Protecting your privacy is our priority. This policy explains how Hotel Chateau Zámek Čejkovice collects, uses, and protects your personal data, particularly when submitting the inquiry form on our website.
1. Personal Data Controller
The controller of your personal data is the hotel operator:
Through the inquiry form on our website, we collect the following data:
Contact person's full name
Company name
Email address
Phone number
Information about the requested event (date, number of persons, service preferences)
Purpose of processing: We need this data solely to contact you back, respond to your inquiry, and prepare a non-binding price offer (i.e., negotiations leading to a contract).
3. Legal basis for processing
Processing your personal data is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
4. How long do we keep the data?
We keep the data provided in the inquiry for the time necessary to handle your request and subsequent communication. If the event does not take place (no contract is concluded), we will not use your data for marketing purposes without your explicit consent.
5. Who do we share the data with?
We do not sell inquiry data. Authorized hotel staff and technical service providers (hosting, email and IT management) access it to handle your request. Separate recipients involved in optional measurement services and videos are described in the cookies section below.
6. Your rights
In connection with the processing of personal data, you have the right to:
Request information about what personal data we process.
Request access to this data and have it updated or corrected.
Request the deletion of these personal data, or restriction of their processing.
Object to the processing.
Contact us or the Data Protection Authority in case of doubts regarding compliance with personal data processing obligations.
We use CookieYes to manage consent for optional cookies and similar technologies. Analytics, advertising measurement and embedded videos are disabled on a first visit. You can accept all, reject optional cookies or select categories. Rejecting optional cookies does not prevent an inquiry. Measurement consent is separate from processing the information you choose to provide in a form.
. Settings are also available in the website footer. Changes apply to future processing; withdrawal does not affect the lawfulness of earlier processing. Changing categories may refresh the page. Withdrawal does not automatically erase data already sent; contact us to exercise your rights.
Services and purposes
Necessary: form security
CEJKOVICE_FORMS is our website's session cookie. It contains a random server session identifier linking an opened form to verification of a token against forged submissions (CSRF). The session also confirms successful inquiry processing and prevents repeated measurement of the same confirmation. The cookie does not contain your name, email or inquiry text and is not used for advertising. It applies to the current host and path /, with HttpOnly, SameSite=Lax and, on HTTPS, Secure. It has no fixed expiry date and lasts for the browser session (session restoration may extend this). The server schedules inactive sessions for cleanup after 4 hours; this is not a guaranteed deletion deadline. The form cannot be submitted securely without this cookie.
Necessary: remembering CookieYes choices
cookieyes-consent stores your consent identifier and category choices, normally for up to 1 year; the CookieYes details show the current duration. The provider is CookieYes Limited, United Kingdom. The service processes technical information needed to show the banner and record choices, such as the time, domain, language and consent identifier. Network connections also disclose an IP address and browser information. CookieYes privacy policy.
Analytics: Google Analytics 4
After you allow the Analytics category, we use Google Analytics 4 for statistics about visits, page views and website use. Google receives technical device information, visited pages, events and approximate location derived from the connection; an IP address is used to process the request. Cookies _ga and _ga_* distinguish browsers and sessions, normally for up to 2 years after the last activity; browsers may shorten this. Analytics consent alone does not start the Google Ads destination. Our GA4 settings retain event data for 2 months and user data for 14 months. The user data retention period resets on further activity, so a returning visit may extend retention. These limits do not apply to most standard aggregated reports, which may be kept longer. Google Analytics data retention.
Advertisement: Google Ads and visit source
We use Google Ads to measure advertising effectiveness and conversions only after you allow the Advertisement category. Analytics and advertising measurement start separately according to your choices. We do not send advertising measurement without advertising consent, including measurement that does not use cookies. Google may process advertising click identifiers, page addresses, device information and conversion events. Depending on enhanced conversion settings, after advertising consent Google may also process a hashed email address from the form. Cookies _gcl_* link visits and conversions to advertising, typically for up to 90 days. After advertising consent, web_utm_source in sessionStorage remembers a visit source for the lifetime of the tab; we remove it on withdrawal. We record a conversion only after an inquiry is processed successfully.
Functional and Advertisement: YouTube
Embedded YouTube videos load only after both Functional and Advertisement categories are allowed. The website does not load remote video thumbnails before consent. Once loaded, Google/YouTube may receive an IP address, page address, browser and playback information and use cookies and local storage. YSC normally lasts for the session, VISITOR_INFO1_LIVE normally up to 6 months; security and preference cookies may last up to 13 months depending on the service. Names and durations may change; CookieYes lists detected entries and Google describes its cookies. We cannot erase storage on YouTube's domain from our domain; you can remove it in browser settings.
Recipients, transfers and legal basis
Google Ireland Limited, Ireland, provides Google Analytics, Google Ads and YouTube for EEA users. Google LLC, other group companies and their processors may also process data. Depending on the service, processing may take place outside the EEA, particularly in the United States, using applicable adequacy decisions where they cover the recipient, or standard contractual clauses. CookieYes uses technical providers and may also process data in other countries. See Google's privacy policy, Google's transfer safeguards and the CookieYes data processing agreement for recipients and safeguards.
Optional technologies are used on the basis of your consent under Article 6(1)(a) GDPR and the rules on storing and reading information on devices. Necessary consent management and form security support the service you request and website protection; related processing relies on our legitimate interests in security and documenting choices. Technically necessary cookies do not require consent. Cookie expiry is separate from retention of data already sent to a provider.
Templářské sklepy
zamekcejkovice
zamekcejkovice