Privacy policy

Data controller

The data controller is Dáme After s.r.o., company ID (IČO) 17692521, registered office at Belgická 280/1, 120 00 Praha 2, Czech Republic, entered in the Commercial Register kept by the Municipal Court in Prague, section C, insert 375082. The company operates the websites damerozlucku.cz (Dáme Rozlučku) and partyinprague.com (Party in Prague).

For any data protection matter contact us at info@damerozlucku.cz or at the registered office. We have not appointed a Data Protection Officer, as our processing does not require one to be appointed.

What data we process

When you submit an enquiry through the form we process the data you enter yourself, plus a few technical details needed to run and protect the form:

• first and last name,
• e-mail address,
• phone number,
• requested event date,
• number of people,
• city,
• the experiences you selected in the cart, including their number and the indicative total price,
• the type of party (stag, hen, friends or corporate),
• the page you submitted the enquiry from and marketing campaign parameters (UTM) if you arrived via a campaign,
• the message text and any other details you choose to include,
• a pseudonymised fingerprint of your IP address (ip_hash) and browser information (user_agent) – to protect the form against abuse and spam.

To keep the site running smoothly we also collect technical error reports from the browser (error type, message, page address, browser type and the last steps before the error). These reports contain no personal data – before storing them the server removes e-mails, phone numbers, payment details and other sensitive strings. We keep only a pseudonymised fingerprint of the IP address alongside them.

If you consent to analytics and marketing cookies, usage data is also processed through Google Analytics 4 and Meta Pixel. Details are in the cookie policy.

Purpose and legal basis

• Handling your enquiry and preparing an offer (contact, checking availability with partners, communication) – the legal basis is performance of a contract, or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Protecting the form against abuse and spam (ip_hash, user_agent, submission rate limiting) and collecting error reports to run the site – the legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).
• Evaluating our marketing campaigns by the page you sent the enquiry from and the campaign parameters (UTM) – the legal basis is our legitimate interest in direct marketing and developing our services (Art. 6(1)(f) GDPR).
• Analytics and marketing (Google Analytics 4, Meta Pixel) – only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Compliance with legal obligations, such as accounting and tax duties, where a contract is concluded (Art. 6(1)(c) GDPR).

Submitting an enquiry is non-binding and is not an order or a payment. Providing contact details is voluntary, but without them we cannot prepare an offer for you.

Retention period

• Enquiries (business data of the enquiry): usually 3 years from the last communication, after which we delete or anonymise them based on our records.
• The pseudonymised IP fingerprint (ip_hash) and browser data (user_agent) of enquiries: 90 days, after which we remove them automatically.
• Submission rate-limit records: 1 day.
• Technical error reports: 30 days if unresolved, 90 days from resolution once resolved.
• Where a contract is concluded, we keep accounting and tax documents for the period required by law (usually 10 years for tax documents).

Recipients and processors

We do not share personal data with third parties for their own commercial purposes. If you order an experience delivered by a partner or supplier of the provider, we pass on to them, to the extent necessary, the data needed to prepare and deliver the experience (for example name, date, number of people and contact details). For processing we further use trusted providers who act as our processors:

• Supabase – the database where enquiries are stored (EU region, Frankfurt).
• Resend – sending e-mails (your enquiry confirmation and notifications to our team).
• Vercel – hosting and running the website.
• Google (Google Analytics 4) and Meta (Meta Pixel) – analytics and marketing, only with your consent.

Some providers may process data outside the European Economic Area (e.g. in the USA). In that case the transfer is safeguarded under appropriate GDPR guarantees, in particular the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified under it. We may change providers over time; we will share the current list on request.

Your rights

In relation to your personal data you have the right to:

• access your data and obtain a copy,
• have inaccurate or incomplete data corrected,
• have your data erased (the "right to be forgotten") where processing is no longer justified,
• restrict processing,
• data portability for the data you provided to us,
• object to processing based on legitimate interest,
• withdraw any consent at any time (with effect for the future),
• lodge a complaint with a supervisory authority.

To exercise your rights, write to info@damerozlucku.cz. The supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

Automated decision-making and children

We do not carry out automated decision-making or profiling with legal effects on you. The anti-spam protection and rate limiting only serve to protect the form. Selected experiences are intended for people aged 18 and over and are labelled 18+; you confirm your age before they are shown.

Cookies

How we use cookies and other browser storage is described in a separate cookie policy. You can change your consent to analytics and marketing cookies at any time via the "Cookie settings" link in the site footer.

Language versions

Besides Czech, this policy is published in other languages. Translations are for information only; in case of any conflict between language versions, the Czech version prevails.