PRIVÁT IVA · GDPR

Privacy
Policy

Effective from 2 June 2026

---

1. Introduction

This Privacy Policy (hereinafter the "Policy") explains how Privát IVA processes the personal data of visitors to the privativa.sk website and guests of the accommodation facility in the High Tatras. The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR") and Act No. 18/2018 Coll. on the protection of personal data. privativa.sk a hostí ubytovacieho zariadenia vo Vysokých Tatrách.

Spracovanie osobných údajov sa riadi Nariadením Európskeho parlamentu a Rady (EÚ) 2016/679 z 27. apríla 2016 (ďalej len „GDPR") a zákonom č. 18/2018 Z. z. o ochrane osobných údajov.

2. Data Controller

The controller has not appointed a Data Protection Officer (DPO), as its activities do not require one under Art. 37 GDPR. Please address all questions regarding the protection of personal data directly to the controller at [email protected].

3. Purposes of Processing and Legal Bases

3.1 Accommodation booking

Purpose: concluding and performing a short-term accommodation contract, communication about availability, booking confirmation, invoicing, and guest registration under Act No. 253/1998 Coll. on the reporting of residence of citizens and the register of residents of the Slovak Republic. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (Art. 6(1)(c) GDPR).

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (Art. 6(1)(c) GDPR).

3.2 Handling a contact request

Purpose: responding to an enquiry sent via the contact form or email.

Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR) — responding to your request.

3.3 Bookkeeping

Purpose: compliance with legal obligations in the area of accounting and taxes.

Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR) — in particular Act No. 431/2002 Coll. on accounting.

3.4 Cookies and website analytics

Purpose: ensuring the functionality of the website and analysing traffic.

Legal basis: consent for analytical and marketing cookies (Art. 6(1)(a) GDPR); legitimate interest for technically necessary cookies.

4. Scope of Personal Data Processed

When booking accommodation, we process:

• first and last name
• email address
• phone number
• dates of stay (check-in, check-out)
• number of guests
• selected accommodation type
• optional notes about the stay
• data needed to issue an invoice
• when accommodating a guest, also data under the residence-reporting act (type and number of ID document, date of birth, nationality)

When using the contact form, we process:

• name
• email address
• phone number (optional)
• content of the message

Automatically collected data:

• IP address, browser type, operating system
• date and time of visit
• pages visited
• cookies

5. Retention Period

Purpose	Retention period
Booking and invoice data	10 years (Accounting Act)
Guest residence reporting	5 years (Residence Reporting Act)
Contact form data	max. 12 months after handling
Cookies	by type — from 1 day to 24 months

After the set period expires, personal data is securely destroyed unless there is another legal reason for its further retention.

6. Recipients of Personal Data

Your personal data may be provided to the following categories of recipients:

• Web hosting provider — stores data on servers
• Email service provider — ensures the delivery of emails
• Accountant / accounting firm — for tax and accounting purposes
• Public authorities — in cases stipulated by law (police, tax office)
• Banks and payment institutions — when processing payments for the stay

The controller does not provide personal data to third parties for marketing purposes and does not sell personal data.

7. Transfer to Third Countries

Personal data is processed primarily within the European Union. Where services involving data transfer outside the EU are used (for example Google Analytics), the transfer is safeguarded by the EU Standard Contractual Clauses or another appropriate mechanism under Art. 46 GDPR.

8. Your Rights

As a data subject, you have the following rights under the GDPR and Act No. 18/2018 Coll.:

• Right of access (Art. 15) — to find out whether and what data we process about you
• Right to rectification (Art. 16) — to correct inaccurate or incomplete data
• Right to erasure (Art. 17) — to request deletion of data when it is no longer needed or consent has been withdrawn
• Right to restriction of processing (čl. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent (Art. 7) — at any time, without affecting prior processing
• Right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk

To exercise any of these rights, send your request to [email protected]We will respond without undue delay, within 30 days at the latest.

9. Cookies

The privativa.sk website uses cookies — small text files stored in your browser.

Types of cookies used:

• Necessary cookies — required for the basic functionality of the site (language, cookie consent). They do not require your consent.
• Analytical cookies — used to track traffic and user behaviour (e.g. Google Analytics). They require your consent.
• Marketing cookies — not currently used.

You can withdraw your consent to the use of cookies at any time by deleting cookies in your browser or by changing the cookie-bar settings on your next visit to the site.

10. Security Measures

The controller has adopted appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access:

• encrypted communication (HTTPS/SSL)
• access to data only for authorised persons
• regular data backups
• up-to-date software and security solutions

11. Final Provisions

This Policy may be updated from time to time. The current version is always available at privativa.sk/gdpr. The controller will inform data subjects of any significant changes in an appropriate manner.

If you have any questions regarding the protection of personal data, please contact us: