Privacy policy

The data controller is Jiří Honců, who runs the ski rental and service shop at Valteřická 1436, 543 01 Vrchlabí, Czech Republic.

When you fill in the booking form we process your first name and surname, e-mail, phone number, rental dates and the details we need to prepare your gear: height, weight, shoe size and skiing experience. Without them we cannot choose ski length or set the bindings.

The legal basis is steps taken before entering into a contract under Article 6(1)(b) GDPR. We keep the data for four years after our last contact and then delete it.

We do not sell personal data or pass it on for anyone else’s marketing. We use these processors to run the website:

• Vercel Inc. — hosting the website and holding bookings temporarily.
• Google Ireland Ltd. — the spreadsheet bookings are written to, so the shop has them in one place, and daily backups of the website (kept for 30 days).
• Resend, Inc. — sending confirmation e-mails.
• Cloudflare, Inc. — protecting the form from automated spam (Turnstile).

Cookies are small files the site stores in your browser. Essential cookies keep the site working and cannot be switched off. Analytics and advertising cookies measure visits and advertising performance, and they only start once you allow them in the consent banner.

We use Google Analytics and Google Ads for measurement, with consent handled by CookieYes. You can change your choice at any time through “Cookie settings” in the footer, or by clearing cookies in your browser.

Under the GDPR you have the right to:

• know what data we hold about you and get access to it,
• have inaccurate data corrected,
• ask for erasure or restriction of processing,
• receive your data in a machine-readable format,
• object to the processing.

If you believe we are not handling your data properly, talk to us first — most things can be sorted out straight away. You may also contact the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7.

We have not appointed a data protection officer, and we do not carry out automated decision-making or profiling.