Privacy notice

Demonstration site. Zayana Hospitality a.s. is a fictional company and this site demonstrates the CMS v4 content platform. The forms send nothing and the site stores no personal data. The text below shows how the notice would read for a real hotel group.

Who processes your data

The controller is Zayana Hospitality a.s., Lotosová 1, 110 00 Prague 1, Czech Republic (“Zayana”, “we”). The hotels are run by subsidiaries in Switzerland, Cyprus and China, which act as joint controllers for data from a stay at their house. You can reach our data protection officer at privacy@zayana.example.

Why we process data, and on what basis

• Requests and reservations – name, contact details, dates, room, payment details. Basis: performance of a contract and steps before entering into it.
• Health and dietary notes – only if you give them to us (allergies, restrictions, the programme health questionnaire). Basis: your explicit consent, which you may withdraw at any time.
• Zayana Circle – stay history and benefits. Basis: performance of the membership contract.
• Newsletter – e-mail address and language. Basis: consent; unsubscribe in one click from any letter.
• Accounting and tax – invoices and receipts. Basis: legal obligation.
• Website security – technical server logs that do not identify people. Basis: legitimate interest.

We use no analytics or advertising tools on this website.

Who receives data

The operating company of each house, our reservation-system and IT providers and the payment gateway – always only as far as your stay requires. We do not sell data or share it for advertising.

Transfers outside the EU

Cyprus is an EU member state. Switzerland benefits from a European Commission adequacy decision. For China we transfer only the data needed for a stay at Atlantis Haven, under standard contractual clauses; health data is never transferred there without your explicit consent.

How long we keep data

See the table below. When a period ends, we delete or anonymise the data.

Your rights

You have the rights of access, rectification, erasure, restriction of processing and portability, and the right to object. You may withdraw consent at any time. Write to privacy@zayana.example; we reply within 30 days. You may complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.