Privacy Policy

Data controller

CandyShop AFTER DARK, Maiselova 76/12, 110 00 Praha 1, Czech Republic. Email: info@erotic-massage-prague.com. Phone: +420 775 445 442.

What data we collect

Reservation data: the name (or nickname), phone number and, where provided, e-mail you give us to make and confirm a booking, together with the massage, date, time and masseuse selected.

Communication data: the content of messages you send us by phone, WhatsApp or e-mail.

Technical data: standard server logs (IP address, browser type, timestamps) generated automatically when you visit the website.

Why we process it and on what legal basis

To arrange, confirm and provide the massage you request. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

To respond to your enquiries. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).

To operate and secure the website. Legal basis: our legitimate interest in a functioning, secure site (Art. 6(1)(f) GDPR).

To measure how the website is used (Google Analytics 4), only if you allow analytics cookies. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not use your data for automated decision-making or profiling, and we do not sell it.

How long we keep it

Reservation data is kept only as long as needed to provide the service and for a short period afterwards to handle any follow-up, after which it is deleted. Casual enquiries are deleted once resolved. Server logs are retained only for a limited period for security purposes.

Who we share it with

We do not sell or disclose your personal data. We use a small number of processors strictly to run the service: website hosting, database hosting, e-mail delivery and, with your consent, web analytics (Google). They process data only on our instructions and under data-processing agreements. We may disclose data if required by law.

Cookies and third-party content

Necessary: the cookie "orepretzel" remembers your cookie choice for 6 months, and your theme preference is stored locally in your browser. These are always on.

Analytics (only with your consent): Google Analytics 4, provided by Google Ireland Ltd., sets the cookies "_ga" and "_ga_*" (2 years) to count visits and see which pages are used. Until you allow it, Google receives only cookieless signals without identifiers (Google Consent Mode). Google may process data outside the EU under the EU–US Data Privacy Framework; see policies.google.com/privacy.

We set no advertising or marketing cookies. You can change or withdraw your choice at any time through "Cookie settings" at the bottom of every page; withdrawing deletes the analytics cookies. Each choice is recorded with a random consent ID (no IP address) as proof of consent.

The contact map is embedded from OpenStreetMap, which does not set cookies.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any right, contact us using the details above. You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, www.uoou.cz).

Changes

We may update this policy from time to time; the current version is always published on this page.