1.Who we are

This Privacy Policy describes how HelpTour Agency ("we", the "Operator"), operating the Magni · Sacred Czech brand, handles personal data when you visit our website, contact us, or book a tour.

2.What data we collect

We only collect what we need:

• Booking and contact data: name, email, phone, group size, tour theme of interest, message text.
• Billing data: billing address and (where invoiced) VAT identification — required by Czech tax law.
• Technical data: IP address, browser type, pages visited, referring URL — for security and basic analytics.

We do not store payment card data on our servers; card payments are handled by our payment gateway (Comgate) directly.

3.Why we process data (purposes & legal bases)

4.How long we keep data

• Booking records and invoices: 10 years (statutory accounting retention under Czech law).
• Contact-form messages: up to 3 years if no booking results, or for the duration of the customer relationship plus 10 years for tax/invoice retention.
• Newsletter subscription: until you unsubscribe.
• Technical / cookie data: up to 14 months for analytics; session cookies until the browser is closed.

5.Who else sees your data (recipients)

We share data only with the parties strictly needed to deliver the service and meet legal obligations:

• Hosting provider for the website (within the EU).
• Email service for booking confirmations and replies.
• Payment gateway (Comgate) when you pay by card.
• Accountant and tax authorities as required by Czech accounting and tax law.
• Web analytics: aggregated, IP-anonymized usage data via Google Analytics (only if you accept analytics cookies). Data may be transferred to the United States under the EU-U.S. Data Privacy Framework.

We do not sell personal data and do not share it for advertising profiling.

6.Cookies

We use only the cookies needed to run the site (essential), and — only with your consent — analytics cookies to understand which content is useful. You can decline non-essential cookies in the cookie banner, or clear them at any time in your browser settings.

7.Your rights

Under GDPR (Articles 15 – 22) and Czech Act No. 110/2019 Coll. you have the right to:

• access your personal data and obtain a copy;
• have inaccurate data corrected;
• have data erased ("right to be forgotten") where the legal basis no longer applies;
• restrict processing in specific cases;
• data portability for data you provided to us based on consent or contract;
• object to processing based on legitimate interest;
• withdraw consent at any time (this does not affect lawful processing done before withdrawal).

To exercise any of these rights, write to magni@helptour.cz. We respond within 30 days.

8.Right to lodge a complaint

If you believe we mishandle your data, you may complain to the Czech supervisory authority:

9.Changes to this Policy

We may update this Privacy Policy from time to time. The current version and effective date are always shown on this page.