Privacy Policy
Last updated: April 2026
Inteliva (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and applicable Czech law (Act No. 110/2019 Coll. on personal data processing).
1. Data Controller
The data controller responsible for this website and the Inteliva subscription service is Inteliva, operated from the Czech Republic. For all data-related enquiries or to exercise your rights, contact us at hello@inteliva.com.
2. What Data We Collect and Why
We collect personal data only for specific, legitimate purposes. Each category below includes the legal basis under GDPR Article 6 and the retention period.
2.1 Contact and Enquiry Forms
Data collected: Name, email address, company name, and the content of your message.
Purpose: To respond to your enquiry and assess whether Inteliva is suitable for your operation.
Legal basis (Art. 6(1)(f)): Our legitimate interest in responding to business enquiries and maintaining customer relations.
Retention: 12 months from receipt, then permanently deleted — unless the enquiry converts into a subscription, in which case subscription retention applies.
2.2 Subscription and Billing
Data collected: Email address, company name, billing country, and VAT number (if applicable). Payment card details are handled exclusively by Stripe — we never see or store your card number.
Purpose: To manage your subscription, process payments, issue invoices, and send service communications.
Legal basis (Art. 6(1)(b)): Processing is necessary for the performance of your subscription contract.
Retention: Subscription and billing records are retained for 7 years from the end of the billing relationship in accordance with Czech accounting law (Act No. 563/1991 Coll.). Account profile data is deleted within 30 days of account closure unless a legal obligation requires longer retention.
2.3 Platform and Operator Data
Data collected: Tour content, booking records, customer information, and configuration data that you or your customers input into the platform you operate through Inteliva.
Purpose: To deliver the platform service you have subscribed to.
Legal basis (Art. 6(1)(b)): Processing is necessary for the performance of your subscription contract.
Data custody: Your platform data is stored securely within Inteliva's managed infrastructure. You retain full ownership of your business data. Upon cancellation, you may request a full export in a standard machine-readable format. After the export window, your data is permanently deleted in line with our retention schedule.
Your end-customers' data: With respect to the personal data of your own tour guests, you are the data controller and Inteliva acts as a data processor on your behalf, processing that data solely to deliver the platform service. We do not use your customers' data for any other purpose.
2.4 Website Analytics
Data collected: Anonymised usage data — pages visited, session duration, device type, approximate geographic location (country level), and referring URL.
Purpose: To understand how visitors use our website so we can improve it.
Legal basis (Art. 6(1)(f) / Art. 6(1)(a)): Our legitimate interest in improving the website. Where required, we rely on consent obtained through our cookie banner.
Retention: Aggregated analytics data retained for 26 months, then automatically deleted.
3. Data Sharing and Processors
We do not sell, rent, or trade your personal data. We share data only with the following trusted processors who act strictly on our instructions and are bound by data processing agreements:
| Processor | Purpose | Safeguards |
|---|---|---|
| Stripe | Subscription billing and payment processing | EU Standard Contractual Clauses (SCCs) |
| Firebase / Google Cloud | Managed database and platform hosting | EU data region; Google Cloud DPA |
| Resend | Transactional email delivery | EU Standard Contractual Clauses (SCCs) |
| Google Analytics | Anonymised website usage analytics | EU Standard Contractual Clauses (SCCs) |
| Telegram | Internal admin notifications only — no personal client data transmitted | — |
We may also disclose your data where required by law, court order, or a competent authority.
4. International Transfers
Where data is transferred outside the European Economic Area (EEA) — for example to US-based service providers — we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) approved by the European Commission. Google Cloud data is processed within EU regions wherever available.
5. Your Rights Under the GDPR
If you are located in the EU or EEA, you have the following rights. To exercise any of them, email us at hello@inteliva.com. We will respond within 30 days (extendable by 60 days in complex cases, with prior notice).
| Right | What it means |
|---|---|
| Access (Art. 15) | Request a copy of all personal data we hold about you |
| Rectification (Art. 16) | Request correction of inaccurate or incomplete data |
| Erasure (Art. 17) | Request deletion of your data where there is no lawful basis for continued processing |
| Restriction (Art. 18) | Request that we pause processing of your data in certain circumstances |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format or have it transferred to another controller |
| Objection (Art. 21) | Object to processing based on legitimate interests or direct marketing |
| Withdraw consent (Art. 7(3)) | Withdraw consent at any time, without affecting the lawfulness of prior processing |
Supervisory authority: You have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů — ÚOOÚ) at www.uoou.cz, or with the supervisory authority in your country of residence within the EU/EEA.
6. Cookies
6.1 What Are Cookies
Cookies are small text files placed on your device by a website. We use them to make our site function correctly and to analyse usage.
6.2 Types of Cookies We Use
| Category | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Session management, security, basic functionality | No |
| Analytics | Anonymised usage statistics (Google Analytics) | Yes |
6.3 Managing Cookies
You can manage your cookie preferences at any time via the cookie banner on this website. You may also control or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the site.
7. Security
We implement appropriate technical and organisational measures to protect your data, including encrypted storage, HTTPS/TLS encryption for all data in transit, and access controls restricted to authorised personnel. No internet transmission is 100% secure; while we take all reasonable precautions, we cannot guarantee absolute security.
8. Children's Privacy
Our services are directed at businesses and are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal obligations. The updated version will be posted on this page with a revised “Last updated” date. For material changes, we will notify active subscribers by email at least 30 days before the new version takes effect.
Questions about this policy? hello@inteliva.com