Privacy Policy

Last updated: 25 October 2026

The short version

We hold only what you send us yourself: the booking form, or your email address if you sign up for our emails under an article. Google Analytics sets cookies only after you allow it in the cookie banner. Nothing is sold or shared for advertising.

Who we are

Světlo ve tmě s.r.o., Lomec 61, 286 01 Úmonín, Czech Republic. Company ID 05955891. Email info@lecba-tmou.cz, phone +420 608 083 333.

What we collect, and why

When you send the booking form

We receive your name, email address, phone number, the stay you are asking about, and anything you write in the message field. We use it for one thing: to answer you and, if you decide to come, to arrange your stay. The legal basis is our legitimate interest in responding to an enquiry you sent us, and, once you book, performance of a contract with you.

Enquiries are stored in this website’s database and in our email. We keep them for three years from your last contact with us, then delete them. If you tell us in your message about a health condition, that is sensitive data and we treat it as such: it is used only to advise you honestly about whether a stay is a good idea, and it is never passed on.

When you sign up for our emails

Under our articles you can ask us to send you emails: about once a week participants’ experiences – what they took away from the darkness – along with free dates, offers and news from the centre. We send them only if you want them. After you sign up we email you a link; your sign-up counts only once you confirm it with the button on the page that link opens. Until then we send you nothing, and an unconfirmed address is deleted within 7 days.

We keep your email address, the language you signed up in and the website you signed up on, so that every link in our emails leads back here. The legal basis is your consent (Article 6(1)(a) GDPR). The emails come in three topics: Offers and free dates, News from the centre and Participants’ experiences. Every email has a link to your subscription settings on this website, where you can keep only some topics or unsubscribe from all of them with one click; the “Unsubscribe” button in Gmail and other mail apps works too, and so does writing to info@lecba-tmou.cz. After you unsubscribe we keep your address only on a “do not send” list, so that nothing reaches you again.

For every consent and unsubscription we keep a record: when it happened, from which IP address and page, in which browser, and the exact wording you saw. We keep the record for as long as we send you emails and for 4 years after that, to be able to show that you agreed.

When you just read the site

Our web server keeps standard access logs containing your IP address, the page requested, and your browser identification. They exist to keep the server running and secure, and are deleted after 30 days. We use Google Analytics to see which pages are read. It sets analytics cookies only after you allow statistics in the cookie banner; without that, nothing is sent to Google. Details and your choices are in our cookie policy. There is no advertising pixel and no social media widget.

We also count visits ourselves, without cookies and without storing your IP address or browser identification: which page was opened, how far it was scrolled and how long it stayed open. The code that tells one visit from another changes every day, so visits from different days cannot be linked to each other. This data stays on our server and is not passed to anyone. The legal basis is our legitimate interest in knowing which parts of the site are read (Article 6(1)(f) GDPR).

Who else sees it

Nobody buys this data, and we do not sell, rent or trade it. It is handled by our hosting provider (DigitalOcean, servers in the EU) and our email provider, both acting on our instructions only. Bookings and email sign-ups are kept in the booking system is.lecba-tmou.cz, which we share with our sister companies run by the same managing director. Our emails are delivered by Amazon Web Services EMEA SARL (Amazon SES, servers in the EU – Stockholm). Google Ireland Limited provides Google Analytics; data may be transferred to the United States under the EU–US Data Privacy Framework.

Our servers are in the European Union. If you write to us from the United States, your enquiry is therefore transferred to and stored in the EU, under the protections described here.

Your rights

Write to info@lecba-tmou.cz and we will act on any of these within 30 days: ask what we hold about you, get a copy of it, have it corrected, have it deleted, or object to our using it at all. You can withdraw your consent to our emails at any time, without affecting what was done before. You do not have to give a reason and there is no charge.

Under the EU GDPR you may also complain to a supervisory authority; in the Czech Republic that is the Úřad pro ochranu osobních údajů (uoou.cz).

Do Not Sell or Share My Personal Information

If you are a California resident, this is where a business would normally give you an opt-out. We do not sell or share personal information as those terms are defined under the CCPA and CPRA, and we never have, so there is nothing to opt out of. California residents have the same rights of access, correction and deletion described above, exercised the same way — by emailing us. We will not discriminate against you for asking.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted here rather than made quietly.