Privacy
What this site does with data, plainly.
Who is responsible
Max-Hermann Hoek
Revoluční 1082/8, 110 00 Praha 1 – Nové Město, Czech Republic
IČO 17184576
Zapsán v živnostenském rejstříku: Živnostenský rejstřík, Úřad městské části Praha 1
info@hush.travel
There is no data protection officer: this is one person, and the thresholds for appointing one are not met.
Browsing
No advertising, no third-party script, nothing shared with anyone. If the build is password-protected, one cookie remembers that you entered, and one remembers your answer to the question below. Server logs keep IP addresses for a short time for security.
Counting visits
If you say yes to the question at the bottom of the page, we count what happens on the site: which pages you open, what you search for, which filters you use, how far you scroll, and how far into a booking you get. It runs on our own server. It is how we find out which parts of the site are in the way.
What it is not: no advertising, no profile, no third party, no recording of your screen, no name, no email, no IP address written down, and never anything you type into a form — only which field you left empty. Your browser holds one random number so we can tell a first visit from a fifth; it is not you, and it is not linked to your account.
Legal basis: your consent, Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Sb. on electronic communications. Nothing is stored on your device and nothing is measured before you press the button. Refusing is one press and is remembered, so you are not asked twice; if your browser sends Do Not Track or Global Privacy Control we take that as a no without asking at all. We keep the detail for 90 days and the visit summary for 14 months, then it is deleted.
The cookie policy lists every number we keep.
Booking
To book we pass your name, email and phone, and your dates and room, to Nuitée Travel Limited (Dublin, Ireland), which processes the payment and transmits the reservation to the property. Card data is entered in Nuitée’s payment form and never reaches us. We keep the booking record (reference, status, your email, the price) to show you your booking and to handle cancellations. Legal basis: performance of the contract you asked for, Art. 6(1)(b) GDPR.
Hotels outside the EU
A reservation has to reach the house that is going to keep the room, and some of those houses are in countries without an EU adequacy decision — Indonesia, Morocco, Sri Lanka, Tanzania and others, depending on what you book. For that transfer we rely on Art. 49(1)(b) GDPR: it is necessary to perform the contract you asked for. Only what the house needs is sent: your name, your dates, the room and any note you wrote for them.
Signing in with Google
If you use the Google button, Google tells us your email address, your name and a Google account identifier, and we keep those to recognise you next time. Google’s own handling of the sign-in is theirs, under their privacy policy. You can register with an email address and password instead; nothing on this site requires a Google account.
Who else sees anything
The site runs on servers rented from Hetzner Online GmbH in Germany, under a processing agreement. Mail is sent through our mailbox provider. Hotel photographs and live prices are fetched from our booking partner. Nobody else receives anything, and nothing is sold or shared for advertising.
How long things are kept
Booking and invoice records: ten years from the end of the stay. Czech accounting law asks for five and the VAT rules for ten, and keeping one date rather than two is both simpler and the safer of the two. Account data: until you delete the account. Counting data: 90 days in detail, 14 months as a summary. Server logs: a short time, for security.
Your rights
Access, correction, deletion, portability and objection under the GDPR: write to info@hush.travel. You may also complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.