Privacy Policy

1) Who we are

Thena Travel Agency Czech Republic (“Thena Travel”, “we”, “us”, “our”) provides curated trips and short city breaks. We are the data controller for personal data processed via this website.

• Company reg. no.: 35572129
• Address: 8 Bennett Summit, Leahland, HU12 8HG, Czech Republic
• Email: [email protected] · Phone: +44 321 990 9057

2) Scope

This policy describes how we collect, use, disclose, and protect personal data when you browse our website, use the cart and checkout forms, contact us, or otherwise interact with us. It also explains your rights under applicable data protection laws, including the GDPR.

3) What data we collect

Data you provide

• Contact and order details: first/last name, email, phone, address, trip selections, dates, and free‑text messages you submit via checkout or contact forms.
• Communications: messages you send us via email or forms and your responses to our requests.
• Preferences and consent choices: cookie consent and communication preferences.

Data we collect automatically

• Device and usage data: IP address, browser and device type, pages visited, time and duration, referrers.
• Cookies and similar technologies: see section “Cookies and analytics”.

Data from third parties

• Analytics and advertising partners (e.g., Google Analytics, Meta Pixel) provide aggregated insight about site usage and ad performance.
• Service providers and suppliers may share booking‑related status updates for your itinerary.

Note: We do not collect payment card details on this website. Orders are submitted for availability verification; secure payment instructions are provided separately after confirmation.

4) Purposes and legal bases

• To provide and improve our services, process orders and inquiries, and manage your trip booking (Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(f) — legitimate interests).
• To communicate with you about availability, itinerary details, or support (Art. 6(1)(b)/(f)).
• To operate our website, perform analytics, and enhance user experience (Art. 6(1)(a) — consent for analytics/advertising cookies; Art. 6(1)(f) — strictly necessary operations).
• To comply with legal obligations, e.g., accounting and record‑keeping (Art. 6(1)(c)).
• Marketing communications with your consent or as permitted by law (Art. 6(1)(a) or Art. 6(1)(f)).

5) Cookies and analytics

We use cookies and similar technologies to run the website, remember your choices, and measure performance.

Types of cookies

• Strictly necessary: required for core features (e.g., theme, cart storage).
• Functional: remember preferences and improve features.
• Analytics: help us understand site usage (e.g., Google Analytics).
• Advertising/measurement: help measure reach and performance (e.g., Meta Pixel).

Google Analytics

We use Google Analytics (GA4) to understand usage trends. Google may process data on servers outside the EU. You can control analytics via our cookie banner.

Meta (Facebook) Pixel

We use Meta Pixel for measurement and to understand the effectiveness of our content. You can control advertising/measurement via our cookie banner.

Your choices

• Use the cookie banner to Accept all, Decline, or Customize categories.
• You can clear or block cookies in your browser at any time. Some features may not function without necessary cookies.

6) Sharing of personal data

• Suppliers and local partners: hotels, guides, and transport providers to deliver your trip.
• Service providers: website hosting, analytics, marketing tools, communication tools, and IT security.
• Authorities and legal compliance: when required to comply with law or protect our rights.
• Business transfers: in a merger, acquisition, or asset sale, subject to safeguards.

7) International transfers

Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses and supplementary measures where required.

8) Retention

• Order and booking records: typically 6 years for accounting and audit purposes.
• Contact inquiries: up to 24 months from last interaction.
• Cookie data: per cookie lifetime and your choices.
• When retention ends, we securely delete or anonymize data.

9) Your rights

Subject to conditions and local law, you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing, including profiling based on legitimate interests.
• Data portability.
• Withdraw consent at any time (without affecting processing prior to withdrawal).
• Lodge a complaint with your local authority or the Czech Data Protection Authority (ÚOOÚ).

To exercise these rights, contact [email protected]. We may need to verify your identity before responding.

10) Security

We employ technical and organizational measures such as encrypted transport (HTTPS), access controls, and backups. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11) Children

Our services are not directed to children under 16. If you believe a child provided us personal data without appropriate consent, contact us to delete it.

12) Do Not Track

Some browsers offer “Do Not Track” signals. We currently do not respond to DNT signals. Use our cookie controls to manage analytics and advertising cookies.

13) Changes to this policy

We may update this policy from time to time. Changes take effect upon posting to this page. The “Last updated” date reflects the most recent revision.

14) Contact

• Email: [email protected]
• Phone: +44 321 990 9057
• Address: 8 Bennett Summit, Leahland, HU12 8HG, Czech Republic