PRIVACY PROTOCOL
Precision and absolute discretion are the core pillars of our operations. Learn how we secure your personal data.
1. Data Controller
The personal data controller is West Bohemian Armament Company, s.r.o., registered address Náměstí Republiky 6, 346 01 Horšovský Týn, Czech Republic, registered in the Commercial Register kept by the Regional Court in Plzeň, Section C, File 42830, Reg ID: 176 63 806.
2. Purpose of Processing
We process your data exclusively to coordinate lane bookings, fulfill shooting packages contracts, comply with legal storage requirements, and dispatch key operational notices.
3. Scope of Data
We only process essential contact info: name, e-mail address, telephone number, and gun permit status (for personal weapons coordination).
4. Your Rights
Under GDPR, you hold full rights to access, correct, delete (be forgotten), restrict, or object to personal data processing, alongside data portability privileges.
5. Legal Basis for Processing (Art. 6 GDPR)
| Processing Activity | Legal Basis | Note |
|---|---|---|
| Processing shooting range bookings | Art. 6(1)(b) — performance of a contract | Required to deliver the service |
| Sending confirmations and operational notices | Art. 6(1)(b) — performance of a contract | Part of the contractual relationship |
| Compliance with legal archiving obligations | Art. 6(1)(c) — legal obligation | Accounting and tax regulations |
| Sending commercial communications (newsletter) | Art. 6(1)(a) — consent | Consent may be withdrawn at any time |
| Website analytics (Google Analytics) | Art. 6(1)(a) — consent | Only after cookie consent is granted |
| CCTV security system | Art. 6(1)(f) — legitimate interest | Property protection and personal safety |
6. Data Retention Periods
| Data Category | Retention Period | Reason |
|---|---|---|
| Booking and contractual records | 5 years after contract termination | Statutory archiving obligation |
| Accounting documents and invoices | 10 years | Czech Accounting Act No. 563/1991 |
| Marketing consent (newsletter) | Until consent is withdrawn | Consent under Art. 6(1)(a) GDPR |
| CCTV footage | 72 hours | Legitimate interest — security |
| Analytics data (cookies) | Max. 13 months | Per Google Analytics settings |
7. Cookies — Full Breakdown
Our website uses cookies. Below is a complete overview of all cookies in use, their purpose, type, and duration.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| _ga | Distinguishes unique visitors (Google Analytics) | 2 years | Analytics |
| _ga_* | Maintains Google Analytics 4 session state | 2 years | Analytics |
| _gid | Distinguishes unique visitors (24h window) | 24 hours | Analytics |
| cookie_consent | Stores your cookie consent decision | 12 months | Necessary |
| lang_pref | Remembers your preferred website language | Session | Necessary |
8. Data Protection Officer (DPO)
For any questions regarding the processing of your personal data or to exercise your rights, please contact our Data Protection Officer:
We will respond to your request without undue delay, and in any event within 30 days of receipt.
9. Your Rights in Detail
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation of whether we process your personal data and, if so, access to that data including information on purpose, categories, recipients, and retention periods.
Right to Rectification (Art. 16 GDPR)
If your personal data is inaccurate or incomplete, you have the right to request its immediate correction or completion.
Right to Erasure — "Right to be Forgotten" (Art. 17 GDPR)
Under certain conditions, you may request the deletion of your personal data — for example, when the purpose of processing has ceased or you have withdrawn your consent.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to processing of your personal data carried out on the basis of legitimate interest or for direct marketing purposes.
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority — in the Czech Republic: the Office for Personal Data Protection (www.uoou.cz).