← Back to homepage

Privacy Policy

I. Introduction

Data Controller

Native Hotel Guide s.r.o.
Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic
Company ID: 231 12 905 · VAT: CZ23112905

This Privacy Policy describes how we collect, use, store and protect your personal data when you use the SmartestGuide application, in accordance with GDPR (EU) 2016/679.

II. What personal data we collect

From guests (end users)

• First name — personalisation of avatar communication
• Gender, age — statistical purposes and offer personalisation
• Email address — communication and marketing (with consent)
• Phone number (optional) — direct communication or WhatsApp features
• Stay dates — providing relevant information
• Avatar conversation content — AI improvement, typically anonymised
• Device information, IP address — technical optimisation and security

From hotels (clients)

• Identification and contact details, payment data, administration access credentials

III. Legal basis for processing

• Consent — for most guest data (first name, email, marketing)
• Contract performance — for app functionality and hotel contract
• Legitimate interest — app improvement, security, statistics
• Legal obligation — accounting, tax compliance

IV. Sharing of personal data

Your data is shared only with the relevant hotel, contracted processors (cloud services, payment gateways, analytics tools) and public authorities when required by law.

V. International transfers

Data is primarily processed within the EU/EEA. Any transfer outside the EU/EEA is carried out in compliance with GDPR (standard contractual clauses, Commission adequacy decisions).

VI. Retention periods

• App usage data: duration of use + 3 years, then anonymised
• Marketing contacts: until consent is withdrawn
• Billing data: 10 years under Czech tax regulations

VII. Your rights

• Right of access, rectification, erasure ("right to be forgotten")
• Right to restriction of processing and data portability
• Right to object and to withdraw consent at any time
• Right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ)

To exercise your rights, please contact us by email. We will respond within 1 month.

VIII. Security

We apply data encryption, access controls, regular backups, firewalls and security audits to protect your personal data.

IX. Changes to this Policy

We will notify you of material changes via the app or website. We recommend checking this page regularly.