Privacy Policy

The controller of your personal data is:

We collect personal data only when you voluntarily provide it to us through our contact form, gift voucher request form, or job application form. This may include:

• First and last name
• Phone number
• E-mail address
• Any message or note you choose to include

We do not collect sensitive personal data (e.g. health information, financial account details) through our website.

We process your personal data for the following purposes:

• Responding to enquiries — to answer your questions and confirm reservations (legal basis: legitimate interest / contract performance, Art. 6(1)(b) GDPR).
• Gift voucher processing — to prepare and deliver gift vouchers you request (legal basis: contract performance, Art. 6(1)(b) GDPR).
• Job applications — to evaluate your application for advertised positions (legal basis: legitimate interest, Art. 6(1)(f) GDPR).

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Enquiries and reservation data: up to 1 year after last contact.
• Gift voucher orders: up to 3 years for accounting purposes.
• Job applications: up to 6 months after the position is filled.

After the retention period, data is securely deleted.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only:

• With service providers who help us operate the website (e.g. hosting).
• When required by law or regulatory authorities.

All third-party processors are bound by appropriate data processing agreements.

As a data subject, you have the following rights under the General Data Protection Regulation (EU) 2016/679:

• Right of access (Art. 15) — request a copy of your personal data.
• Right to rectification (Art. 16) — request correction of inaccurate data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18) — request limited processing of your data.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest.

To exercise any of these rights, contact us at paradisemstudio@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Czech supervisory authority — the Office for Personal Data Protection (ÚOOÚ).

Our website uses cookies — small text files stored in your browser. We use the following categories of cookies:

You can manage or withdraw your cookie consent at any time by clearing your browser storage or adjusting browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our website is served over HTTPS.

We may update this Privacy Policy from time to time. The current version will always be available on this page with the date of the last update. We encourage you to review it periodically.