PRIVACY POLICY AND COOKIE POLICY

Effective from: February 12, 2026

This Privacy Policy explains how Mlýn Cibotín s.r.o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legislation of the Czech Republic.

1. Data Controller

The data controller is:

Company ID: 08665311

Tax ID: CZ08665311

Registered office: Cibotín 17, 583 01 Česká Bělá

Data box: 57tgtzp

Email: info@mlyncibotin.cz

2. What Personal Data We Process

a) Contact Information

  • first and last name
  • email address
  • phone number
  • message content

We obtain this data through the contact form or email communication.

b) Reservation Data (Rezeo)

For online reservations, we use an external Rezeo system.

The following data may be processed as part of a reservation:

  • first and last name
  • email
  • phone
  • reservation date and time
  • reservation notes

This data is used solely for processing the reservation and communicating with the client.

c) Technical and Analytical Data

When visiting the website, the following may be automatically processed:

  • IP address
  • device type
  • operating system
  • browser type and version
  • pages visited
  • time spent on the website

This data is obtained primarily through cookies and Google Analytics service.

3. Processing Purposes

We process personal data for the purpose of:

  • handling inquiries
  • confirming and managing reservations
  • communicating with customers
  • improving website quality
  • analyzing website traffic
  • fulfilling legal obligations
  • protecting the legitimate interests of the controller

4. Legal Basis for Processing

We process personal data on the basis of:

  • contract performance (service reservation)
  • consent (e.g., analytical cookies)
  • legitimate interest (website security, basic analytics)
  • fulfilling legal obligations

5. Cookies

We use cookies on our website.

Essential Cookies

These ensure the proper functioning of the website and cannot be disabled.

Analytical Cookies

We use Google Analytics 4 service, which helps us analyze website traffic and improve its content.

Google may process:

  • IP address (in anonymized form)
  • website usage data
  • device information

Analytical cookies are stored only with your consent.

You can change or withdraw your consent at any time through the cookie banner or browser settings.

6. External Processors

Your personal data may be processed by the following entities:

  • website hosting provider
  • Rezeo (reservation system)
  • Sanity.io (CMS system)
  • Google (Google Analytics)
  • IT providers
  • accounting and tax advisors

All processors have entered into data processing agreements pursuant to Article 28 GDPR or provide appropriate legal guarantees.

7. International Data Transfers

Some services (e.g., Google or Sanity) may transfer data outside the European Economic Area.

In such cases, the transfer occurs on the basis of:

  • EU standard contractual clauses
  • other appropriate guarantees under GDPR

8. Data Retention Period

  • reservation data – for the duration of the contractual relationship
  • contact form data – maximum 2 years
  • accounting documents – according to legal deadlines
  • analytical data – according to Google Analytics settings

9. Your Rights

You have the right to:

  • access to personal data
  • correction
  • erasure
  • restriction of processing
  • data portability
  • object
  • withdraw consent

You can exercise your rights by email at: info@mlyncibotin.cz

You also have the right to file a complaint with the Office for Personal Data Protection.

10. Personal Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

11. Policy Changes

These policies may be updated. The current version is always published on the company's website.