Privacy Policy LuxAntbourg Apartments Last updated: 1 October 2026 How we handle your personal data when you enquire about a stay at LuxAntbourg Apartments or communicate with us about a reservation. Who we are LuxAntbourg s.r.o., trading as LuxAntbourg Apartments, is the controller of the personal data described in this policy. LuxAntbourg s.r.o. Company ID (IČO): 29602289 Libušina 2120/21 360 01 Karlovy Vary, Czech Republic Email: luxantbourg@gmail.com What this policy covers This policy applies to accommodation enquiries received through our Google Ads lead forms, email and WhatsApp Business, and to related reservation communications. It also covers this privacy page on luxantbourg.cz, luxantbourg.de, luxantbourg.eu and luxantbourg.com, including their www versions. If we need additional information for a confirmed stay, such as legally required guest registration details, we will explain that processing when we request it. Data we collect Our enquiry form collects the following information: - Full name - Email address - Telephone number - Country of origin, as provided by you We also process the information you choose to include in your enquiry or correspondence, such as preferred dates, the number of guests and requested additional services, together with the relevant messages and enquiry or reservation status. We receive this information from you, either directly or through the Google Ads form you submit. Please include only the information needed for your enquiry. Providing information is voluntary. We need sufficient details about your request and a working contact method to respond and arrange a booking. Without these, we may be unable to handle your request. There is no legal requirement to provide your country of origin merely to make an enquiry. Why we use your data Responding to your request and arranging a stay We use your data to answer questions, check availability, prepare an offer you have requested, discuss additional services and administer a resulting reservation. The legal basis is taking steps at your request before entering into a contract and performing that contract, under Article 6(1)(b) of the General Data Protection Regulation (GDPR). Keeping a limited record and protecting our business We retain closed enquiries for the limited period below to deal with follow-up questions and document our correspondence. We may also use necessary information to resolve disputes, protect legal claims and maintain website security. This is based on our legitimate interests in orderly customer service, protecting our rights and secure operation, under Article 6(1)(f) GDPR. You may object to this processing. Meeting legal duties Where a booking creates a statutory record-keeping or disclosure duty, or we must respond to a valid legal request, we process only the information required for that duty, under Article 6(1)(c) GDPR. No additional marketing. We do not use the contact details collected through your enquiry for newsletters, unrelated promotional messages, customer-list advertising or remarketing. We do not make decisions about your enquiry or reservation based solely on automated processing that produce legal or similarly significant effects on you. Services we use Access to your enquiry is limited to people handling it for LuxAntbourg Apartments and the providers needed for the relevant service. Depending on how you contact us and whether you book, we use: Google Ads To receive and manage the details you submit through our lead form. Google also processes data associated with its advertising platform under its own terms and Privacy Policy (https://policies.google.com/privacy?hl=en). Gmail To receive, send and store enquiry and reservation emails. The relevant Google service is used to handle correspondence; Google's own service-related processing is described in its Privacy Policy (https://policies.google.com/privacy?hl=en). WhatsApp Business To communicate about your request when you use or request this channel. WhatsApp handles service data under its own privacy terms and, where applicable, processes business contact data under its Business Data Processing Terms (https://www.whatsapp.com/legal/business-data-processing-terms). You can contact us by email instead. Superhostem.cz To manage enquiries and reservations. Superhostem s.r.o. processes guest and contact data on our behalf under its service and data-processing terms (https://www.superhostem.cz/podminky-pouzivani). See also its Privacy Policy (https://www.superhostem.cz/ochrana-osobnich-udaju). FORPSI To host and deliver this privacy page. Technical connection and security data may be processed in providing the hosting service. See FORPSI's privacy and contractual information (https://www.forpsi.com/agreements/). Some providers process data on our instructions, while also acting as independent controllers for particular platform, account, security or compliance purposes. Their own notices apply to that independent processing. We may disclose necessary data to public authorities where legally required, or to professional advisers where necessary to establish or defend legal claims. We do not sell your personal data. International transfers Google and WhatsApp operate internationally. Using these services may involve processing outside the European Economic Area, including in the United States. A provider's authorised subcontractors may also be involved. Where a transfer requires safeguards under the GDPR, the applicable arrangements may rely on a European Commission adequacy decision or standard contractual clauses, as described in the provider's terms. The mechanism depends on the recipient and the service; not every transfer relies on the same arrangement. Details are available in Google's data transfer frameworks (https://policies.google.com/privacy/frameworks), the transfer provisions linked from WhatsApp's Business Data Processing Terms (https://www.whatsapp.com/legal/business-data-processing-terms) and Superhostem's data-processing terms (https://www.superhostem.cz/podminky-pouzivani). Contact us for information about safeguards applicable to our use of these services and how to obtain a copy. How long we keep your data Enquiries that do not result in a booking We keep the enquiry and related correspondence for six months after the enquiry is closed, and then delete or anonymise our copies. An enquiry is closed when it has been resolved, declined or is no longer active. Enquiries that become bookings We keep the information needed to administer your booking until the stay and related payments or requests have been settled. Records subject to statutory retention duties are then kept for the period required by the applicable Czech accounting, tax, guest-registration or local-fee rules. Additional information about data collected for those duties will be provided when it is requested. Exceptions and provider records Where specific data is necessary for an actual dispute or legal claim, we may retain that data until the matter is resolved and the applicable claim or enforcement period has expired. This does not extend retention of unrelated enquiry data. The periods above apply to records we control. Copies that a provider processes independently, such as its own service-security records, follow its applicable terms and legal duties. Provider deletion and backup cycles may affect when deleted data is fully removed. Your rights Subject to the conditions in the GDPR, you may: - Ask for access to your personal data and a copy of it. - Have inaccurate or incomplete data corrected. - Request deletion of your data or restriction of its use. - Receive eligible data in a portable format where processing is automated and based on consent or a contract. - Object, on grounds relating to your situation, to processing based on our legitimate interests. If a particular activity is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal. Ordinary handling of your accommodation request relies on the legal bases described above, rather than marketing consent. To exercise a right, email luxantbourg@gmail.com. We may ask for proportionate information to verify your identity. We normally respond within one month; where the GDPR permits an extension, we will explain it within that first month. Making a complaint You may complain to a data protection authority, including the authority in the EU country where you live or work, or where an alleged infringement occurred. Our Czech supervisory authority is: Office for Personal Data Protection (ÚOOÚ) Pplk. Sochora 27, 170 00 Praha 7, Czech Republic uoou.gov.cz/en (https://uoou.gov.cz/en) · posta@uoou.gov.cz This website This privacy notice is published through FORPSI SuperSite. The website is delivered using the technical infrastructure of that service. When you visit, the hosting service necessarily receives technical connection data such as your IP address, the requested page, time of access and browser information. Technical logs may be used to deliver the page, investigate errors and protect the service, on the basis of legitimate interests in reliable and secure website operation. Such records are retained only for as long as needed for those purposes, subject to the hosting provider's logging arrangements and any applicable legal duty. Links to other providers lead to external websites with their own privacy and cookie policies. Google Ads and WhatsApp also apply their own policies to data they process independently when you use their services. Policy updates We will update this policy if our data-handling practices change. The date at the top identifies the latest version. Where a change requires additional information or consent, we will address that before the relevant new processing begins. For any question about this policy, contact luxantbourg@gmail.com.Lorem Ipsum dolor sit amet