Privacy Policy for Oktoberfest Express

**Effective Date:** 15.08.2024

**1. Introduction:**
This Privacy Policy outlines how Oktoberfest Express („we,“ „our,“ or „us“) collects, uses, and protects the personal information of users („you“ or „your“) of our services, in compliance with Czech law (GDPR) and other relevant regulations. This policy is intended for all users, including international customers, particularly from the United States.

**2. Information We Collect:**
– **Personal Information:** When you make a reservation or inquiry, we collect personal information such as your name, email address, phone number, and payment details (e.g., credit card information).
– **Travel Information:** We also collect details related to your journey, such as pickup and drop-off addresses, travel dates, and any specific preferences.
– **Technical Information:** When you visit our website, we may collect technical information such as your IP address, browser type, and device information through cookies.

**3. How We Use Your Information:**
– **Service Delivery:** We use your personal and travel information to process your booking, manage your transportation, and communicate with you regarding your reservation.
– **Payments:** Your payment details are used to process transactions related to your booking.
– **Customer Support:** We use your contact information to respond to your inquiries or handle any issues related to your service.
– **Marketing (Optional):** With your consent, we may use your email address to send you promotional offers and updates about our services.

**4. Legal Basis for Processing:**
We process your personal data based on the following legal grounds:
– **Contractual Necessity:** To fulfill our obligations related to your booking.
– **Legal Compliance:** To comply with legal obligations, such as tax and accounting regulations.
– **Legitimate Interests:** To improve our services and enhance your experience.

**5. Data Retention:**
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Payment information is stored securely and is not retained beyond the transaction process.

**6. Sharing Your Information:**
We do not sell or rent your personal information to third parties. We may share your data with trusted partners, such as payment processors and transport providers, to facilitate your service. All third parties are required to adhere to GDPR and ensure the security of your data.

**7. International Data Transfers:**
As an international service, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR, and appropriate safeguards are in place to protect your data.

**8. Your Rights:**
Under GDPR, you have the following rights regarding your personal data:
– **Access:** You can request a copy of your personal data that we hold.
– **Rectification:** You can request correction of inaccurate data.
– **Erasure:** You can request deletion of your data under certain conditions.
– **Objection:** You can object to the processing of your data for marketing purposes.
– **Data Portability:** You can request that we transfer your data to another service provider.

**9. Security Measures:**
We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. This includes encryption and secure servers.

**10. Cookies:**
Our website uses cookies to enhance your browsing experience and analyze site traffic. You can manage your cookie preferences through your browser settings.

**11. Changes to This Policy:**
We may update this Privacy Policy from time to time. Any changes will be posted on our website, and the effective date will be updated accordingly.

**12. Contact Information:**
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us using the contact form on our website. **Note:** There is no office at our address, and in-person visits are not possible.

**13. Governing Law:**
This Privacy Policy is governed by the laws of the Czech Republic, in compliance with GDPR and other applicable regulations.