Effective from: 2 September 2026 Last updated: 12 October 2026
1. Who we are
The operator of the website tydenvkrasu.cz (the “website”) and the data controller is Josef Kopřiva, contact e-mail [email protected].
I run the website as a private individual, not as a business. It is not an e-shop and I do not sell anything directly through the website.
This document describes what personal data I process about you as a visitor to the website, why, for how long, and what rights you have, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data (the Czech act implementing data protection law).
2. What data I process and why
2.1 Subscribing to the e-mail itinerary and e-mails from the website
If you request a PDF itinerary from the website in exchange for your e-mail address, I process:
- your e-mail address,
- the date and time of your sign-up and confirmation of subscription,
- the language version of the website you signed up from,
- information about opening the e-mails and clicking on links within them that I send you (a standard feature of the e-mail tool, not tracking beyond this purpose).
Legal basis: your consent (Article 6(1)(a) GDPR). Consent is confirmed via double opt-in, i.e. by clicking a confirmation link in the e-mail. Without this confirmation, your e-mail will not be added to the list.
Purpose: sending the promised PDF itinerary, a short series of welcome e-mails with travel tips (5 e-mails over the first 11 days), and then occasional e-mails with related content (website news, changes to prices and opening hours, events in the Moravian Karst).
Who helps with this: the e-mail list is managed and e-mails are sent by Medicum s.r.o. (Company ID 21783314, Trnkova 624/58, 628 00 Brno) as my processor under a data processing agreement. Medicum uses the e-mail service Boldem (Webkomplet, s.r.o., Czech Republic) for this purpose, which stores data on servers within the EU. Medicum s.r.o. does not use your data for any other purpose and does not send you its own marketing communications.
Unsubscribing: you can unsubscribe at any time via the link at the bottom of each e-mail, or by writing to [email protected].
2.2 Traffic measurement
The website uses Cloudflare Web Analytics (Cloudflare, Inc.). This is a simple measurement of the number of visits and the most-read pages. It does not use cookies, does not store anything in your browser, and does not track you across websites. It processes technical data about the visit (page visited, referral source, browser and device type, approximate country), and I only see the results as aggregate figures.
Legal basis: my legitimate interest (Article 6(1)(f) GDPR) in knowing which articles help readers and which need improvement.
The website does not use Google Analytics, Facebook Pixel, or any other advertising tracking tools.
2.3 Cookies and similar technologies
The website uses two categories:
Strictly necessary: required for the basic functioning of the website (e.g. remembering the language version and your choice in the cookie banner). These do not require consent.
Affiliate/marketing: the website includes an interactive accommodation map from the service Stay22, through which you can access offers on Booking.com, Airbnb, and other platforms. When you use the map, Stay22 stores identifiers in your browser that allow me to earn a commission if you book accommodation through the map. The map will not load until you give consent in the cookie banner.
You can change your consent at any time via the Cookie Settings link in the website footer.
2.4 Affiliate links
Some links on the website are affiliate links. If you book or buy something through them, I earn a commission at no extra cost to you:
- links to Booking.com go through the affiliate network CJ (Commission Junction). After clicking, you are briefly redirected through CJ’s server, which records the click so that the commission can be attributed,
- links to GetYourGuide (guided tours, mainly in the English, German, and Polish versions of the website) include my affiliate code.
These services are only activated once you click the link and leave the website. They do not store anything on the website itself. How they handle your data is governed by their own privacy policies. I only receive aggregate data on clicks and commissions from them, not your name or contact details.
3. Who I share data with
I do not sell your personal data to anyone. It is only handled by the following processors, and only to the extent necessary to provide the services described:
| Processor | Purpose | Location |
|---|---|---|
| Medicum s.r.o. | managing the e-mail list and sending e-mails | Czech Republic (EU) |
| Boldem (Webkomplet, s.r.o.) | the e-mail service used by Medicum | Czech Republic (EU) |
| Cloudflare, Inc. | website hosting, protection against attacks, cookie-free traffic measurement | USA, transfer covered by the EU–US Data Privacy Framework and EU Standard Contractual Clauses |
| Stay22 | affiliate accommodation map (only after your consent) | Canada, a country with an EU adequacy decision |
| OpenStreetMap Foundation | map data for the map on the Moravian Karst Map page. When the map is displayed, your browser downloads map tiles from their server, which can therefore see your IP address. No cookies are stored. | United Kingdom, a country with an EU adequacy decision |
Other than these processors, I do not share your data with anyone, except where required to do so by law (e.g. at the request of a public authority).
4. How long I keep data
- E-mail on the subscriber list: for as long as your consent lasts, i.e. until you unsubscribe. Once a year I review the list and delete addresses that have not opened any e-mail for 3 years.
- Traffic data: only in aggregate form within the Cloudflare Web Analytics tool.
- Cookies and affiliate identifiers: according to the settings of the relevant service, typically weeks to months. The exact duration can be found in the cookie banner.
5. Your rights
In connection with the processing of personal data, you have the right to:
- access to the data I process about you,
- rectification of inaccurate data,
- erasure (“the right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz) or with the supervisory authority in the EU country where you live, if you believe that the processing infringes the GDPR. Ideally, after first trying to resolve the issue with me.
You may exercise any of these rights by e-mail at [email protected]. I will respond within 30 days at the latest.
6. Security
The website runs on the secure HTTPS protocol. Access to the e-mail list is limited to me and the authorised staff of my processor (Medicum s.r.o.), who are bound by confidentiality obligations, as well as the Boldem e-mail service within the scope of its own security measures.
7. Changes to this policy
I update this policy when the law changes or when I add a new service to the website. The current version is always available on this page, with the date of the last update shown above.
Have a question about the protection of your data? Write to [email protected].