Information We Collect

The specific information we collect depends on how you interact with us. We aim to collect only the data that is reasonably necessary to manage reservations, communicate with you, and operate a safe, welcoming venue.

How We Use Your Information

We process personal data only for clear, legitimate purposes connected to our hospitality and poker salon operations, and we avoid using it in ways that are incompatible with those purposes.

• Managing reservations and seating – to accept, confirm, and manage bookings for dining, poker nights, and special events, including any updates or changes you request.
• Communicating with you – to respond to questions, provide booking confirmations, clarify preferences, or share relevant pre‑visit information about our gastropub, poker salon, or venue access.
• Improving guest experience – to refine our menu, service, and poker offerings based on aggregated feedback and typical guest preferences.
• Operating a safe and compliant venue – to help us meet legal and regulatory requirements in the Czech Republic, including those relating to hospitality, safety, and age‑restricted areas.
• Website performance and security – to monitor site performance, prevent misuse, and maintain the reliability of https://cesstria.com.
• Marketing and updates (optional) – if you explicitly opt in, to send you occasional updates about seasonal menus, special poker nights, or venue events. You can opt out at any time using the instructions in each message.

Legal Basis for Processing

Cesstria processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). Depending on the context, we rely on one or more of the following legal bases:

• Performance of a contract or steps taken at your request – when we process your information in order to manage reservations, prepare for an event, or otherwise provide the services you have requested from us.
• Legitimate interests – when we process data to operate and improve our hospitality business, customise guest experiences, ensure venue security, and maintain the proper functioning of our website, provided that these interests are not overridden by your rights and freedoms.
• Compliance with legal obligations – when we are required to retain or disclose certain information to meet obligations under Czech or EU law (for example, accounting, taxation, or safety regulations).
• Consent – when you voluntarily choose to receive marketing communications or where we rely on cookies that require consent. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

We do not sell your personal data and we do not share it with third parties for their independent marketing purposes. Any sharing is limited, purpose‑driven, and subject to appropriate safeguards.

• Trusted service partners – we may share limited data with carefully selected providers who help us deliver our services, such as reservation management tools, event scheduling platforms, website hosting, or email delivery. These partners process data solely on our instructions and under data protection agreements.
• Professional advisers – such as legal, accounting, or compliance consultants where necessary to protect our legitimate interests and meet our obligations.
• Public authorities and law enforcement – where we are required to disclose information in response to valid legal requests or to comply with applicable laws or regulations.

When we engage any third‑party service provider, we take steps to ensure they implement appropriate security measures and process personal data only as needed to support our offline hospitality and poker salon operations.

Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or for longer where required or permitted by law. The specific retention period depends on the type of data and context of collection.

• Reservation and booking records – typically retained for a limited period after your visit to manage follow‑up questions, handle disputes, and support our operational planning.
• Event and private hire information – retained for the duration of the booking cycle and for a reasonable period afterwards for accounting, reporting, and feedback purposes.
• Correspondence and enquiries – kept for a period that allows us to respond, track the history of your requests, and maintain service quality records.
• Marketing preferences – kept until you opt out or withdraw consent, after which we retain only a record of your opt‑out where necessary to honour your choice.
• Technical and log data – retained for security and operational purposes for a limited period, unless a longer retention is required in connection with an investigation or legal requirement.

When data is no longer required, we delete it or anonymise it so that it can no longer be linked to you.

Website Cookies & Tracking

Cookies are small text files placed on your device when you visit a website. They help us ensure that https://cesstria.com functions correctly and can also provide insights into how visitors use our content so we can refine the experience.

Your Privacy Rights

Under applicable data protection laws, including the GDPR, you have a range of rights in relation to your personal data. Subject to certain conditions and exemptions, these include the right to:

• Access – request confirmation of whether we process your personal data and receive a copy of that data.
• Rectification – ask us to correct inaccurate or incomplete information about you.
• Erasure – request deletion of your personal data where there is no longer a valid basis for us to keep it.
• Restriction – request that we temporarily limit the processing of your data in certain circumstances.
• Objection – object to processing carried out on the basis of legitimate interests, including profiling related to those interests, and to direct marketing.
• Data portability – in some cases, receive your data in a structured, commonly‑used, machine‑readable format and have it transmitted to another controller where technically feasible.
• Withdraw consent – where processing is based on your consent, withdraw that consent at any time.

To exercise any of these rights, or to raise a question about how your data is handled, please contact us using the details in the Contacting Us About Privacy section or via the Contact Us page.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Security Measures

We take data security seriously and implement appropriate technical and organisational measures to help protect your personal information against unauthorised access, alteration, disclosure, or destruction.

• Technical safeguards – use of secure hosting environments, access controls, encryption or pseudonymisation where appropriate, and measures to keep our systems up to date.
• Organisational safeguards – limiting access to personal data to staff and trusted partners who need it to perform their duties, supported by confidentiality obligations and training on data protection principles.
• On‑site practices – reasonable steps to avoid unnecessary exposure of guest details in shared spaces and to store physical records securely.

While we strive to protect your data, no system can be completely secure. If we become aware of a data incident that may pose a high risk to your rights and freedoms, we will take appropriate steps in line with legal requirements, which may include notifying you and relevant authorities.

International Data Transfers

Cesstria operates as a physical venue in the Czech Republic, and the primary location for processing guest data is within the European Economic Area (EEA). However, some of our carefully selected service partners (for example, hosting or email providers) may process data in countries outside the EEA.

Where such transfers occur, we take steps to ensure that your personal data remains protected. This may include relying on adequacy decisions by the European Commission or using standard contractual clauses and equivalent safeguards required under EU data protection law.

Third-Party Links

Our website may contain links to external websites, social media platforms, or resources that are not operated by Cesstria. For example, we may link to event listings, local partners, or media coverage about our gastropub and poker salon.

We are not responsible for the privacy practices, content, or security of these third‑party sites. When you follow a link to another website, you should review its privacy policy to understand how your information may be collected and used.

Contacting Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or would like more detail on how we handle your information, you can reach us using the following channels:

• Use the form on our Contact Us page to send a privacy‑related enquiry.
• Contact us via the editorial details available on the Editorial page if your request relates to website content or communications.
• Speak with a member of staff during your visit and let us know that your question concerns privacy or data protection.

When submitting a privacy request, please provide enough information to help us identify you and the nature of your query. We may ask for additional details to confirm your identity before fulfilling certain types of requests.

We may update this Privacy Policy from time to time to reflect changes in our operations, services, or legal obligations. The latest version will always be available on this page, and the date of the most recent update will be indicated below.

Last updated: 26 June 2026