Privacy Policy
1. Introduction
Hotel Analytics s.r.o., Company ID: 06723756, registered office at Krakovská 582/23, 110 00 Prague 1, Czech Republic (hereinafter referred to as “we” or “the Controller”) provides the Best Guest web and mobile service for efficient management of guest registrations and the fulfillment of legal obligations in the field of short-term accommodation. The protection of your personal data is our priority. This policy describes how we process your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller and Data Processor
Depending on how you use the Best Guest service, we may act as either:
Data Controller – when you create an account in our application as a guest;
Data Processor – when your data is collected by an accommodation provider through our platform.
3. Categories of Personal Data and Purposes of Processing
We process the following categories of personal data:
Identification data (name, surname, date of birth, nationality) for guest identification and compliance with legal obligations of accommodation providers.
Address of residence (permanent address abroad or in the Czech Republic, address during stay) for guest registration purposes required for local fees and reporting to immigration police.
Travel document data (passport or ID card number, type of document, visa number) to fulfill obligations under Act No. 326/1999 Coll., on the Stay of Foreigners.
Stay details (date and time of arrival and departure, purpose of stay) for legal compliance and calculation of local fees.
Contact data (email address, telephone number) for communication with the guest, account security, and marketing communications (subject to consent).
Account and billing data (payment history, billing information) for application operation, service support, and complaint handling.
Profile data (voluntarily provided: language preferences, identification details) for facilitating future stays and service personalization.
Technical data (device identification, browser type, login data) to ensure service security, misuse detection, and operational analysis.
4. Legal Bases for Processing Personal Data
We process personal data only on the following legal grounds:
Consent of the data subject – primarily obtained when the guest creates a user account; consent is always voluntary and may be withdrawn at any time.
Performance of a contract – processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract (e.g., registration, account management).
Legal obligation – processing is required for compliance with legal obligations applicable to us or accommodation providers, in particular Act No. 326/1999 Coll. (foreigner registration) and Act No. 565/1990 Coll. (local fees).
Legitimate interest – processing is necessary for our legitimate interests, such as improving service functionality, securing the system, or maintaining records for legal protection, provided your rights and freedoms are not overridden.
5. Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected, or as required by law. Data processed on the basis of consent is stored until you withdraw your consent or delete your account.
6. Recipients of Personal Data
Your personal data may be shared with:
Accommodation providers with whom you register;
Public authorities (immigration police, tax authorities) as required by law;
Third-party processors (e.g., cloud providers) are engaged under contractual agreements in accordance with Article 28 GDPR and only to the extent necessary for the operation of our services. All data is stored within the EU.
7. Data Security
We have implemented technical and organizational measures to ensure an appropriate level of security for your personal data. These measures are regularly reviewed and updated in line with the latest security standards.
8. Your Rights as a Data Subject
In connection with your personal data, you have the following rights:
Right to access your personal data
Right to correct inaccurate or incomplete personal data
Right to erasure (“right to be forgotten”) under the conditions set out by GDPR
Right to restriction of processing in cases specified by GDPR
Right to data portability to another controller
Right to object to processing on the basis of legitimate interest
Right to withdraw consent to data processing
Right to lodge a complaint with the supervisory authority (Office for Personal Data Protection, ÚOOÚ)
9. Contact Information
To exercise your rights or if you have any questions regarding the processing of your personal data, you can contact us at: privacy@bestguest.cz
10. Changes to the Privacy Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will inform you of significant changes via our website or by email.
