Aurora

Privacy policy

How FindAdventure collects, uses and protects your personal data – including sign-in with Google or Facebook, cookies and advertising.

Effective date: 3 November 2026

This privacy policy explains how FindAdventure s.r.o. ("FindAdventure", "we", "us") collects and uses personal data when you visit findadventure.eu, book an experience, create an account, sign in with Google or Facebook, or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Czech law.

1. Who is responsible for your data

FindAdventure s.r.o., ID No. 17691079, registered office Alžírská 1514/7, 708 00 Ostrava, Czech Republic.

Contact for all privacy matters: info@findadventure.eu, phone +420 731 082 290.

2. What data we collect and why

Bookings and payments

When you book an experience we collect your name, e-mail, phone number (optional), number of guests and their age category, the selected date, add-ons and – if you need an invoice – company name and company ID. We use this data to process your booking, send you the confirmation and voucher, give the guide the information needed for your tour, and to issue accounting documents. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations in accounting (Art. 6(1)(c)).

Payments are processed by Stripe. We never see or store your full card number – card data is entered directly on Stripe’s secure payment page. We receive only the payment status and a payment reference.

Customer account

If you create an account we store your e-mail, name, password (only as a secure hash), preferred language and your bookings, so you can manage them. Legal basis: contract (Art. 6(1)(b)).

Sign in with Google or Facebook

If you choose to sign in with Google or Facebook, we receive from that provider only your name, e-mail address and, where available, your profile picture and the provider’s user ID. We use this data solely to create and secure your FindAdventure account and to let you sign in. We do not post anything on your behalf, we do not access your contacts, friends, photos or other data, and we do not use this data for advertising.

FindAdventure’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Inquiries and messages

When you send a group or company inquiry or write to us, we use your contact details and message to answer you and prepare an offer. Legal basis: steps prior to entering into a contract and our legitimate interest in answering you (Art. 6(1)(b) and (f)).

Newsletter

Only if you tick the box, we send you occasional news and offers by e-mail. You can unsubscribe at any time via the link in every e-mail. Legal basis: consent (Art. 6(1)(a)).

Cookies, analytics and advertising

Strictly necessary cookies keep the website working (e.g. language, sign-in, booking in progress) and do not require consent. Only with your consent we use analytics and marketing tools – Google Analytics, Google Ads and the Meta (Facebook) Pixel – to measure visits, understand which pages are useful and show relevant ads on Google, Facebook and Instagram. These tools may set cookies and receive information such as pages visited, device and browser type, approximate location and – for conversions – that a booking took place. You can give, refuse or withdraw consent at any time in the cookie settings on the website. Legal basis: consent (Art. 6(1)(a)).

Security and operation

Our servers keep technical logs (IP address, time, requested page) for a short time to keep the service secure and to investigate errors. Legal basis: legitimate interest (Art. 6(1)(f)).

3. Who we share data with

We share personal data only when necessary and only with:

We never sell your personal data.

4. Transfers outside the EU

Some providers (Stripe, Google, Meta) may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

5. How long we keep data

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. To use any of these rights, write to info@findadventure.eu. We reply within 30 days.

You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

7. Deleting your data

You can ask us to delete all your personal data at any time – see our data deletion instructions. Data we must keep by law (e.g. invoices) is kept only for the legally required period and is not used for anything else.

8. Children

Bookings can only be made by adults. Data about children (age category for tickets) is provided by their parent or guardian and used only to run the tour.

9. Security

All communication with the website is encrypted (HTTPS). Access to data is limited to authorised staff, passwords are stored only as secure hashes and we keep regular backups within the EU.

10. Changes to this policy

We may update this policy, for example when we add new services. The current version is always available on this page with its effective date.