Privacy Policy

Effective Date: 06-15-2025

We at Top Travel & Tours, s.r.o. (hereinafter referred to as „we,“ „our,“ or „the Company“) value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our services or visit our website. It also outlines your rights under European Union data protection laws, including the General Data Protection Regulation (GDPR).

For any questions about this Privacy Policy, please contact us via:

• Company Name: Top Travel & Tours, s.r.o.
• Address: Pštrossova 199/25, Nové Město (Praha 1), 110 00 Praha, Czech Republic
• Email: info@toptravelprague.com
• Phone: +420 607 000 508

1. Personal Data We Collect

We collect and process the following types of personal data when you interact with us:

• Contact Information: Name and email address provided when booking a tour or submitting an enquiry.
• Booking Information: Details about tours you book with us, including the date, group size, and services requested.
• Technical Information: Data such as your device’s IP address, browser type, and site usage, collected via functional cookies and Google reCAPTCHA (see Section 6).

We collect only the personal data necessary for providing our services or fulfilling legal obligations.

2. How We Use Your Personal Data

We process your personal data for the following purposes:

1. To Provide Services:
   • Respond to your enquiries and confirm your bookings.
   • Process payment transactions and send booking confirmations.
2. To Maintain Website Security:
   • Protect our website from spam, fraudulent activity, or misuse using Google reCAPTCHA.
3. To Comply with Legal Obligations:
   • Retain certain records for tax and accounting purposes or to respond to legal claims.

We do not use your personal data for marketing purposes unless you explicitly request us to do so, and no data is sold to third parties.

3. Legal Basis for Processing Data

We process your data based on the following legal grounds under the GDPR:

• Performance of a Contract: To manage and fulfill your bookings and enquiries.
• Legitimate Interests: To maintain secure and functional website operations using Google reCAPTCHA.
• Legal Obligation: To comply with tax retention laws and other regulatory requirements.

4. Sharing Your Data

We may share personal data in the following limited contexts:

• Google reCAPTCHA: We use Google reCAPTCHA to protect our website from spam and fraudulent activity. Google processes technical data such as IP addresses and interactions with the site. Refer to Google’s Privacy Policy: https://policies.google.com/privacy.
• Legal Authorities: We may share your data where required by law (e.g., responding to court orders or regulatory inquiries).
• Third-Party Providers: Other trusted service providers may receive your data to assist with billing or IT infrastructure, but only when essential and under strict confidentiality.

We do not sell or share your data with third-party advertisers.

5. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Contact and Booking Data: Retained for up to 5 years, or as required to comply with legal obligations (e.g., tax and financial regulations).
• Technical Data: Retained as specified by the duration of cookies (see Section 6).

Data that is no longer needed is securely deleted or anonymized.

6. Cookies and Tracking Technologies

We use cookies to ensure our website functions securely and efficiently. Cookies are small text files stored on your device when you visit a website.

Cookies We Use

1. Functional Cookies:
   • Essential for website operation and security (e.g., session cookies or user preferences).
   • These do not require user consent under GDPR.
2. Google reCAPTCHA Cookies:
   • Used to determine whether interactions are human and protect the site from spam or malicious activity. This involves sending data such as:
     • Your IP address
     • Browser configuration
     • Mouse movements or clicks on the page
   • Google’s Privacy Policy: https://policies.google.com/privacy.

We do not use analytics or tracking cookies for marketing purposes.

Managing Cookies

Since we use cookies for strictly necessary purposes (e.g., security and functionality), explicit consent is not required. However, you can control or remove cookies through your browser settings. Adjusting cookie settings may affect the functionality of our website.

7. Your Rights Under GDPR

As a user in the EU, you are entitled to the following rights:

1. Access: You can request a copy of the personal data we process about you.
2. Correction: You can ask us to correct or update inaccurate or incomplete information.
3. Erasure („Right to Be Forgotten“): You can request that we delete your personal data unless it is required for legal or contractual purposes.
4. Objection: Object to the processing of your data based on legitimate interests.
5. Data Portability: Receive your data in a structured, machine-readable format.
6. File Complaints: If you believe we are mishandling your data, you have the right to file a complaint with your local data protection authority (e.g., in the Czech Republic, contact Úřad pro ochranu osobních údajů [Czech Data Protection Authority]).

To exercise these rights, contact us at info@toptravelprague.com.

8. Security Measures

We take appropriate technical and organizational measures to safeguard your data against accidental loss, unauthorized access, alteration, or disclosure. These include:

• Encryption of data during transmission.
• Secure storage systems and limited access to personal data.

9. Updates to this Privacy Policy

We reserve the right to update this Privacy Policy as necessary to reflect changes in legal requirements or business practices. The most recent version will always be available on our website.

10. Contact Us

For questions about this Privacy Policy, or to exercise your data subject rights, please contact us:

• Email: info@toptravelprague.com
• Phone: +420 607 000 508