1. Data Controller

The data controller is:

WAXWING s.r.o.
Svachova Lhotka 1
382 32 Mirkovice
Czech Republic

Web: https://www.museumkrumlov.cz
E-mail: vedouci@museumkrumlov.cz
Phone: +420 725 009 454

2. What Personal Data We Process

We may process the following personal data:

  • first name and last name
  • email address
  • phone number
  • IP address
  • technical data about your device and browser
  • cookies
  • any additional data provided in website forms

We only obtain this data if you provide it to us (e.g. via a contact form) or through your use of our website.

3. Purpose of Personal Data Processing

We process personal data for the following purposes:

  • responding to inquiries submitted via the contact form
  • processing reservations or service orders
  • ensuring the operation of the website
  • improving website functionality
  • visitor analytics
  • compliance with legal obligations

4. Legal Basis for Processing

We process personal data based on:

  • your consent
  • performance of a contract
  • the legitimate interest of the controller (e.g. website security)
  • compliance with legal obligations

5. Cookies

Our website uses cookies for the following purposes:

  • ensuring proper website functionality
  • storing user preferences
  • analyzing website traffic
  • marketing purposes (if enabled)

For detailed information, please see the Cookie Policy (EU) page.

6. Data Retention Period

We retain personal data only for as long as necessary:

  • for the duration of communication with the user
  • for the duration of a contractual relationship
  • as required by legal regulations
  • or until consent is withdrawn

7. Sharing Data with Third Parties

Your personal data may be shared with:

  • web hosting providers
  • analytics service providers (e.g. Google Analytics)
  • website administrators
  • service providers necessary for website operation

These entities process personal data in accordance with applicable laws and the GDPR.

8. Your Rights

You have the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion of personal data
  • request restriction of processing
  • object to processing
  • data portability
  • lodge a complaint with a supervisory authority

The supervisory authority is:
Office for Personal Data Protection
www.uoou.cz

9. Personal Data Security

The controller has implemented technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

10. Final Provisions

These privacy policies may be updated from time to time. We recommend checking this page regularly.

These policies are valid from: 24. 3. 2026