Privacy Policy

1. Who we are

1.1 P&B Travel s.r.o. ("P&B Travel", "we", "us") is the controller of the personal data described in this Policy. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on the processing of personal data.

1.2 For any question about this Policy or your data, contact us at info@pnbtravel.eu or by post at our registered office.

2. Data we collect

2.1 Travel request form. Your name, company, work email address, approximate travel dates and the description of your plans.

2.2 B2B online booking access form. Legal company name, registration / VAT number, registered address, country, company website, contact person's name and position, business email address, telephone number, business type, estimated annual volume, primary source markets, required hotels and services, and any additional information you provide.

2.3 Email. Any information you include when you write to us directly.

2.4 Our hosting provider may automatically record technical data such as IP address, browser type and time of access in server logs, for security and operation of the website.

3. Purposes and legal basis

3.1 We use the data from our forms to respond to your enquiry, prepare quotations and programmes, and assess and manage requests for B2B partner access. This processing is necessary to take steps at your or your company's request before entering into a contract (Art. 6(1)(b) GDPR) and for our legitimate interest in communicating with business partners (Art. 6(1)(f) GDPR).

3.2 We process server log data on the basis of our legitimate interest in keeping the website secure and functioning (Art. 6(1)(f) GDPR).

3.3 Where we enter into a business relationship, further processing is governed by our B2B Terms & Conditions and our legal obligations, including accounting and tax law (Art. 6(1)(c) GDPR).

3.4 We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Who receives your data

4.1 Your data is accessible to authorised P&B Travel staff. We share it with service providers only as needed to operate our business, including:

• our website hosting and email provider;
• our online booking platform provider, if partner access is granted;
• hotels, transport and other suppliers, where needed to prepare or deliver a requested service;
• professional advisers and public authorities, where required by law.

4.2 If any recipient is located outside the European Economic Area, we ensure an adequate level of protection, for example through an adequacy decision or the European Commission's Standard Contractual Clauses.

5. How long we keep it

5.1 Enquiries that do not lead to a booking or partnership are kept for up to 24 months from our last contact, then deleted.

5.2 Data relating to partners and bookings is kept for the duration of the business relationship and afterwards for as long as required by law (for example, accounting records) or as needed to establish or defend legal claims.

5.3 Server logs are kept for a limited period set by our hosting provider.

6. Your rights

6.1 Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased or its processing restricted;
• object to processing based on our legitimate interests;
• receive your data in a portable format, where applicable.

6.2 To exercise any of these rights, email info@pnbtravel.eu. We will respond within one month.

6.3 You may also lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the authority in your country.

7. Cookies

7.1 This website does not use cookies, analytics or advertising trackers. To avoid losing your input if a form fails to send, your browser may temporarily keep a copy of what you typed in its own session storage. This copy stays on your device, is never sent to us separately, and is cleared when you close the browser tab.

8. Security

8.1 The website is served over an encrypted (HTTPS) connection, and we take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

9. Changes to this Policy

9.1 We may update this Policy from time to time. The current version is always available on this page, with its effective date shown above.