Last updated: September 2026
1. Data Controller
Léčebné lázně Mariánské Lázně a.s. Company ID (IČO): 45359113 Tax ID (DIČ): CZ45359113 Masarykova 22/5 353 01 Mariánské Lázně, Czech Republic Email: webmaster.cz@ensanahotels.com
2. Data Collection
Server Logs
Our hosting provider (Vercel) automatically collects information in server log files: browser type/version, operating system, referrer URL, hostname, and time of the request.
Newsletter
If you subscribe to our newsletter (e.g. via the form on the website), we process your email address and language preference on the basis of your voluntary consent (Art. 6(1)(a) GDPR) to send you the newsletter. When you enter a competition, we process your first name, last name and email to run the competition and contact winners on the basis of the performance of a contract arising from your acceptance of the competition terms (Art. 6(1)(b) GDPR); here too, sending the newsletter is based solely on your separate, voluntary consent (Art. 6(1)(a) GDPR), independent of taking part. For these purposes the data may be shared with our processors, in particular MailerLite (storage and management of contacts) and VirtualZoom (newsletter delivery), under concluded data-processing agreements. Where a processor is established outside the European Economic Area, transfers take place only under the conditions set out in Chapter V of the GDPR (in particular the European Commission's Standard Contractual Clauses or an adequacy decision). Newsletter data is kept until consent is withdrawn; competition data for the duration of the competition and the settlement of claims. You can withdraw newsletter consent free of charge at any time.
3. Cookies and Analytics
We measure traffic in two ways:
- Vercel Web Analytics — cookie-free measurement without consent. No identifier is stored in your browser and no visitor profile is built; we count page views, traffic source, country and device type. The legal basis is our legitimate interest in operating and improving the website (Art. 6(1)(f) GDPR).
- Google Analytics 4 — loaded only after your consent in the cookie banner (Art. 6(1)(a) GDPR). Without consent nothing is sent to Google and no cookies are set. IP addresses are anonymised. You can withdraw consent at any time via "Cookie settings" in the footer; the
_gacookies are then deleted.
The website uses no other tracking cookies or advertising networks.
4. Third-Party Services
- OpenStreetMap — interactive destination map (Leaflet.js)
- Vercel Web Analytics — cookie-free web analytics
- Google Analytics 4 — only after consent (see section 3)
No data is transmitted to Facebook or other advertising networks.
5. Your Rights
You have the right to access, rectify, delete, restrict the processing of, and port your personal data, to object to processing, and — where processing is based on consent — to withdraw consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal). Contact: webmaster.cz@ensanahotels.com.
You also have the right to lodge a complaint with the supervisory authority — Úřad pro ochranu osobních údajů (Czech Data Protection Authority), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
The detailed Ensana Group privacy policy, setting out all the details, is available at ensanahotels.com.
6. Hosting
This website is hosted by Vercel Inc. (Region: Frankfurt, EU).
