I. Basic Provisions
The controller of personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter ”GDPR”) is (Destination Management of Český Krumlov Region), ID No. 088 14 112 with registered office at Svornosti Square 2, CZ-381 01 Český Krumlov (hereinafter ”Controller”).
The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR") is DMO Český Krumlov Region, z.s. (Destination Management of the Český Krumlov Region), Company ID No. 088 14 112, with its registered office at Svornosti Square 2, CZ-381 01 Český Krumlov (hereinafter the "Controller").
The Controller's contact details are: dmo@ckrumlov.info
Personal data is any information that can be used to identify a specific natural person, either directly or indirectly. On this website, this primarily includes data that you provide to us yourself (such as your name, email address or information entered into forms) and technical data related to your use of the website (such as your IP address or information about the device you use).
The controller has not appointed a data protection officer.
II. Lawful reason for processing personal data
We process your personal data only when we have a lawful basis for doing so. This is most commonly:
- to provide a service you have requested or to perform a contract,
- to comply with our legal obligations,
- for our legitimate interests (for example, ensuring the secure operation of the website or improving our services),
- with your consent (for example, for sending newsletters or using marketing cookies).
We do not use automated decision-making or profiling that produces legal effects or similarly significant consequences for you. The chatbot is used solely to provide information published on this website and does not replace human decision-making.
III. Purpose of processing, categories, sources and recipients of personal data
| Legal basis for processing | Purpose of processing | Personal data processed | Source of personal data | Recipients of personal data |
|---|---|---|---|---|
| Legitimate interest | Ensuring the correct functionality of the website | Cookies (technical) | User account login | Web hosting services, subcontractors |
| Legitimate interest | Provision of direct marketing (especially for sending newsletters) | Client contact details (email, name) | Newsletter registration form | Mailing services, cloud storage, subcontractors |
| Legitimate interest | Routine traffic analysis, server error detection and prevention of fraud and server attacks | Third party cookies, web browsing data | User movement on the site, display of page with error | Google Analytics, web hosting services and possibly other analytical services |
| Legitimate interest | Operation and proper functioning of the chatbot, improvement of response quality and service security | Conversation content, technical identifiers (e.g. IP address, session ID, device and browser information), time of interaction | User during communication with the chatbot and automatically when using the service | Provider of the chatbot platform and hosting service providers |
| Consent | Targeted advertising (retargeting) | For a maximum of 13 months: third-party cookies, IP addresses, browser data and web browsing data | Displaying certain pages on the site | Advertising platforms enabling retargeting (AdWords, Sklik, Meta) |
| Consent | Obtaining demographic insights in traffic statistics | Third party cookies, demographic data (age, gender, interests, purchase interest and other categories) | DoubleClick cookie, Android advertising ID, iOS ID for advertisers | Google Analytics |
| Consent | Marketing and web promotion | Emails, names of potential customers, IP addresses and other technical identifiers | Newsletter registration form | Mailing services |
| Performance of the contract | Issuance and administration of the Krumlov+ Tourist Card and related services | First name, last name, email address, stay-related information, issued card identifier, and other data necessary for providing the service | Data provided by the user through the registration form or by the accommodation provider as part of the card issuance process | Sitour Česká republika s.r.o., hosting service provider, and other contracted data processors ensuring the operation of the system |
IV. Data retention period
We retain personal data only for as long as necessary to provide our services, comply with legal obligations, or protect our legitimate interests. The applicable retention period depends on the purpose of processing and is specified in the table above.
After the expiry of the retention period, the controller shall delete the personal data.
V. Cookies
Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognises them on each subsequent visit.
Cookies perform a variety of tasks, such as enabling you to navigate between websites efficiently, remembering your preferences and generally improving the user experience. They can also ensure that the advertisements displayed online are better tailored to your personality and interests.
We use the following cookies on the website:
- Necessary cookies: these are required for the operation of the website, for example, to allow you to log into secure areas of the site and other basic functionality of the site. This category of cookies cannot be disabled.
- Analytical/statistical cookies: these cookies allow us, for example, to recognise and track the number of visitors and to monitor how our visitors use the website. They help us to improve the way the site works, for example by enabling users to easily find what they are looking for. We only run these files with your prior consent.
- Advertising cookies: these are used to track preferences and allow you to see advertising and other content that best matches your interests and online behaviour. We only run these cookies with your prior consent.
Please note that third parties (including, for example, external service providers) may also use cookies and/or access data collected by cookies on the website.
The current list of cookies used on this website is available in the Cookie Settings. Information on how to manage cookies in your web browser can also be found in your browser's settings or help section.
Consent can be expressed by means of a check box contained in the so-called cookie bar. You can subsequently refuse cookies in your browser settings or set to use only some of them.
For more information on managing cookies in individual browsers, please visit the following links:
- Internet Explorer →
- Google Chrome →
- Firefox →
- Safari →
- Opera →
- Microsoft Edge →
VI. Chatbot for Information Search
An AI-powered chatbot is available on www.ckrumlov.info to help visitors find information published on this website and answer their questions. The service is provided by piXme s.r.o., a company established and operating within the European Union.
The chatbot is used solely to provide information published on this website and does not replace human decision-making. Please do not enter personal or other confidential information (such as your name, address, telephone number or email address) during your conversation. If you voluntarily provide such information, it will be processed in accordance with this Privacy Policy.
Chatbot conversations may be monitored to ensure the security and proper functioning of the service and to improve the quality of responses.
VII. Recipients of personal data (subcontractors of the controller)
Some of the services we use may process personal data outside the European Union or the European Economic Area. In such cases, personal data is transferred only in accordance with the GDPR and subject to appropriate safeguards to ensure its protection.
VIII. Your rights
You have the following rights in relation to the processing of your personal data:
- the right to access your personal data under Article 15 of the GDPR,
- the right to rectification of personal data pursuant to Article 16 GDPR, or restriction of processing pursuant to Article 18 GDPR,
- the right to erasure of personal data pursuant to Article 17 GDPR,
- the right to object to processing under Article 21 GDPR,
- the right to data portability pursuant to Article 20 GDPR,
- the right to withdraw consent to processing in writing or electronically to the address or email of the controller set out in Article III of these terms and conditions.
If you believe that your personal data is not being processed in accordance with applicable data protection laws, you may contact us or lodge a complaint with the competent supervisory authority.
IX. Personal data security conditions
The controller declares that it has taken all appropriate technical and organisational measures to safeguard personal data.
The controller declares that only persons authorised by it have access to the personal data.
X. Final Provisions
By submitting an order from the online order form or by filling in the enquiry form, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
You agree to these terms and conditions by ticking the consent box via the online form. By ticking the consent box, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
The Controller is entitled to amend these terms. The updated version of the Privacy Policy will be published on this website. Where applicable, the Controller will also send the updated Privacy Policy to the email address you have provided.
These terms entered into force on 10 October 2024 and were last updated on 27 July 2026.