Privacy Notice – Ranch Jestřebice
Version: 1.1, updated 2 November 2026
This notice explains how personal data are processed when you visit the Ranch Jestřebice website, contact us, book accommodation, meals or activities, attend a corporate or school event, participate in a game or contact us about a complaint. It concerns guests, participants, parents or guardians, organisers' contact persons and website visitors.
1. Data controller and contact
The controller is WIFCOM a.s., Company ID 24192830, VAT ID CZ24192830, registered office Jestřebice 11, 257 89 Heřmaničky, Czech Republic, registered with the Municipal Court in Prague, file B 17735. The Ranch Jestřebice premises are located at Jestřebice 4, 257 89 Heřmaničky.
For privacy enquiries and to exercise your rights, contact info@ranchjestrebice.cz, telephone +420 317 750 570, or write to our registered office.
2. Categories of personal data
Depending on the service, we may process names, contact details, business or billing data, reservations and dates, number of guests, dietary requests and agreed activities, messages and complaints, payment and invoice details, records legally required for accommodation, information needed to organise school or corporate groups, technical connection and security logs, game nicknames and progress, and images or security-camera recordings in relevant circumstances. Any health-related data, including allergies, are handled only where genuinely necessary and subject to the additional requirements of Article 9 GDPR. We do not routinely ask everyone for medical information.
3. Purposes and legal bases
We process enquiries and prepare offers in order to take steps towards a contract at your request (Article 6(1)(b) GDPR), or under a legitimate interest in responding to business contacts (Article 6(1)(f)). Reservations, accommodation, catering, activities and payments are processed to perform a contract (Article 6(1)(b)); accounting, tax records and mandatory guest registration fulfil legal obligations (Article 6(1)(c)). Organising groups, handling complaints, protecting legal claims, site security and IT operation may rely on the applicable contractual, legal or legitimate-interest basis (Article 6(1)(b), (c) or (f)). Optional marketing or non-essential cookies require an appropriate separate basis, generally consent where required (Article 6(1)(a)). Health information also requires a valid Article 9 exception. Participating in a game does not in itself authorise marketing.
4. Where data come from
Usually you provide data via an enquiry, booking, phone call, email or at the premises. We may also obtain necessary details from the organiser of your group, a school, a person booking for others, a travel agent or our booking-system provider. When Article 14 GDPR applies, we provide the relevant information unless an exemption applies.
5. Recipients and service providers
Only when needed for the particular purpose, data may be accessible to IT, hosting and email providers, the WuBook booking system and related accommodation tools, payment and banking service providers, accounting providers, providers of booked activities, event organisers, insurers or legal advisers, and authorities where required by law. Processors are subject to appropriate data-processing arrangements.
Where a service involves transfer outside the European Economic Area, the transfer must comply with Chapter V GDPR, for example through an adequacy decision or appropriate safeguards. You may request further details on recipients and safeguards using the privacy contact above.
6. Retention
Data are retained only as long as needed for the purpose, the contract, statutory obligations and the establishment, exercise or defence of legal claims. Enquiries are retained while being handled and for necessary follow-up and claims; reservation and contractual records for the period necessary to perform and document the service; accounting and tax documents for statutory periods, generally five to ten years according to document type. Certain foreign-guest register records are retained for six years where required by Czech law. IT logs are retained for operational security and incident investigation; marketing contact details until withdrawal, objection or another applicable end of the sending entitlement; game data through the relevant game and any related claims; CCTV recordings for the shortest appropriate period under automatic overwriting, with relevant incident excerpts preserved longer where necessary. For more precise operational retention details, contact the controller.
7. CCTV and security
Cameras may be used in selected parts of the premises, particularly access routes and around buildings, to protect people, animals and property. The legal basis is normally legitimate interest (Article 6(1)(f)). Only authorised people may access recordings, which are shared where legally justified, such as incident investigations. Contact us for details of camera-covered areas and retention.
8. Photos, videos and children
Identifiable promotional photographs and videos, especially of children or school groups, are published only where a proper legal basis and any required consent or guardian permission exist. Refusing optional publicity does not prevent ordinary use of services. School groups and children’s information are processed only to the extent needed to organise the agreed programme. Additional rules for a specific game may be shown alongside that game.
9. Cookies, local storage and booking content
Strictly necessary technologies may be used to operate and protect the site. Other cookies, including analytics or marketing cookies if introduced, require a valid advance consent where required; refusal and withdrawal must be as easy as acceptance. The children’s trail can save completed stops in your browser’s local storage under the key ranch-trail-pass-v1. The embedded WuBook reservation service is provided by a third party and may transmit technical data when loaded. Its cookie practices are determined by the provider. Further information may be requested at the controller contact.
10. Marketing communications
We send commercial messages only where legally permitted, typically following your specific consent or, for existing customers, where the statutory conditions for offering our own similar services are met. Every message provides a way to opt out. You can also write to info@ranchjestrebice.cz. Marketing consent is not a condition of booking.
11. Your GDPR rights
Subject to the applicable requirements, you may request access, rectification, erasure, restriction, portability, object to legitimate-interest processing and object to direct marketing at any time. You may withdraw consent at any time without affecting prior lawful processing. You also have rights concerning qualifying decisions based solely on automated processing under Article 22 GDPR. Complaints may be filed with the Czech Office for Personal Data Protection (ÚOOÚ), https://uoou.gov.cz. Contact us at the address above to exercise your rights. We normally respond within one month, subject to the GDPR rules on extensions.
12. Required and voluntary information
Data required to book or supply a service, meet legal obligations or issue documents must be provided to the relevant extent; without them, we may be unable to complete your booking or service. Marketing details, optional games and permission to publish promotional photographs are voluntary unless a specific activity explains another legal basis.
13. Security
We use proportionate technical and organisational controls to restrict unauthorised access and protect data against loss, misuse or disclosure. Access is restricted to authorised people with a legitimate operational need. No internet service can guarantee absolute security.
14. Updates and related terms
We may amend this notice in response to changes in services, providers or law. Current information and the effective date will be displayed on our website. The notice also forms Annex 2 to the General Terms and Conditions of WIFCOM a.s. – Ranch Jestřebice.
Notice version date: 2 November 2026.