This policy describes how Caseo stay s.r.o., IČO 23536977, DIČ CZ23536977, with registered office at Příčná 1892/4, Nové Město, 110 00 Praha, as the data controller, processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.
1. Controller and contact
- Controller: Caseo stay s.r.o., Reg. No. 23536977
- Registered office: Příčná 1892/4, Nové Město, 110 00 Praha
- Email: jsme@caseo.cz
- Phone: +420 777 907 577
2. Data we process
- Identification and contact data (name, email, phone, address).
- Booking and stay data (dates, property, number of guests, payment data processed by the payment gateway).
- Communication with us (emails, contact-form messages).
- Technical data (IP address, cookies and device data) to the extent described in the Cookie Policy.
3. Purposes and legal basis
- Conclusion and performance of the accommodation contract (Art. 6(1)(b) GDPR).
- Compliance with legal obligations, e.g. accounting and tax (Art. 6(1)(c)).
- Legitimate interest — website security, handling complaints and disputes (Art. 6(1)(f)).
- Consent — third-party functional cookies and any marketing communications (Art. 6(1)(a)).
4. Retention period
We keep data for as long as necessary for the given purpose: contractual and tax data for the period required by law (typically up to 10 years for tax documents), communication data usually 3 years, and data processed on the basis of consent until that consent is withdrawn.
5. Recipients
- The booking and payment system provider (GuestReady / RentalReady).
- The map provider (Mapbox) when displaying property locations.
- IT, hosting and storage providers (e.g. Vercel, database).
- Accounting, tax and legal advisers and public authorities where required by law.
6. Transfers outside the EU
Some providers may process data outside the EU/EEA. In that case we ensure appropriate safeguards (the Commission's standard contractual clauses or an adequacy decision).
7. Your rights
- The right to access your data and obtain a copy.
- The right to rectification and erasure (“to be forgotten”).
- The right to restriction of processing and to data portability.
- The right to object and to withdraw consent at any time.
- The right to lodge a complaint with the Czech Data Protection Authority (www.uoou.cz).
8. Security
We take appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse (encrypted connections, access control, backups).
9. Cookies
Details of cookies and consent management are provided in the separate Cookie Policy.
10. Changes
We may update this policy. The current version is always available on the website with the date of the last update.
This document is a template; we recommend a review by a data protection specialist before publication.