Hospitality security reports

K

Kavárna Stará Pošta

starapostabela.cz

57

Kavárna Stará Pošta is a small local café and bar located in Bělá pod Bezdězem, Czech Republic, offering specialty coffee (Nordbeans), local beers (Zichovec), Prosecco, smoothies, homemade desserts, and light meals. The business targets a general mature audience seeking a calm and welcoming space for socializing or relaxation. The website is built on WordPress with modern plugins like Elementor and WooCommerce, featuring a professional design and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

H

Hotel Lions Plzeň

hotellionsplzen.cz

50

Hotel Lions Plzeň is a small family-run hospitality business located near the historic center of Plzeň, Czech Republic. The hotel offers modern accommodation, restaurant services, conference facilities, and parking including electric vehicle charging. The website is professionally designed with good content quality and clear navigation, supporting multiple languages. The technical infrastructure is based on common web technologies including jQuery and Bootstrap, hosted likely by Czechia.com. Security posture is moderate with cookie consent implemented but lacking explicit privacy policies and security headers. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for users but would benefit from enhanced security and compliance documentation.

B

Bwin Casino Oostende

casinooostende.be

40

Bwin Casino Oostende operates as a casino and entertainment venue in Belgium, offering casino gaming, events, jackpots, and restaurant services. The website is professionally designed using WordPress and Elementor, with modern web technologies and a cookie consent mechanism in place. Security posture is good with HTTPS and bot protection via Google reCAPTCHA, though explicit security headers and privacy policies are missing. The domain WHOIS data is restricted, which is common for privacy but reduces transparency. Overall, the site targets adult casino customers and maintains a moderate trust level.

V

vaClavinek s.r.o.

imrvere.com

43

Imrvére is a small hospitality business based in Frýdlant nad Ostravicí, Czech Republic, offering restaurant dining, catering, and food delivery services. The company operates a professionally designed WordPress website using the Divi theme and WooCommerce for e-commerce capabilities. The site is well-structured with good SEO practices and mobile optimization, targeting a general audience interested in unique gastronomic experiences. Technically, the website leverages modern web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks some security headers and published security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website presents a credible and professional business presence with room for improvement in privacy compliance and security transparency.

N

NH HOTEL GROUP, S.A.

nh-collection.com

77

NH Collection Hotels, operated by NH HOTEL GROUP, S.A., is a large international hospitality brand offering premium hotel accommodations across more than 100 hotels in 24 countries. The website targets travelers and business customers seeking quality lodging in major cities such as Madrid, Milan, and Barcelona. The business model focuses on direct online bookings, reservation management, and customer loyalty programs. The brand maintains consistent and professional digital presence with multilingual support and clear navigation.

L

Loire Atlantique Développement

tourisme-loireatlantique.com

57

Loire Atlantique Développement operates the official regional tourism website for Loire-Atlantique, France, providing comprehensive information on local activities, cultural heritage, natural sites, and seasonal events. The website targets tourists and local visitors seeking authentic experiences, accessibility information, and sustainable travel options. It holds a strong market position as the authoritative source for tourism in the region, supported by consistent branding and high-quality content. Technically, the website is built on WordPress, leveraging modern web technologies including JavaScript, SVG graphics, and responsive design. Hosting is provided by Nuxit, with domain registration dating back to 2015, indicating an established digital presence. The site demonstrates good SEO and accessibility practices, with structured data and mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers, and does not publish a security policy or incident response information. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and user-friendly, with a solid security posture for its business type. Strategic improvements include enabling DNSSEC, adding security headers, and publishing security and vulnerability disclosure policies to enhance trust and resilience.

K

Kraj blanických rytířů, z.s.

blanik.net

58

Kraj blanických rytířů, z.s. operates a well-established official regional tourism portal focused on the Blaník region in the Czech Republic. The website provides comprehensive information on local attractions, cultural events, school trips, regional products, and visitor services, targeting tourists, families, and educational groups. Supported by regional government and ministry partners, it serves as a trusted source for regional tourism promotion. Technically, the site is built on Drupal 9 with modern front-end frameworks and integrates Google Analytics, Microsoft Clarity, and CookieHub for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a GDPR page and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

E

echologia, le domaine insolite nature pour accueil des groupes

echologia.com

45

Echologia is a small French hospitality and ecological event hosting business specializing in sustainable rehabilitation of an industrial site into a nature domain. It offers unique event spaces, accommodations, and educational activities focused on ecology and aquaponics. The website is built on Joomla! CMS with modern frameworks and includes multimedia content and structured data for SEO. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms are not clearly implemented. WHOIS data is missing, which reduces domain trustworthiness and should be addressed. Overall, Echologia presents a professional and trustworthy online presence with clear contact information and a focus on ecological tourism and education.

N

NellMat Company, s. r. o.

vybavsenaparty.cz

43

vybavsenaparty.cz is a Czech-based small business specializing in party supplies, event decoration, and event organization services. Founded in 2020 and operated by NellMat Company, s. r. o., the company offers a variety of services including balloon decorations, mascot rentals, party equipment rental, and a dedicated e-commerce shop. The website presents a professional and consistent brand image targeting general consumers and event organizers across the Czech Republic. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Lottie animations, with analytics tools like Google Analytics and Smartlook integrated for user behavior tracking. The site is hosted likely by WEDOS, a reputable Czech hosting provider, and uses HTTPS with good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and cookie consent mechanisms. Privacy compliance is basic but present, with a privacy policy linked on the e-shop subdomain. Contact information is clearly displayed, enhancing business credibility. Overall, the website is functional, visually appealing, and trustworthy, though it lacks some compliance and security best practices.

P

Partypack.cz

partypack.cz

42

Partypack.cz is a Czech Republic-based small business specializing in event entertainment services, including photobooths, AI-enhanced photo booths, hostesses, 360° party spins, and other event-related offerings. The company positions itself as a provider of memorable event experiences with a professional approach and modern equipment. The website reflects a well-structured, SEO-optimized WordPress platform using popular plugins and themes, with a focus on user experience and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policies and headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence. Overall, the business demonstrates moderate trustworthiness and digital maturity, with room for improvement in privacy transparency and security best practices.

O

OSLAVÍN.cz, s.r.o.

oslavin.cz

61

OSLAVÍN.cz, s.r.o. operates a specialized online platform focused on facilitating event planning by connecting users with venues, services, and inspiration for celebrations such as weddings, parties, and corporate events primarily in the Czech Republic. The platform offers a commission-free inquiry system, promoting ease and speed for customers seeking event solutions. The website demonstrates a good level of professionalism with consistent branding and a user-friendly interface. Technically, it leverages modern web technologies including Vue.js, Google Tag Manager, Facebook Pixel, and live chat integration, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although there is room for improvement in publishing comprehensive privacy and security policies. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the site is well-positioned within the hospitality sector niche, serving a small business market with a clear value proposition.

Měšťanský pivovar v Kutné Hoře is a small regional brewery with a rich historical heritage dating back over five centuries. The company produces traditional Czech beers using quality local ingredients and modern brewing technology. Their website targets adult beer enthusiasts and local tourists, offering product information, brewery tours, and a retail store. The business maintains a consistent brand presence with active social media channels and partnerships with local organizations. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Google Tag Manager, hosted by a reputable Czech provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and an age verification modal is implemented to comply with alcohol regulations. However, the site lacks explicit security headers, a privacy policy, and terms of service, which are important for compliance and trust. Analytics and advertising tools such as Google Analytics and Facebook Pixel are used, indicating moderate user tracking. Overall, the website is professional and trustworthy but could improve privacy and security compliance.

B

Brassi Group

brassi.be

40

Brassi Group is a hospitality business based in Oostende, Belgium, offering culinary experiences through its Brassi Grand Café, Casino Restaurant, and Beach Terrace venues. The company targets a general audience with a focus on local and refined cuisine in a unique setting. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. Multiple Google Analytics and Tag Manager scripts are employed for user tracking and marketing insights. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and visible privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but does not negate the professional presentation of the site. Overall, the website is functional, well-branded, and provides clear business information, though privacy compliance and security practices could be enhanced.

K

Kafrárna

porubskakafrarna.cz

58

Kafrárna operates a local café and bakery in Ostrava Poruba, Czech Republic, specializing in fresh cakes, desserts, and custom bakery products. The business emphasizes freshness by producing all items on-site and targets local families and visitors seeking a social coffee experience. The website is built on the Shoptet e-commerce platform and integrates standard web technologies including jQuery and Google Analytics. Privacy and cookie policies are implemented with GDPR compliance in mind. Security posture is solid with HTTPS and CSRF protections, though some improvements in security headers and library updates are recommended. The absence of WHOIS data is a notable trust concern but the website content and contact information indicate a legitimate small business. Overall, the site is professional, user-friendly, and safe for general audiences.

R

Romantik® Hotels & Restaurants

romantikhotels.com

56

Romantik® Hotels & Restaurants is a well-established hospitality brand operating across Europe, offering over 220 unique hotels and culinary experiences. The website provides comprehensive booking services, loyalty programs, and gift vouchers, targeting travelers seeking romantic and unique stays. The digital infrastructure is built on Silverstripe CMS with integrated booking engines (Dirs21 and Synxis), supported by Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and consent mechanisms in place, though explicit security policies and incident response details are absent. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website content and contact information appear professional and trustworthy. Overall, the site demonstrates a mature digital presence with good user experience and compliance practices.

O

Office de Tourisme Laval Agglomération

laval-tourisme.com

53

Office de Tourisme Laval Agglomération operates as the official tourism promotion entity for the Laval area in Mayenne, France. The website provides comprehensive information on accommodations, events, restaurants, and local experiences, targeting tourists and visitors. The business model focuses on tourism information dissemination and online booking facilitation. The site is professionally designed with consistent branding and high-quality content, positioning it as a trusted local tourism resource. Technically, the website is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Leaflet, and Google Maps API. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security is generally good with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. The security posture is solid but could be improved by adding security headers, publishing privacy and terms of service pages, and establishing a vulnerability disclosure policy. The absence of WHOIS registrant data is a concern but does not necessarily indicate illegitimacy given the professional site presentation. Overall, the website is a reliable and professional tourism portal with minor gaps in privacy and security documentation. Strategic improvements in these areas would enhance trust and compliance.

The website represents the Association des Courses Hippiques de Laval Mayenne, a regional horse racing society organizing numerous annual events and providing related hospitality and professional services. The site is professionally designed with clear navigation and relevant content targeting horse racing enthusiasts, professionals, and local visitors. The technical infrastructure is based on the E-majine CMS platform, utilizing common web technologies such as jQuery and FontAwesome, with Google Analytics for visitor tracking. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed security policies. Privacy compliance is basic with a cookie consent banner and a privacy/legal mentions page in French. The absence of WHOIS data is a notable concern for domain legitimacy verification, though the website content and contact information suggest a legitimate local business. Overall, the site is functional, informative, and trustworthy for its intended audience.

T

Théâtre Les 3 Chênes

theatreles3chenes.fr

52

Théâtre Les 3 Chênes is a small regional cultural venue based in Loiron-Ruillé, France, specializing in theatrical performances, workshops, and cultural events. The website serves as an information and ticketing portal for visitors and community members, reflecting a well-maintained and professionally designed platform. The business operates primarily in the hospitality and cultural sector, targeting a general audience interested in arts and theater. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted by OVH, and incorporates privacy-conscious analytics via Matomo alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though lacking some advanced security headers and formal security policies. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and consistency.

E

echologia, le domaine insolite nature pour accueil des groupes

echologia.fr

45

Echologia is a small French hospitality and ecological event hosting business located in Mayenne, France. The company offers unique natural spaces, accommodations, and a variety of activities focused on ecology, aquaponics, and sustainable development. Their target audience includes corporate clients, educational groups, families, and eco-conscious visitors. The website is built on Joomla CMS with modern frameworks and includes multimedia content such as embedded YouTube videos. It demonstrates good design quality, clear navigation, and professional content. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and explicit incident response information. Privacy and cookie policies are present, though no cookie consent mechanism is implemented. WHOIS data is missing, which reduces trust slightly, but the website content and contact information support legitimacy. Overall, the site is well-structured and trustworthy for its business domain.

T

Toerisme Oostende

visitoostende.be

58

The website www.visitoostende.be is the official tourism portal for the city of Oostende, Belgium. It provides comprehensive information on local attractions, events, dining, shopping, accommodation, and cultural experiences. The site targets tourists and visitors seeking to explore Oostende and offers multilingual support in Dutch, French, German, and English. The business model focuses on promoting tourism and local businesses through curated content and event listings. Technically, the site is built on Drupal 9, employs modern web technologies, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Ortto. Security measures include HTTPS, reCAPTCHA, and standard security headers, although some headers could be enhanced. The WHOIS data is restricted by DNS Belgium policy, limiting transparency but not detracting significantly from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure, with room for improvement in privacy policy visibility and explicit security headers.

The website kinepolis.be is currently inaccessible due to a Web Application Firewall (WAF) or security mechanism blocking access, as evidenced by the 'Access Denied' page and reference to errors.edgesuite.net. This prevents any direct analysis of the website's content, metadata, or technical infrastructure. The domain is registered with Combell nv, a reputable Belgian hosting provider, and has been active since 1996, indicating a mature and legitimate business presence likely in the hospitality sector given the domain name and country context. Due to the lack of accessible content, no privacy, cookie, or terms of service policies could be identified, nor any contact or security-related information. The security posture cannot be evaluated, and no technical or business insights beyond WHOIS data are available. The content safety rating is safe as no adult or explicit content is present in the minimal page.

V

VÍTKOVICE ARÉNA, a.s.

arena-vitkovice.cz

47

VÍTKOVICE ARÉNA, a.s. operates as a key regional manager of multifunctional sports and event venues in Ostrava, Czech Republic. The company manages several prominent facilities including Ostravar Aréna, Městský stadion, Atletická hala, Multifunkční hala, Areál Bazaly, and also provides hospitality services through Hotel Puls. Their market position is significant within the regional sports and event hosting sector, targeting event organizers, sports clubs, and the general public. The business model centers on facility management and event hosting, supported by a medium-sized organizational structure with a history dating back to 1999. Technically, the website is built on a modern WordPress platform utilizing Elementor and JetEngine plugins, hosted by vas-hosting.com. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Google Analytics is used for visitor tracking, though no cookie consent mechanism is present. The site is accessible, well-structured, and professionally designed, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security or incident response policy page. GDPR compliance is indicated via a dedicated GDPR page, but cookie consent and other privacy mechanisms could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website and business present a low-risk profile with strong legitimacy and professional standards. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

L

Lopesan Hotel Group

lopesan.com

66

Lopesan Hotel Group operates a well-established hospitality business focused on providing hotel and resort accommodations primarily in Spain. The website serves as the official online presence for the group, offering booking capabilities and showcasing their unique destinations and services. The company has a strong market position with a domain age of over 25 years, indicating stability and trustworthiness. Technically, the website leverages modern web technologies including React and Liferay CMS, ensuring a robust and scalable platform. The site is mobile optimized and performs moderately well, with good SEO practices in place. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and suitable for its target audience of travelers and tourists.

H

Hotel Rudolf s.r.o.

hotelrudolf.cz

9

Hotel Rudolf s.r.o. operates a hospitality business providing accommodation, wellness, event hosting, and dining services in Havířov, Czech Republic. The website presents a professional and consistent brand image targeting travelers and guests seeking local hotel services with wellness and event facilities. The business appears to be a small-sized local hotel with a clear focus on customer experience and convenience. Technically, the website uses a traditional tech stack including jQuery 1.11.3, Bootstrap, and various UI libraries, managed via the AD-RS CMS platform. While the site is functional and moderately optimized for mobile, it uses outdated JavaScript libraries and lacks modern security headers, which could expose it to vulnerabilities. The website is accessible over HTTPS, but no explicit security policies or privacy notices are present. From a security perspective, the absence of WHOIS data limits domain legitimacy verification, and the lack of privacy and cookie policies indicates poor privacy compliance. The site uses Google Analytics for tracking but does not provide clear data protection information. Contact information is clearly provided, enhancing business credibility. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and publishing privacy and cookie policies. The overall risk is moderate with recommendations to improve security best practices, privacy compliance, and technical modernization to enhance trust and protect customer data.

V

Vinný sklep U Mostu

vinoostrava.cz

50

Vinný sklep U Mostu is a small hospitality business based in Ostrava, Czech Republic, specializing in wine sales and tastings. The website presents a local wine shop and bar offering a wide selection of wines from Moravia and international sources, including services such as wine menus, degustations, and reservations. The business targets mature wine consumers and local visitors seeking quality wine experiences. Technically, the website uses a variety of JavaScript libraries and plugins, including jQuery, Bootstrap modal, and Nivo Slider, hosted on Banan.cz with a CMS platform called Web Bez starosti. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and structured data. Security posture is adequate with HTTPS and cookie consent but lacks security headers and detailed policies. WHOIS data is unavailable due to privacy protection, which is typical for small businesses and does not raise immediate concerns. Overall, the website is functional, trustworthy, and serves its business purpose effectively.

R

Rodinné vinařství Skoupil

skoupil.com

50

Rodinné vinařství Skoupil is a well-established family winery based in Velké Bílovice, Czech Republic, with a history dating back to 1992. The company specializes in producing high-quality Czech wines, managing 23 hectares of vineyards, and offering approximately 150,000 bottles annually. Their business model extends beyond wine production to include hospitality services such as a family pension, restaurant, wine cellar, and event hosting including weddings and corporate events. The website reflects a professional and consistent brand image with comprehensive service offerings and a user-friendly e-commerce platform.

W

Werich Villa

werichovavila.cz

41

Werichova vila is a cultural and historical center located in the heart of Prague, dedicated to preserving and promoting the legacy of notable Czech personalities such as Jan Werich and Vladimír Holan. The website serves as an official portal offering information about permanent exhibitions, cultural programs, theatrical performances, concerts, and workshops aimed at a broad audience including families, schools, and the general public. The organization positions itself as a small but significant cultural institution with a focus on arts and heritage preservation. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under a Czech registrar and uses SSL encryption, ensuring secure communications. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks explicit security headers and a published security or incident response policy. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's claims and location, supporting its legitimacy. Overall, Werichova vila's website is a well-maintained cultural portal with good content quality and technical implementation. Enhancements in privacy compliance, security policy transparency, and security headers would further strengthen its security posture and user trust.

Z

Zámek Osečany BUDE!

zamekbude.cz

48

Zámek Osečany BUDE! is a small-scale cultural heritage and tourism project focused on the restoration and promotion of the Osečany Castle in the Czech Republic. The website serves as an information portal for visitors, offering details about the castle's history, upcoming events, guided tours, and accommodation options. The business model is primarily non-profit with revenue streams from ticket sales and merchandise. The site is built on WordPress with WooCommerce integration, indicating a moderate level of digital maturity. Technical infrastructure includes modern plugins and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and well-targeted to its audience, with room for improvement in security and incident response transparency.

F

Festival Povaleč z.s.

povalec.cz

47

Festival Povaleč is a well-established cultural festival based in Valeč, Karlovy Vary region, Czech Republic, operating since 2006. The festival offers a diverse multi-genre program including music, theater, lectures, and children's activities, targeting local and regional audiences interested in cultural enrichment. The website reflects a professional and consistent brand image with strong multimedia content and social media integration. Technically, the site is built on WordPress with modern plugins and embeds, providing good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the festival's public presence and history.

Z

Zámek Zruč nad Sázavou

zamek-zruc.cz

56

Zámek Zruč nad Sázavou is a cultural and historical site located in the Czech Republic, offering castle tours, exhibitions, cultural events, and visitor experiences primarily targeting tourists, families, and school groups. The website presents a professional and well-structured digital presence with good content quality and clear navigation. The technical infrastructure includes modern web technologies such as HTTPS, Google Analytics, Facebook Pixel, and a CMS platform called Solidpixels, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding security headers and formal security policies. The absence of WHOIS data limits domain trust verification, but the website's content and external references support its legitimacy as a cultural institution. Overall, the site is safe, family-friendly, and compliant with privacy regulations.

C

Château de la Bourdaisière · Hôtel de charme *** · Val de Loire

labourdaisiere.com

10

Château de la Bourdaisière is a boutique 3-star hotel located in the Loire Valley, France, offering a blend of hospitality, cultural exhibitions, and leisure activities. The website presents a professional and rich user experience with detailed information about accommodations, dining options, events, and unique experiences such as the tomato-themed attractions. The business targets tourists and visitors seeking a charming and culturally immersive stay in the region. Technically, the site is built on WordPress using Elementor and integrates several plugins for event management and booking, supported by Google Analytics and Facebook Pixel for marketing and analytics. Security posture is generally good with HTTPS and secure booking integration, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from verification of domain registration and enhanced security headers.

D

DialogShift

dialogshift.com

10

DialogShift is a specialized AI technology company focused on providing automated communication solutions for the hospitality industry. Their platform integrates chatbot AI, phone AI, email AI, and guest messaging AI to streamline guest interactions and improve operational efficiency for hotels. The company positions itself as a market leader with a strong customer base of over 1200 hotels and multiple industry partnerships. Technically, the website is built on modern web technologies including Webflow CMS and integrates analytics and compliance tools such as Google Analytics and Iubenda. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly disclosed. The WHOIS data for the domain is missing, which is unusual and warrants further verification, but the website content and business presence appear legitimate and professional.

F

FiremníAkce.cz, s.r.o.

firemniakce.cz

60

FiremníAkce.cz, s.r.o. operates a Czech Republic-focused online platform specializing in corporate event planning. The website offers a comprehensive marketplace for event locations, services, and inspiration, targeting corporate clients and event organizers. It positions itself as a commission-free, easy-to-use solution for finding venues and services for various event types including conferences, team building, and parties. The platform features curated offers, partner collaborations, and interactive search forms to facilitate client inquiries. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook. The presence of cookie consent mechanisms and social media integration reflects a moderate level of digital maturity. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the website is well-designed, user-friendly, and serves its niche effectively.

Grill & Golf events z.s. is a small non-profit organization based in the Czech Republic focused on organizing recreational events related to grilling and golf, including operating the Minigolf Poruba facility. The website is minimalistic, providing basic company identification and social media links but lacks detailed business or compliance information. Technically, the site uses Google Analytics for visitor tracking but does not implement advanced security headers or privacy policies, indicating a low level of digital maturity. The absence of WHOIS registration data for the domain is a significant concern, reducing trustworthiness and raising questions about domain legitimacy. Overall, the security posture is weak with no evident incident response or data protection measures. Strategic improvements in security, privacy compliance, and transparency are recommended to enhance trust and operational resilience.

D

DK Akord Ostrava

dkakord.cz

48

DK Akord Ostrava operates as a cultural and social center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization also provides venue rental services and operates a restaurant, positioning itself as a regional hub for cultural and social activities. The website reflects a medium-sized enterprise with a professional digital presence, integrating modern web technologies and multiple analytics and marketing tools to engage its audience effectively. The business model focuses on event hosting, ticket sales, and community engagement through educational and cultural programming. Technically, the site is built on WordPress with Bootstrap and jQuery, supported by reputable third-party services for analytics and marketing, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations, serving its target audience effectively.

R

Restaurace Akord

restauraceakord.cz

41

Restaurace Akord is a hospitality business based in Ostrava, Czech Republic, offering restaurant dining, catering, and event hosting services including corporate events, weddings, and family celebrations. The website presents a professional image with detailed service descriptions, menus, and client logos, positioning the business as a reputable local venue with recognized beer quality. Technically, the site is built on WordPress using modern plugins and themes, optimized for SEO and mobile devices, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

P

Plesenská Kafrárna

plesenskakafrarna.cz

42

Plesenská Kafrárna is a small social enterprise café and wine bar based in Ostrava – Plesná, Czech Republic, focused on community support, sustainability, and employing socially disadvantaged individuals. The business offers coffee, homemade cakes, and event spaces, positioning itself as a local community hub with a strong social mission. The website is built on WordPress with common web technologies such as jQuery, Bootstrap, and FontAwesome, providing a generally good user experience with moderate mobile optimization and basic SEO. However, a visible PHP fatal error in the theme code indicates technical issues that could affect site stability and user experience. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional but requires technical and compliance improvements to enhance security and privacy standards.

D

Divadlo Kalich

divadlokalich.cz

60

Divadlo Kalich is a cultural venue based in Prague, Czech Republic, offering a variety of theatrical performances including comedies, musicals, concerts, and children's shows. The website serves as a platform for event listings and ticket sales, targeting a broad audience interested in live theater and cultural events. The site demonstrates a moderate level of digital maturity with the use of modern tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The technical infrastructure supports HTTPS and responsive design, ensuring accessibility and a good user experience across devices. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and registrant information. Security posture is adequate with HTTPS and cookie consent, but could be improved by implementing security headers and publishing clear privacy and security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

S

STUDIO G

studiog.cz

40

STUDIO G is a small, independent drama theatre based in Ostrava, Czech Republic, founded in 2019. It offers a mix of original and classical theatrical performances, including children's theatre, poetry evenings, and concerts. The theatre collaborates with local professional actors and conservatory students, positioning itself as a cultural hub with growing local recognition. The website is built on Joomla CMS with modern front-end technologies and includes interactive sliders and social media integration. While the site is well-designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate cultural organization.

D

Divadlo Petra Bezruče, s.r.o.

bezruci.cz

43

Divadlo Petra Bezruče, s.r.o. is a regional theatre company based in Ostrava, Czech Republic, providing theatrical performances, ticketing services, subscriptions, and cultural event hosting. The website serves as a portal for program schedules, ticket reservations, and company information, targeting local theatre audiences and cultural enthusiasts. The business operates with support from local government and cultural partners, positioning itself as a key cultural institution in the region. Technically, the website employs modern front-end technologies including Bootstrap, JavaScript libraries like WOW.js, and a cookie consent mechanism from TermsFeed. The site is mobile-optimized with responsive design and provides a user-friendly navigation experience. However, there is no evidence of a CMS or advanced analytics tools, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and published privacy or terms of service policies. Cookie consent is implemented with express consent, indicating some GDPR awareness. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and clear contact information mitigate some concerns. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy documentation, and WHOIS transparency to improve trust and compliance.

T

TopRaut.cz

topraut.cz

52

TopRaut.cz is a small hospitality business specializing in catering services for events such as receptions, weddings, parties, seminars, and film production catering. Operating primarily in Prague, it manages the Kavárna DRBárna café and offers event space rental with audiovisual support. The company emphasizes customized menus and individual client approaches, serving a diverse clientele including cultural and film industry professionals. The website is built on WordPress with modern plugins and includes a contact form protected by Google reCAPTCHA. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the visible business information and partner references support legitimacy.

N

Nášup, Spirála Ostrava z.ú.

nasupsidam.cz

42

Nášup, operated by Spirála Ostrava z.ú., is a Czech social enterprise focused on providing catering services in Ostrava while employing people with mental disabilities. The organization combines social impact with hospitality services, offering catering for events, companies, and private celebrations. Their mission emphasizes social inclusion and psychosocial support for disabled individuals, positioning them as a niche local player with a strong community focus. The website reflects this mission clearly with testimonials, partner logos, and detailed service descriptions. Technically, the site uses modern web technologies including Google reCAPTCHA v3 for form security and standard JavaScript libraries for UI enhancements. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and form protection, but lacks advanced security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small social enterprise. Overall, the site is functional, trustworthy, and professionally presented but could improve compliance and security transparency.

G

Grill & Golf events z.s.

minigolfporuba.cz

40

Minigolf Poruba is a small hospitality and leisure business located in Ostrava-Poruba, Czech Republic, offering minigolf, beverage sales, equipment rental, and event hosting services. The website is professionally designed with clear navigation and good mobile optimization, targeting students, families, and local residents interested in recreational activities. The business is operated by Grill & Golf events z.s., with clear contact details and partner affiliations enhancing credibility. Technically, the site uses modern tracking tools like Google Tag Manager and Facebook Pixel, with HTTPS properly configured, but lacks some security headers and privacy policies, indicating room for compliance improvement. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the site scores well in content quality and business credibility but needs enhancements in privacy compliance and security best practices.

H

Hotel Za Vodou

hotelzavodou.cz

58

Hotel Za Vodou is a small family-run hospitality business located in Dvůr Králové nad Labem, Czech Republic. The website presents a comprehensive overview of their services including accommodation, restaurant offerings, conference facilities, and family-friendly amenities such as outdoor pools and playgrounds. The business targets families, corporate clients, and tourists seeking a quiet and comfortable stay near the local Safari park. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages and integrating social media for customer engagement. From a technical perspective, the site uses common web technologies including Google Analytics and Facebook SDK for tracking and marketing purposes. The presence of a cookie consent banner indicates awareness of GDPR compliance, although explicit privacy and security policies are limited. No forms collecting personal data are visible on the homepage, reducing immediate privacy risks. The website performance is moderate with good mobile responsiveness and basic accessibility features. Security posture is moderate but could be improved. The site lacks visible security headers and explicit security policies. The WHOIS data for the domain is unavailable, which reduces trust signals and raises questions about domain registration transparency. However, the website content and contact information appear legitimate and consistent with a small local hospitality business. Overall, the website is functional and professional but would benefit from enhanced security measures, clearer privacy documentation, and improved domain registration transparency to increase trustworthiness and compliance.

C

CPI Hotels, a.s.

qualityhotelbrnoexhibitioncentre.com

60

Quality Hotel Brno Exhibition Centre is a medium-sized hospitality business located in the Czech Republic, offering hotel accommodation, conference facilities, restaurant services, and wellness amenities. It is part of the CPI Hotels group, which adds to its market credibility and brand strength. The website is professionally designed with excellent content quality and clear navigation, targeting business travelers, event organizers, and tourists. The business model focuses on providing quality services for corporate and leisure guests with a strong emphasis on comfort and regional cuisine. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Tag Manager, cookie consent management, and marketing/analytics tools like Sojern and Zoomletter. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, no CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain is a notable concern, reducing trust slightly, but the overall security posture is solid. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic improvements include publishing a dedicated security policy, enhancing incident response transparency, and adding security headers to further harden the site.

D

DK Akord Ostrava

dk-akord.cz

48

DK Akord Ostrava is a cultural and community center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization serves the general public interested in cultural and educational activities and operates a venue rental service, restaurant, and ticket sales platform. The website reflects a medium-sized regional cultural hub with consistent branding and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Yandex Metrika, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience.

A

ArtMoment Events s.r.o.

artmoment.cz

59

ArtMoment Events s.r.o. operates a professional experiential art workshop platform in the Czech Republic, offering creative painting events, gift vouchers, and corporate event services. The company targets a broad audience interested in leisure and creative activities, with multiple city locations enhancing market reach. The website is built on the Shoptet e-commerce platform, integrating modern tracking and marketing technologies such as Google Analytics GA4, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with a strong emphasis on user consent and privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's professional design, content quality, and business transparency support a high trust level. Overall, the site provides a seamless user experience with clear navigation, rich content, and effective marketing integration.

R

Region-Tour.cz, s.r.o.

region-jizerskehory.cz

54

Region-Jizerskehory.cz is a regional tourism information website focused on the Jizerské hory and Liberecko areas in the Czech Republic. It provides comprehensive tourist information including accommodation options, tips for trips, active leisure activities, and photo galleries. The site targets tourists and visitors interested in exploring this region, offering a curated selection of hotels, pensions, chalets, and apartments. The business model centers on providing tourism-related content and accommodation listings, positioning itself as a key regional tourism resource. The website is operated by Region-Tour.cz, s.r.o., a small hospitality sector entity.

R

Orlické hory - ubytování | výlety | zážitky v Orlických horách

region-orlickehory.cz

58

The website www.region-orlickehory.cz serves as a regional tourism portal focused on the Orlické hory mountain area in the Czech Republic. It provides visitors with comprehensive tourist information, accommodation options, and tips for outdoor activities such as hiking, cycling, and skiing. The site facilitates online accommodation reservations, targeting tourists and visitors interested in this region. The business model centers on tourism promotion and accommodation booking services, positioning itself within the hospitality industry. The content is primarily in Czech and is well structured for its audience, though no explicit business registration or contact details are provided in the accessible content. Technically, the website is built on the Webnode CMS platform and employs a variety of third-party scripts including Google Analytics, Google Tag Manager, SumoMe, ShareThis, and Mailchimp for marketing and analytics purposes. The site uses Amazon CloudFront as a CDN for static assets. Performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and keywords. From a security perspective, the site lacks visible security headers and does not present privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS lookup failed to retrieve domain registration details, which raises concerns about domain legitimacy and transparency. No WAF or blocking mechanisms were detected, and the site content is accessible without restrictions. The absence of contact information and security policies limits the site's trustworthiness from a security and compliance standpoint. Overall, the website is functional and relevant for its tourism purpose but requires improvements in security posture, privacy compliance, and transparency to enhance trust and meet regulatory standards.