PRIVACY POLICY

Effective from: 25 August 2026

1. Who controls your personal data

The controller of personal data processed through walkie-talkie.tours and in connection with services offered under the Walkie Talkie brand is:

Gleb Berežný
Company ID: 03379736
Evropská 612/79
160 00 Prague 6
Czech Republic

Email: info@walkie-talkie.tours
Website: https://walkie-talkie.tours

In this Privacy Policy, we refer to ourselves as "we", "us", "Walkie Talkie" or the "Controller".

This Privacy Policy explains how we process personal data of website visitors, customers, prospective customers and other persons who communicate with us.

We process personal data primarily in accordance with Regulation (EU) 2016/679 (the "GDPR"), applicable Czech data protection legislation and other relevant laws.

2. Personal data we process

Depending on how you use our services, we may process different categories of personal data.

For tour bookings, this may include your first and last name, email address, telephone number, number of travellers, selected tour and date, pickup location, hotel or other accommodation and any information you voluntarily provide in a booking note or subsequent communication.

We do not ordinarily request your nationality.

Where a child participates in a tour, the booking must be made by a parent, legal guardian or another responsible adult. Where necessary for safe transportation, we may ask the responsible adult for limited information such as the child's age or height for the purpose of arranging an appropriate child restraint.

When you contact us through the website contact form, we may process your email address, telephone number and the content of your message.

In connection with payments, we may process the payment amount, currency, payment method, payment status, transaction identifier, date of payment and billing details where applicable. We do not store full payment card details ourselves. Online card payments are processed through Stripe. Where Revolut is used, we may receive standard transaction information such as payer name, amount, time and transaction identifier.

When you visit our website, technical data may also be processed, including your IP address, device and browser type, operating system, time of access, pages viewed, referral source, technical logs and cookie or similar identifiers.

If you contact us through WhatsApp, Instagram, Facebook, TikTok, YouTube or another platform, we may process information you make available through that service, such as your username, profile information and the content of your communication.

3. Special categories of personal data

We do not ordinarily ask customers to provide health information or other special categories of personal data.

Please do not send such information unless it is genuinely necessary, for example for safety, accessibility, allergy or another specific requirement connected with your tour.

Where you voluntarily provide such information and processing is necessary to accommodate your request, we will process it only to the minimum extent necessary and on an appropriate legal basis, including explicit consent where required.

4. Where we obtain personal data

We obtain most personal data directly from you when you make a booking, make a payment, contact us or use our website.

If you make a booking through an external booking marketplace, reseller or another partner, we may receive information from that partner that is necessary to provide the tour you booked.

Such partners may also process your personal data as independent controllers under their own privacy policies.

5. Why we process personal data and our legal bases

Booking and providing the tour

We use personal data to create and manage bookings, confirm availability, communicate with you before the tour, organise pickup, provide the tour, manage changes or cancellations and provide customer support.

The legal basis is primarily performance of a contract or steps taken at your request before entering into a contract under Article 6(1)(b) GDPR.

If you do not provide information necessary for the booking, we may be unable to provide the service.

Accounting, tax and legal requirements

Certain information must be retained to comply with accounting, tax and other legal obligations.

The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

Communication and customer support

Where your inquiry concerns an intended or existing booking, processing is generally necessary to enter into or perform the contract.

For general inquiries, processing may be based on our legitimate interest under Article 6(1)(f) GDPR in communicating with persons interested in our services.

Security, fraud prevention and legal claims

We may process personal data where necessary to protect our website and booking system, prevent fraud or misuse, manage disputes, recover amounts owed and establish, exercise or defend legal claims.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Analytics and advertising

Where you provide consent through our cookie settings, we may use analytics and advertising technologies to measure website traffic and conversions, improve advertising campaigns, conduct remarketing and display more relevant advertising.

These technologies may include Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel, YouTube or comparable services if and when they are actually enabled on the website.

Non-essential analytics or marketing technologies are not activated before the required consent has been obtained.

The legal basis for subsequent processing of personal data is primarily consent under Article 6(1)(a) GDPR.

Marketing emails

If you are not already our customer, we will send you marketing communications only where we have obtained the required prior consent.

If you are an existing customer and we obtained your electronic contact details in connection with the purchase of our service, we may, where permitted by applicable law, use those details to send information about our own similar services, unless you have opted out.

Every marketing communication will provide an easy and free way to unsubscribe.

6. Photography and video during tours

We may take photographs or videos during our tours.

Where you are identifiable in a photograph or video and we wish to use that material to promote Walkie Talkie, including on our website, Instagram, Facebook, TikTok, YouTube or advertising materials, we will do so only where we have an appropriate consent.

Consent to photography or promotional use is voluntary. Refusing consent will not affect your ability to participate in a tour, its price or the quality of the service you receive.

You may withdraw consent at any time by contacting info@walkie-talkie.tours. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Following withdrawal, we will stop using the material for new promotional purposes and, where reasonably possible, remove it from channels under our control. We cannot always guarantee removal of copies independently shared, downloaded or republished by third parties outside our control.

For identifiable minors, consent will be obtained from a parent or legal guardian where required.

7. Cookies and similar technologies

Our website may use essential, analytics and marketing cookies or similar technologies.

Strictly necessary cookies may be used without consent where they are genuinely necessary for the operation, security, booking functionality or another service specifically requested by the user.

Analytics, personalisation and advertising cookies are used only on the basis of the required consent.

You can reject non-essential cookies as easily as you can accept them and may subsequently change your choices through the cookie settings available on the website.

The current list of cookies, providers, purposes and retention periods is available through our cookie settings or a separate Cookie Policy. This information may change as the technologies actually used on the website change.

8. Who may receive your personal data

We do not provide personal data to third parties for the purpose of independently selling or trading your personal information.

However, personal data may be disclosed where necessary to service providers who assist us in operating the business, including the Lovable website, cloud and database infrastructure, Stripe for online payments, Revolut for payment services, domain, DNS or email service providers, accountants, tax advisers, legal advisers, persons involved in operating or delivering tours and relevant booking or distribution partners.

Where the necessary consent has been provided, or where you choose to use the relevant service yourself, data may also be processed by Google, Meta/Facebook/Instagram/WhatsApp, TikTok, YouTube or other analytics, advertising and communications services that are currently enabled.

Depending on the circumstances, individual providers may act as our processors or as independent controllers processing personal data under their own terms.

Access to personal data within Walkie Talkie is limited to persons who need such access to perform their work or contractual duties.

9. International transfers

Some of our technology, payment, analytics, advertising or communications service providers may process personal data outside the European Economic Area.

Where personal data are transferred to a country that is not covered by an adequacy decision of the European Commission, we use an appropriate lawful transfer mechanism where required, such as Standard Contractual Clauses approved by the European Commission or another mechanism permitted by applicable law.

Where a service provider is covered by a valid adequacy framework, transfers may also rely on that mechanism.

10. How long we retain personal data

Booking and tour-related information is generally retained for the duration of the contractual relationship and thereafter normally for 3 years, particularly for complaints, disputes and legal claims.

Accounting, tax, billing and transaction records are retained for the periods required by applicable law, which may in certain cases be up to 10 years.

General inquiries that do not result in a contract are normally retained for no longer than 12 months following the last relevant communication, unless longer retention is justified by the circumstances.

Information from an incomplete booking, where technically stored, will generally be deleted or anonymised within 30 days, unless longer retention is required for security or fraud prevention purposes.

Technical and security logs may generally be retained for up to 12 months, unless longer retention is necessary to investigate a security incident or protect legal claims.

Personal data used for consent-based marketing is retained until consent is withdrawn and ordinarily for no longer than 3 years following the last relevant interaction, unless consent is renewed or another lawful basis applies.

Records demonstrating that consent was given or withdrawn may be retained beyond the end of the underlying processing for as long as necessary to demonstrate compliance with our legal obligations.

Photographs and videos processed on the basis of consent are retained for the duration of the relevant consent or until the underlying purpose ceases to exist.

After the applicable period expires, personal data will be deleted or anonymised unless continued retention is required by law or necessary for legal claims.

11. Children

Our tours may be suitable for children, but bookings must be made by an adult.

We do not intentionally seek to collect children's contact or marketing information directly through our website.

Where limited information concerning a child is necessary for transportation safety or another legitimate operational requirement, we obtain it from a parent, legal guardian or another responsible adult and only to the extent necessary.

12. Social media and WhatsApp

Walkie Talkie may operate profiles or communicate through services including WhatsApp, Instagram, Facebook, TikTok and YouTube.

When you contact us, follow us or otherwise interact with us through these services, the operator of the relevant platform may also process personal data in accordance with its own privacy policy.

Clicking a WhatsApp link or button may redirect you to a service operated by Meta or its partners. We do not have full control over subsequent processing performed independently by the relevant platform.

13. Automated decision-making and profiling

We do not currently use personal data for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

If you consent to advertising technologies, certain data may be used to create advertising audiences, perform remarketing or similar advertising profiling. Such profiling does not by itself determine whether you may use our services.

14. Security

We apply appropriate technical and organisational measures taking into account the nature of the personal data and the risks associated with processing.

These measures may include access controls, need-to-know restrictions, account security, secure transmission, maintenance of software and infrastructure, security monitoring and other measures appropriate to the technology used.

No information system can, however, be guaranteed to be completely secure.

15. Your rights

Depending on the circumstances and the conditions set by applicable law, you may have the right to request access to your personal data, correction of inaccurate information, erasure, restriction of processing and data portability.

You also have the right to object to processing based on legitimate interests.

You may object to processing for direct marketing purposes at any time. If you do so, we will no longer process your personal data for that purpose.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The right to erasure is not absolute. We may retain information where this is required by law or necessary for the establishment, exercise or defence of legal claims.

To exercise your rights, contact info@walkie-talkie.tours.

Where we have reasonable doubts about the identity of a person making a request, we may request reasonable additional information to verify their identity.

16. Complaints

If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the Czech supervisory authority:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

We would nevertheless appreciate the opportunity to address your concern directly first. You can contact us at info@walkie-talkie.tours.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, particularly where our services, technologies, service providers or applicable laws change.

The current version will always be available at walkie-talkie.tours, together with the date of its latest update.

Where a change materially affects how personal data are processed, we will provide additional information or obtain new consent where required by law.