GDPR
Last updated: 2026-07-06
This page summarises your rights under the General Data Protection Regulation (EU) 2016/679 and how to exercise them. It complements our Privacy Policy.
Data controller
CandyShop AFTER DARK, Maiselova 76/12, 110 00 Praha 1, Czech Republic. Email: info@erotic-massage-prague.com. Phone: +420 775 445 442.
Legal bases we rely on
Performance of a contract (Art. 6(1)(b)) — to provide a reservation you request.
Legitimate interests (Art. 6(1)(f)) — to answer enquiries and run a secure website.
Consent (Art. 6(1)(a)) — where you have explicitly given it; you may withdraw it at any time.
Your rights
Right of access — obtain confirmation and a copy of the data we hold about you.
Right to rectification — have inaccurate data corrected.
Right to erasure ('right to be forgotten') — have your data deleted where there is no overriding reason to keep it.
Right to restriction — limit how we use your data in certain cases.
Right to data portability — receive your data in a machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — at any time, where processing is based on consent.
How to exercise your rights
Contact us at info@erotic-massage-prague.com or +420 775 445 442. We will respond without undue delay and within one month at the latest. There is normally no charge.
Complaints
If you believe we have handled your data unlawfully, you may lodge a complaint with the Czech Data Protection Authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.