1. Data Controller Identification

The data controller responsible for personal information processed through Vaultsbreezyrnk.buzz is Vaultsbreezyrnk Travel Media s.r.o., registered in the Czech Republic under company registration number CZ-08492163, with its registered address at Hatě 194, 669 02 Chvalovice - Hatě, Czech Republic. For privacy questions, our dedicated Data Protection Officer (DPO) may be contacted via email at [email protected].

2. Information We Collect

We process personal data only when necessary for website functionality, communication fulfillment, or compliance with legal statutes. The categories of data collected include:

  • Contact Information: When you submit an inquiry through our contact form, we collect your full name, email address, inquiry subject, and the contents of your message.
  • Automated Device & Technical Data: When navigating the portal, our servers record standard technical logs including internet protocol (IP) address, browser classification, operating system, referring URL, time spent per page, and HTTP request headers.
  • Cookie & Preference Flags: We record user cookie preferences stored locally in your browser storage (e.g., acceptance or rejection of analytical tracking).

3. Legal Bases for Processing (GDPR)

In accordance with Article 6 of the General Data Protection Regulation (Regulation (EU) 2016/679), processing occurs under the following lawful grounds:

  • Legitimate Interests (Art. 6(1)(f)): For monitoring site security, resolving technical faults, preventing abusive bot traffic, and optimizing page load speeds across border regions.
  • Consent (Art. 6(1)(a)): For non-essential analytical cookies and voluntary correspondence initiated by the user.
  • Legal Obligation (Art. 6(1)(c)): Where statutory Czech or European accounting, archiving, or law enforcement mandates require record retention.

4. Third-Party Service Processors

We do not sell, rent, or trade your personal data to commercial brokers. Data may be processed on our behalf by vetted third-party infrastructure providers operating within the European Economic Area (EEA) or under recognized adequacy frameworks:

  • Cloud hosting and Content Delivery Network (CDN) service operators for static assets.
  • Secure transactional email routing infrastructure for dispatching form inquiries.
  • Aggregated privacy-compliant analytics platforms configured to anonymize IP addresses prior to persistent storage.

5. Data Retention Timeframes

Personal data collected via contact inquiries is retained only for the duration needed to resolve the traveler inquiry and for a subsequent administrative period not exceeding twenty-four (24) months, after which records are purged or irreversibly anonymized. Server access log files are recycled automatically on a rolling 30-day schedule unless retained in response to documented cybersecurity incidents.

6. Your Statutory Rights (GDPR & CCPA/CPRA)

Under European data protection law and comparable international statutes, you possess explicit rights regarding your personal information:

  • Right of Access: You may request confirmation and copies of all personal data held concerning your identity.
  • Right to Rectification: You may request the prompt correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where retention is no longer justified.
  • Right to Restrict or Object to Processing: You may dispute processing conducted under legitimate interests or request temporary suspension.
  • Right to Data Portability: You may obtain your provided personal records in a structured, commonly used, machine-readable format.
  • Right to Lodge a Complaint: You maintain the right to register a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů - ÚOOÚ) at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

7. Security Measures & Revisions

Vaultsbreezyrnk applies modern Transport Layer Security (TLS 1.3) encryption to all data transmitted across the web domain. Access to inquiry databases is restricted strictly to authorized editorial personnel under contractual confidentiality. We reserve the right to revise this policy periodically to align with evolving regulatory guidance.