-term, depending on the configuration of operational and security logs.

Recipients of personal data

Personal data may be disclosed, to the necessary extent, to the following categories of recipients:

• IT and hosting service providers,
• booking platform providers,
• service providers related to accommodation operations and guest communication,
• analytics tool providers (only to the extent consent for cookies has been granted).

Transfer of personal data outside the EU/EEA

In some cases, personal data may be transferred outside the EU/EEA, in particular when using international service providers. In such cases, appropriate safeguards are applied in accordance with applicable legal regulations.

Data subject rights

Data subjects have the following rights in particular:

• right of access,
• right to rectification,
• right to erasure (where legally applicable),
• right to restriction of processing,
• right to data portability (where applicable),
• right to object to processing based on legitimate interest,
• right to withdraw consent (if processing is based on consent),
• right to lodge a complaint with a supervisory authority.

Supervisory authority: Office for Personal Data Protection (UOOU), Czech Republic.

Cookies

This website uses cookies and similar technologies. Some cookies are necessary for the proper functioning of the website, while others are used only based on consent (e.g., analytics cookies).

Cookie Declaration

Below you may find an automatically generated overview of the cookies used (if a cookie banner / third-party tool is active on the website).

Changes to this policy

The controller reserves the right to update this policy at any time. The current version is always available on this page.