Privacy policy
Last updated: 28/09/2026
We value your trust. This page explains what personal data we process when you visit turet.cz, book a table, sign up for a tasting, buy a voucher or write to us. We only process what we really need.
1. Controller
The controller of your personal data is TURET PRAGA s.r.o., company ID (IČO) 19924828, VAT ID CZ19924828, registered office Dlouhá 715/38, Staré Město, 110 00 Praha 1, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 393823, operator of TURET Wine Bar & Bistro, Lublaňská 695/30, 120 00 Praha 2.
For questions about your personal data, contact us at info@turet.cz, by phone at +420 602 357 632 or by post to our registered office. We have not appointed a data protection officer as we are not legally required to.
2. What data, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Table reservations | name, e-mail, phone, date and time, number of guests, note (e.g. celebration, allergies if you mention them) | performance of a contract (Art. 6(1)(b) GDPR); for allergy information, your explicit consent by providing it | 1 year after the reservation date, then anonymised |
| Tastings and events | name, e-mail, phone, booked place, payment | performance of a contract; accounting and tax obligations (Art. 6(1)(c)) | attendance: 1 year after the event; payment records: 10 years (Czech accounting and VAT acts) |
| Gift vouchers | buyer’s name and e-mail, recipient’s name if given, voucher code and validity, payment | performance of a contract; accounting and tax obligations | until the voucher expires plus 1 year; payment records 10 years |
| Contact and enquiry forms (corporate events, celebrations, partnerships) | name, e-mail, phone, company, message, event details | steps prior to a contract at your request (Art. 6(1)(b)), otherwise our legitimate interest in replying (Art. 6(1)(f)) | 1 year after handling, unless a contract follows |
| QR code payments and matching | payer’s name, account number, amount, variable symbol, payment message | performance of a contract; accounting and tax obligations | 10 years |
| Service e-mails (reservation confirmations, tickets, vouchers) | e-mail, name, message content, sending log | performance of a contract | sending log 1 year |
| Customer account (if you create one) | e-mail, name, optionally phone and language, date of creation and last sign-in, the history of your reservations, tastings, vouchers and orders with the same e-mail, code for the till, consent history | performance of a contract (Art. 6(1)(b)); loyalty programme and news only with your consent | until you delete the account (in account settings), then anonymisation; documents for the statutory periods |
| News and invitations (once we start sending them) | e-mail, name, language | your consent (Art. 6(1)(a)), which you can withdraw at any time | until consent is withdrawn |
| Website traffic statistics | pages visited, where you came from, language, device and browser type, approximate country; we do not store your IP address | legitimate interest in improving the website (Art. 6(1)(f)); statistics cookies only with your consent | detailed records 30 days, then only anonymous daily totals |
| Record of your cookie consent | time, text version, your choice, random ID from the consent cookie, device type; no IP address | legal obligation to demonstrate consent (Art. 7(1) GDPR) and legitimate interest | while the consent is valid plus 3 years |
| Server security and operation | IP address, time and URL of the request in the server’s technical logs | legitimate interest in security (Art. 6(1)(f)) | max. 14 days |
We do not use your data for anything other than stated above. We do not sell it, we do not use it for advertising on other websites, and we do not make automated decisions about you or profile you. Providing your data for reservations, tastings and vouchers is necessary to conclude and perform the contract; without it we cannot process your booking or order.
3. How we measure traffic
We use our own traffic measurement running on our server. We do not use Google Analytics, Meta Pixel or any other third-party tools. Without your consent we only measure anonymously: we store nothing on your device (no cookies, no localStorage) and your browser only sends us the page address, the link you came from, any campaign parameters (UTM) and the time spent on the page. We estimate the number of visitors using a fingerprint calculated from your IP address and browser type with a random key that changes every day; neither your IP address nor fingerprints from previous days can be recovered. We determine your approximate country from the IP address on our server (using the DB-IP database) without storing the IP address.
With your consent to statistics cookies we also store a cookie that tells us you have visited before, and we use technical browser details (screen width, touch screen) that help us tell people from automated programs (bots). You can change or withdraw your consent at any time in the cookie settings.
4. Who works with the data (processors and recipients)
- Supabase, Inc. (USA): database and sign-in to the administration and to customer accounts; data stored in a data centre in the EU (Ireland).
- Google Ireland Limited (Ireland): only if you sign in to your account with Google. Google passes us your name and verified e-mail; for the sign-in itself it is an independent controller under its own policy.
- Resend, Inc. (USA): sending automatic e-mails from the website (reservation confirmations, tickets, vouchers, account sign-in links).
- Apple Distribution International Ltd. (Ireland): our @turet.cz mailboxes (iCloud+ with our own domain), i.e. the e-mails you exchange with us (e.g. at info@turet.cz). Apple may also store and process data in the USA (Apple Inc.).
- Hostinger International Ltd. (Cyprus): rental of the server running the website; the server is located in a data centre in the USA (Boston).
- Fio banka, a.s. (Czech Republic): our bank account and incoming payments; we only read payment data to match it with your order.
- Our accountant or tax adviser, if we use one, to the extent of accounting records.
- Public authorities where required by law (e.g. tax office, court).
We have data processing agreements with our processors, or terms of service that include them (Art. 28 GDPR). Transfers to the USA are safeguarded by the European Commission’s standard contractual clauses (Supabase, Resend, Apple, Hostinger); Resend is also certified under the EU-US Data Privacy Framework.
5. Your rights
- access to your data and a copy of it (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16),
- erasure (“right to be forgotten”, Art. 17), unless we are legally required to keep it,
- restriction of processing (Art. 18),
- portability of data you have provided to us (Art. 20),
- objection to processing based on legitimate interest (Art. 21),
- withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal,
- a complaint to the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
Just write to info@turet.cz. We will reply without undue delay and within one month at the latest. To make sure we do not disclose data to someone else, we may ask you to verify your identity.
6. Persons under 18
This website features alcoholic drinks and is intended for persons aged 18 and over. We do not knowingly collect data of persons under 18.
7. Security
The website runs only over an encrypted connection (HTTPS), only the operator has access to the data, and the database is protected by access control. Data from the test environment is never mixed with live data.
8. Changes to this policy
We may update this policy, for example when we add a new service (we are preparing an online shop). The current version is always on this page; we will inform you about significant changes on the website.
This English version is a translation; in case of doubt, the Czech version prevails.