Privacy Policy (GDPR)

§ 1. General Provisions

This Privacy Policy applies to users of the website located at www.ck-astra.cz. The data controller is ASTRA SPA s.r.o., with its registered office at Moravská 2093/2A, 360 01 Karlovy Vary, ID No. 26355680, registered in the Commercial Register maintained by the Regional Court in Plzeň. For questions regarding personal data protection, you may contact us at the email address astra8@ck-astra.cz. ASTRA SPA s.r.o. is not required to appoint a Data Protection Officer (DPO) pursuant to Article 37 of the GDPR.

§ 2. Purposes and Legal Basis for the Processing of Personal Data

We process your personal data only to the extent necessary and for the following purposes:

  • Performance of the accommodation contract and provision of ancillary services (Article 6(1)(b) of the GDPR),
  • Compliance with legal obligations, in particular the reporting obligation under the Foreign Police Act (Article 6(1)(c) of the GDPR),
  • Handling inquiries and complaints (Article 6(1)(f) of the GDPR),
  • Direct marketing and sending commercial communications (Article 6(1)(a) or (f) of the GDPR),
  • Improving service quality and conducting satisfaction surveys (Article 6(1)(f) of the GDPR),
  • Protection of property and guest safety, including the use of a video surveillance system (Article 6(1)(f) of the GDPR).

§ 3. Scope of data processed

We process the following personal data in particular:

  • first name, last name, date of birth, address, nationality, ID number,
  • contact information (email, phone number),
  • hotel stay details (length of stay, room type, requests, payments),
  • information necessary to comply with legal obligations (registration of foreign nationals, taxes and fees),
  • communication data (inquiries, complaints, reviews).

§ 4. Recipients of Personal Data

Your personal data may be disclosed to:

  • public authorities (including the Czech Republic’s Foreign Police),
  • IT and booking system providers (e.g., Booking.com, Google, TripAdvisor),
  • accounting and tax advisors,
  • marketing partners (e.g., Google, Meta, Facebook Pixel) with your consent.

§ 5. Transfer of personal data outside the EU

When using services such as Google Analytics, Meta (Facebook Pixel), or TripAdvisor, personal data may be transferred outside the European Union. Such transfers are made only on the basis of Standard Contractual Clauses approved by the European Commission or where an adequate level of protection is ensured in accordance with Article 46 of the GDPR.

§ 6. Data retention period

We store personal data:

  • for the duration of the contractual relationship and for 6 years after its termination, unless a longer period is required by law,
  • data for marketing purposes until consent is withdrawn or a request for erasure is made.

§ 7. Rights of data subjects

In accordance with Articles 15–22 of the GDPR, you have the following rights:

  • the right to access personal data,
  • the right to rectify inaccurate data,
  • the right to erasure (“the right to be forgotten”),
  • the right to restrict processing,
  • the right to object to processing,
  • the right to data portability,
  • the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

§ 8. Cookies and Tracking Technologies

The website www.ck-astra.cz uses cookies to ensure proper functionality, analyze traffic, and personalize content. We categorize cookies as essential, analytical, and marketing cookies. We use Google Analytics, Meta (Facebook Pixel), and TripAdvisor, among others. You can opt out of cookies at any time in your browser settings or via the cookie banner on the website.

§ 9. Data Security

ASTRA SPA s.r.o. takes all necessary technical and organizational measures to ensure the security of personal data and to prevent its misuse, loss, or unauthorized access.

§ 10. Contact

Data Controller: ASTRA SPA s.r.o.
Address: Moravská 2093/2A, 360 01 Karlovy Vary
Email: astra8@ck-astra.cz
Website: www.ck-astra.cz

§ 11. Final Provisions

These policies took effect on April 13, 2026, and may be updated in response to changes in legislation or the company’s internal processes. The current version is always available on the company’s website.