This information applies to the website of Dům svatého Josefa (St Joseph's House), to the contact and enquiry form and to the subsequent handling of reservations and stays. It is effective from 24 July 2026.
Controller
Who controls your data
The controller of personal data is MOST A CESTA duchovně kulturní sdružení, z. s., Company ID (IČ) 44936273, with its registered office at Na zahrádkách 840, 783 14 Bohuňovice. It operates the accommodation facility Dům svatého Josefa, Staré Hamry 60, 739 15 Staré Hamry.
In matters concerning personal data, you can contact us at info@dsvj.cz, by phone at +420 731 604 114 or in writing at the address of our registered office.
Purpose and scope
What data we use and why
Questions and enquiries from the website
We process your name, email address, optionally your phone number, the content of your message and, depending on the type of enquiry, also the requested accommodation, the dates, the number of guests and their breakdown into adults and children by age. We use the data only to deal with your message, check availability and arrange a possible reservation.
The legal basis is taking steps at your request prior to entering into a contract and our legitimate interest in answering other operational questions. Without your name, email address and message, we cannot process the form. Providing a phone number is voluntary.
Reservations, accommodation and payments
If we agree on a stay, we process the data needed to make the reservation and provide accommodation: identification and contact details of the person placing the order, details of the dates, the persons staying and the services ordered, our communication, billing details and payment details. For guests staying with us, we may also process their date of birth, address, nationality and identity document details to the extent required by law.
The legal basis is the performance of a contract and compliance with the legal obligations of the accommodation provider, in particular accounting, tax and registration obligations. To the extent necessary, we may also retain data on the basis of our legitimate interest in the protection of legal claims.
Dietary requirements
You provide information about a diet, allergy or other food restriction voluntarily, so that we can prepare your meals safely. Because such information may reveal something about your health, we use it only to prepare your stay and make it available only to staff who need to know it. The legal basis for any data concerning health is your explicit consent, which you may withdraw at any time.
Website security
When you visit the website and submit a form, standard technical logs are created which may contain your IP address, the date and time of the request, the address visited and information about your browser. They are used for security, error diagnostics and protecting the form against spam. The IP address is also used for a short time to limit excessive form submissions.
Where we obtain data from
We obtain most data directly from you. For group stays, guest data may also be passed to us by the person placing the order, the group leader, a school or another person arranging the stay. That person is obliged to pass on only data they are entitled to provide and to make the guests aware of this information.
Recipients
Who we disclose your data to
Only authorised staff of the operator and suppliers without whom the services cannot be operated securely have access to the data. These are in particular providers of hosting and technical administration, email communication, secure backups and accounting services. These suppliers may use the data only for the agreed purpose and to the extent necessary.
We may also disclose data to public authorities where required by law. We do not sell personal data, and we do not use data from the enquiry form to send commercial communications.
Some technical suppliers may use infrastructure outside the European Economic Area. In such a case, the transfer must be based on an appropriate legal mechanism under the GDPR, in particular an adequacy decision or standard contractual clauses.
Retention period
How long we keep your data
- Enquiries that did not result in a stay, and related communication, for no longer than 3 years from the last contact, unless longer retention is needed because of a specific legal claim.
- Data on reservations that went ahead, for the duration of the contractual relationship and then for the period necessary to protect legal claims.
- Accounting, tax and accommodation records, for the period laid down by the relevant legislation, usually 5 to 10 years.
- Dietary requirements, for the period necessary to prepare for and carry out the stay; after that we delete them, unless further retention is necessary to deal with a specific incident.
- Technical logs, only for as long as necessary for security and diagnostics; the anti-spam limit based on the IP address resets after one hour.
Data may remain for a limited time in secure operational backups, from which it is deleted as part of the regular backup overwrite cycle.
Control over your data
Your rights
You have the right to request access to your personal data, its rectification or erasure, or restriction of its processing. Depending on the legal basis, you may also object to processing or request data portability. Where any data is processed on the basis of consent, you may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing before the withdrawal.
Send your request to info@dsvj.cz. To make sure we do not disclose data to someone else, we may take reasonable steps to verify your identity. If you believe that we are not handling your data properly, you can lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).