Skip to content

Cookies and privacy

Last revised

We measure basic traffic with Google Analytics without cookies, even without your consent; Google learns your IP address and browser details in the process. Detailed analytics and advertising measurement run only with your consent. The Google map of our mooring loads as soon as the homepage opens. Below is an overview of what happens to your data, why, and for how long.

Who controls the data

The controller of data processed through this website is LoFi clothin s.r.o., company number (IČO) 29021804, VAT ID CZ29021804, registered at Za zámečkem 744/9, Jinonice, 158 00 Prague 5, Czech Republic, the operator of the VIP Living houseboat trading as VIPLIVING. The contact person is Jitka Godany.

What we process and why

Bookings and communication

When you fill in the booking form or contact us by email, telephone or WhatsApp, we process the information you give us: name, email, telephone, requested date, number of guests and your note to the booking. The booking is stored on our own server in Germany, that is, within the European Union. We use it to answer your enquiry, to prepare and perform the booking, and to meet the obligations that follow from it.

Legal basis: steps taken before entering into a contract and performance of a contract; legal obligation for accounting documents.

Event enquiries

When you send the enquiry form (company event, celebration, photo shoot, wedding or other), we process your name, e-mail, phone number, type of event, date, number of guests and the text of your message. The enquiry is stored on our server, the boat team receives it by e-mail and you get a short confirmation. We use it to prepare an offer and arrange the event.

Legal basis: steps taken at your request before entering into a contract. We keep the enquiry for 12 months after it was sent.

Gift vouchers

When you buy a gift voucher, we process the buyer’s details (name, e-mail, phone number) and what you choose to write on the voucher: the recipient’s name, who it is from and a dedication. We do not require the recipient’s details; the only personal details on the voucher are the ones you fill in (alongside the experience, its value and the code). We send you the voucher by e-mail as a PDF with a code that is redeemed in the booking system.

Legal basis: performance of a contract; legal obligation for accounting documents.

Payment of the deposit and vouchers

The deposit and gift vouchers are paid through Stripe Checkout. After you submit the booking or order you are taken to checkout.stripe.com, where you enter your payment details directly with Stripe – the card number never reaches us and we do not store it. Stripe tells us whether the payment went through.

Legal basis: performance of a contract; legal obligation for accounting and tax records.

Security and technical operation

The server running this website records technical details of requests: IP address, time, requested URL and browser identifier. The booking and enquiry forms and the voucher order are protected by Cloudflare Turnstile against bots – without it the forms would fill up with spam and genuine enquiries would be lost in them. Both serve security, error diagnosis and reliable operation.

Legal basis: legitimate interest in operating the website securely and in protecting the forms from misuse.

Google Analytics 4 runs in Consent Mode, in which analytics and advertising storage are denied by default. Even without a choice in the cookie bar and after a refusal, Google therefore receives a limited signal about the page view and the state of your choice: without cookies, without identifiers from the link and with the page address stripped of parameters. The transfer still includes the technical data needed for communication, mainly the IP address and browser details, so this is not operation without passing data to Google. We pass nothing from the forms and no booking numbers into this measurement.

Legal basis: legitimate interest in basic statistics of website traffic. You can object to this processing by writing to booking@vipliving.cz.

With consent to analytics we turn on Google Analytics 4 with cookies: detailed measurement of visits and of the booking flow. We also turn on PostHog: it records where you click, how far you scroll, how fast pages load, page errors and your path through the website as a screen recording. The recording masks form fields and the details in the booking, voucher order and enquiry, so what you type does not get into it. PostHog stores the data in the EU (Frankfurt) and connects to the website through our subdomain m4v.vipliving.cz. With consent to marketing we turn on Google Ads, Meta Pixel and Seznam.cz retargeting: they measure which advertisement brought you here and allow advertising to be targeted outside this website. Without marketing consent their scripts do not load at all. Consent is voluntary; refusing it affects neither your booking nor ordinary use of the website.

Enhanced conversions and matching. With your marketing consent, after a completed booking, voucher purchase or enquiry we also send your e-mail and phone number to Google (Google Ads enhanced conversions) and to Meta (Meta Pixel advanced matching). The Google tag and the Meta pixel turn them into a hashed fingerprint (SHA-256) in your browser before sending, by which the event is matched to the advertisement. For a booking, the fingerprint for Google is computed by our server and the thank-you page only passes it on.

Transfer from our server. With the same consent, after a booking, voucher purchase or enquiry our server also sends a record of that event to Meta (Conversions API): the booking, order or enquiry number, the amount, identifiers from your browser (_fbp, _fbc), the IP address, the browser identifier and your hashed e-mail, phone number, first name, last name and country. With consent to analytics our server may also pass the booking or purchase to Google Analytics, without contact details. We therefore store with each booking, voucher and enquiry what you consented to, and only with that consent the identifiers from your browser and from the ad click, the source of the visit (UTM, referring website, landing page) and, with marketing consent, the IP address and browser identifier. Without the relevant consent none of this is stored or passed on.

Legal basis: your consent. You can withdraw it at any time through the Cookie settings link in the footer.

Technologies used

Category Technology Purpose Duration
Essential vipLivingConsentV1 in localStorage Stores your choice from the cookie bar so the website does not ask on every visit. 12 months after consent, 6 months after a refusal; then we ask again
Essential vipliving:navrat in sessionStorage The booking or voucher order number from the return from Stripe (together with the signature that unlocks the status of the order or booking), so the page can show it after a reload; we remove it from the page address. Until the tab is closed
Essential vipliving:poukaz-koncept in sessionStorage A gift voucher order in progress (experience, dedication, name, e-mail, phone and order number), so you do not have to fill it in again after a cancelled payment. Until the voucher is paid, at most until the tab is closed
Essential Cloudflare Turnstile Verifies that the booking and enquiry forms and the voucher order are not being submitted by a bot. Loads on those pages only. For the duration of the check
Payment Stripe Checkout Payment of the deposit or voucher at checkout.stripe.com. On Stripe’s domain, per its policy
Basic measurement Google Analytics 4 in Consent Mode; measurement ID G-HET63D722T Page-view signal without cookies and without identifiers. Runs even without consent. Stores nothing
Analytics Google Analytics 4, usually _ga and _ga_* Detailed measurement of visits and of the booking flow. Consent only. 12 months – the cookie must not outlive the consent that allowed it
Analytics PostHog, ph_* in localStorage and sessionStorage Clicks, scrolling, loading speed, page errors and a recording of your path through the website with forms masked. Consent only. Until consent is withdrawn, at most 12 months; deleted on withdrawal
Analytics and marketing vipliving:puvod and vipliving:konverze in sessionStorage Source of the visit (UTM, referring website, landing page; with marketing also the ad click identifier) and the booking or voucher value for measurement on the thank-you page; with marketing also e-mail and phone for enhanced conversions. Consent only. Until the conversion is sent, at most until the tab is closed
Analytics and marketing vipliving:nakupy in localStorage Numbers of recent bookings and purchases already sent to measurement, so a page reload does not count them twice. Consent only. Last 20 numbers; deleted when consent is withdrawn
Marketing Google Ads, usually _gcl_au and _gcl_aw Measures conversions from Google advertising (booking, voucher, enquiry, click on phone, e-mail and WhatsApp) including enhanced conversions. Marketing consent only. 90 days
Marketing Meta Pixel, usually _fbp and _fbc Measures conversions from advertising on Facebook and Instagram and matches them to the advertisement. Marketing consent only. 90 days
Marketing Seznam.cz retargeting, ID 66960 Evaluation and targeting of advertising outside this website. Marketing consent only. According to Seznam.cz settings
External content Google Maps Shows the mooring. Loads as soon as the homepage opens: your browser connects to Google’s servers and Google learns your IP address and browser details. No click is required because this is displayed content, not tracking – Google may still set its own cookies under its policy. On Google’s domain, per its policy

The fonts are hosted on our own server, so displaying the page does not connect you to any third party. Apart from the technologies listed in the table above, the website loads no third-party scripts or libraries. When you open a WhatsApp, Facebook, Instagram or Google Maps link, you move to that provider’s service and its terms apply from that point on.

You can change your choice from the cookie bar at any time through the Cookie settings link in the footer.

Providers and transfers of data

  • Google Ireland Limited – Google Analytics 4 (basic measurement even without consent, detailed with consent), Google Ads (marketing consent only) and Google Maps. Google Privacy Policy.
  • Meta Platforms Ireland Limited – Meta Pixel and Conversions API, marketing consent only. Meta Privacy Policy.
  • PostHog Inc. – PostHog, analytics consent only. Stores the data in the EU (Frankfurt); the connection through the subdomain m4v.vipliving.cz is provided for PostHog by Cloudflare. PostHog Privacy Policy.
  • Seznam.cz, a.s. – retargeting, only after marketing consent. Seznam privacy information.
  • Stripe Payments Europe – processing of the deposit and gift voucher payments. Stripe Privacy Policy.
  • Cloudflare – Turnstile, protection of the forms against bots. Cloudflare Privacy Policy.
  • Our server provider – operation of the website and the booking system; the server is located in Germany.
  • Resend – sending the booking confirmation, the reminder before your date, the thank-you message after your stay, the gift voucher PDF and the enquiry confirmation. The e-mail contains your name, e-mail address, details of the date or voucher and the text of your note or message, if you wrote one. Resend Privacy Policy.
  • Telegram – operational alerts to the operator about new and cancelled bookings. Your name, phone number, date and amount are sent; the text of your note is not, the operator only learns that you wrote one.
  • Google Calendar – a record of when the boat is booked, accessible to the crew and the cleaning staff. No personal data of yours is sent there – only the product, the date, guest counts and extras.

Some providers may process data outside the European Economic Area. Such transfers are governed by the safeguards that the provider concerned describes in its own privacy information.

How long we keep the data

The booking system deletes personal data in layers rather than all at once. The more sensitive the item, the shorter the period.

  • Your choice from the cookie bar – 12 months after consent, 6 months after a refusal. After that we ask again.
  • Your note to the booking – 14 days after your stay ends, then it is deleted. People write allergies and health limitations into it, so it has the shortest period of all.
  • Phone number – 30 days after your stay ends. Until then we may need to reach you about the weather or a complaint.
  • Name and e-mail on the booking – 36 months, matching the three-year limitation period under Section 629 of the Czech Civil Code.
  • Date, guest counts and amounts – kept after the identity is erased. Without a name and e-mail they no longer identify a person, and they feed the local accommodation fee return and the accounts.
  • Payment records – at Stripe and in our accounts for the period required by accounting and tax rules (accounting records 5 years, tax records 10 years).
  • Enquiries sent through the form – 12 months after sending, then they are deleted.
  • Unpaid gift voucher order (payment not completed or cancelled) – 30 days, then it is deleted entirely.
  • Paid gift voucher – the recipient’s name, the signature and the dedication until the voucher expires; the buyer’s name, e-mail and phone 36 months after the voucher expires, the same limitation period as for a booking. Payment records as required by accounting and tax rules, as above.
  • Measurement data with a booking, voucher or enquiry – IP address and browser identifier 7 days; identifiers from the browser and the ad click (gclid, _fbp, _fbc, Google Analytics ID) 90 days. The record of a sent conversion, without personal data, 30 days after sending.
  • Data in PostHog – recordings of your path through the website at most 90 days, other visit data at most 7 years.
  • Enquiries by e-mail, phone or WhatsApp that did not end in a booking – for as long as needed to handle the communication.
  • Technical server logs – 14 days, for diagnostics and security.
  • Database backups – 30 days at most, then they are overwritten.

Your rights

You have the following rights in respect of your data:

  • access – to know what data we process about you,
  • rectification of inaccurate data,
  • erasure,
  • restriction of processing,
  • portability of the data you gave us yourself,
  • objection to processing based on legitimate interest,
  • withdrawal of consent at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Write to booking@vipliving.cz or call +420 737 466 586. You can also withdraw consent to analytics and marketing yourself, through the Cookie settings link in the footer.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, the supervisory authority for the processing carried out on this website.

Back to the home page

Cookie settings

You can change the optional categories at any time. Essential storage stays on because it keeps this very choice.

Consent lasts 12 months. You can change it any time through the Cookie settings link in the footer. Cookies and privacy