{"id":4312,"date":"2026-06-02T11:21:42","date_gmt":"2026-06-02T09:21:42","guid":{"rendered":"https:\/\/privativa.sk\/?page_id=4312"},"modified":"2026-06-02T11:34:07","modified_gmt":"2026-06-02T09:34:07","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/privativa.sk\/en\/gdpr\/","title":{"rendered":"GDPR"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"4312\" class=\"elementor elementor-4312\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4ff6cf e-flex e-con-boxed e-con e-parent\" data-id=\"d4ff6cf\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f018ed2 e-flex e-con-boxed e-con e-parent\" data-id=\"f018ed2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d8baa05 elementor-widget elementor-widget-html\" data-id=\"d8baa05\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>\n.iva-gdpr {\n    font-family: Inter, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n    color: #2A2622;\n    max-width: 880px;\n    margin: 0 auto;\n    line-height: 1.7;\n    padding: 0 24px;\n    box-sizing: border-box;\n}\n.iva-gdpr h1 {\n    font-family: \"Cormorant Garamond\", Georgia, serif;\n    font-style: italic;\n    font-weight: 400;\n    font-size: 64px;\n    line-height: 1.04;\n    color: #1C1A17;\n    letter-spacing: -0.015em;\n    margin: 0 0 12px;\n}\n.iva-gdpr h2 {\n    font-family: \"Cormorant Garamond\", Georgia, serif;\n    font-style: italic;\n    font-weight: 400;\n    font-size: 36px;\n    line-height: 1.15;\n    color: #1C1A17;\n    letter-spacing: -0.01em;\n    margin: 56px 0 20px;\n    padding-top: 36px;\n    border-top: 1px solid rgba(28,26,23,0.16);\n}\n.iva-gdpr h3 {\n    font-family: \"Cormorant Garamond\", Georgia, serif;\n    font-style: italic;\n    font-weight: 400;\n    font-size: 24px;\n    line-height: 1.2;\n    color: #1C1A17;\n    margin: 28px 0 10px;\n}\n.iva-gdpr .iva-eyebrow {\n    display: inline-block;\n    font-size: 11px;\n    font-weight: 500;\n    letter-spacing: 0.22em;\n    text-transform: uppercase;\n    color: #B89668;\n    margin-bottom: 24px;\n}\n.iva-gdpr p {\n    font-size: 16px;\n    line-height: 1.7;\n    color: #2A2622;\n    margin: 0 0 16px;\n}\n.iva-gdpr ul {\n    padding-left: 0;\n    list-style: none;\n    margin: 0 0 16px;\n}\n.iva-gdpr ul li {\n    font-size: 16px;\n    line-height: 1.7;\n    color: #2A2622;\n    padding: 12px 0 12px 28px;\n    position: relative;\n    border-top: 1px solid rgba(28,26,23,0.10);\n}\n.iva-gdpr ul li:first-child { border-top: 0; }\n.iva-gdpr ul li::before {\n    content: \"\u2014\";\n    position: absolute;\n    left: 0;\n    top: 12px;\n    color: #B89668;\n}\n.iva-gdpr strong { font-weight: 600; color: #1C1A17; }\n.iva-gdpr a {\n    color: #8E7148;\n    text-decoration: underline;\n    text-underline-offset: 3px;\n    word-break: break-word;\n}\n.iva-gdpr a:hover { color: #B89668; }\n.iva-gdpr table {\n    width: 100%;\n    border-collapse: collapse;\n    margin: 20px 0 28px;\n    font-size: 15px;\n}\n.iva-gdpr table th,\n.iva-gdpr table td {\n    text-align: left;\n    padding: 14px 16px 14px 0;\n    border-bottom: 1px solid rgba(28,26,23,0.10);\n    vertical-align: top;\n}\n.iva-gdpr table th {\n    font-family: Inter;\n    font-size: 11px;\n    font-weight: 500;\n    letter-spacing: 0.18em;\n    text-transform: uppercase;\n    color: #756A5C;\n    border-bottom: 1px solid #1C1A17;\n}\n.iva-gdpr .iva-contact-box {\n    background: #FAF7F1;\n    border-left: 2px solid #B89668;\n    padding: 28px 32px;\n    margin: 20px 0 28px;\n}\n.iva-gdpr .iva-contact-box p { margin: 6px 0; }\n.iva-gdpr .iva-meta {\n    font-size: 13px;\n    color: #756A5C;\n    letter-spacing: 0.02em;\n}\n.iva-gdpr hr {\n    border: 0;\n    height: 1px;\n    background: #B89668;\n    width: 48px;\n    margin: 32px 0;\n}\n\n@media (max-width: 1024px) {\n    .iva-gdpr { padding: 0 32px; }\n    .iva-gdpr h1 { font-size: 48px; }\n    .iva-gdpr h2 { font-size: 30px; margin-top: 48px; padding-top: 32px; }\n    .iva-gdpr h3 { font-size: 22px; }\n    .iva-gdpr p, .iva-gdpr ul li { font-size: 15.5px; }\n    .iva-gdpr .iva-contact-box { padding: 24px 26px; }\n}\n\n@media (max-width: 768px) {\n    .iva-gdpr { padding: 0 20px; line-height: 1.65; }\n    .iva-gdpr h1 { font-size: 36px; line-height: 1.05; }\n    .iva-gdpr h2 { font-size: 24px; margin: 40px 0 14px; padding-top: 28px; line-height: 1.18; }\n    .iva-gdpr h3 { font-size: 19px; margin: 22px 0 8px; }\n    .iva-gdpr p, .iva-gdpr ul li { font-size: 15px; line-height: 1.65; }\n    .iva-gdpr ul li { padding: 10px 0 10px 24px; }\n    .iva-gdpr ul li::before { top: 10px; }\n    .iva-gdpr .iva-contact-box { padding: 20px 22px; margin: 16px 0 24px; }\n    .iva-gdpr .iva-eyebrow { font-size: 10px; margin-bottom: 20px; }\n    .iva-gdpr hr { margin: 24px 0; }\n    .iva-gdpr table, .iva-gdpr thead, .iva-gdpr tbody, .iva-gdpr tr, .iva-gdpr th, .iva-gdpr td {\n        display: block; width: 100%;\n    }\n    .iva-gdpr thead { display: none; }\n    .iva-gdpr table { margin: 16px 0 24px; }\n    .iva-gdpr tbody tr {\n        background: #FAF7F1; margin-bottom: 12px; padding: 16px 18px; border-bottom: none;\n    }\n    .iva-gdpr tbody td { padding: 4px 0; border-bottom: none; font-size: 14px; }\n    .iva-gdpr tbody td:first-child {\n        font-family: Inter; font-size: 11px; font-weight: 500;\n        letter-spacing: 0.18em; text-transform: uppercase; color: #B89668; margin-bottom: 4px;\n    }\n    .iva-gdpr tbody td:last-child { color: #1C1A17; font-size: 15px; }\n}\n\n@media (max-width: 380px) {\n    .iva-gdpr h1 { font-size: 30px; }\n    .iva-gdpr h2 { font-size: 22px; }\n    .iva-gdpr h3 { font-size: 18px; }\n}\n<\/style>\n\n<div class=\"iva-gdpr\">\n\n<span class=\"iva-eyebrow\">PRIV\u00c1T IVA \u00b7 GDPR<\/span>\n<h1>Privacy<br>Policy<\/h1>\n<p class=\"iva-meta\">Effective from 2 June 2026<\/p>\n\n<hr\/>\n\n<h2>1. Introduction<\/h2>\n<p>This Privacy Policy (hereinafter the \"Policy\") explains how Priv\u00e1t IVA processes the personal data of visitors to the privativa.sk website and guests of the accommodation facility in the High Tatras.\n\n\nThe processing of personal data is governed by Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter \"GDPR\") and Act No. 18\/2018 Coll. on the protection of personal data. <strong>privativa.sk<\/strong> a host\u00ed ubytovacieho zariadenia vo Vysok\u00fdch Tatr\u00e1ch.<\/p>\n<p>Spracovanie osobn\u00fdch \u00fadajov sa riadi Nariaden\u00edm Eur\u00f3pskeho parlamentu a Rady (E\u00da) 2016\/679 z 27. apr\u00edla 2016 (\u010falej len \u201eGDPR\") a z\u00e1konom \u010d. 18\/2018 Z. z. o ochrane osobn\u00fdch \u00fadajov.<\/p>\n\n<h2>2. Data Controller<\/h2>\n<div class=\"iva-contact-box\">\n<p><strong>Ivana Korbelov\u00e1 \u2014 Priv\u00e1t IVA<\/strong><\/p>\n<p>Nov\u00fd Smokovec 19060<br>062 01 High Tatras<br>Slovak republic<\/p>\n<p>E-mail: <a href=\"mailto:vysoketatry@privativa.sk\">vysoketatry@privativa.sk<\/a><br>\nPhone <a href=\"tel:+421911905399\">+421 911 905 399<\/a><\/p>\n<\/div>\n<p>The controller has not appointed a Data Protection Officer (DPO), as its activities do not require one under Art. 37 GDPR. Please address all questions regarding the protection of personal data directly to the controller at <a href=\"mailto:vysoketatry@privativa.sk\">vysoketatry@privativa.sk<\/a>.<\/p>\n\n<h2>3. Purposes of Processing and Legal Bases<\/h2>\n\n<h3>3.1 Accommodation booking<\/h3>\n<p><strong>Purpose:<\/strong> concluding and performing a short-term accommodation contract, communication about availability, booking confirmation, invoicing, and guest registration under Act No. 253\/1998 Coll. on the reporting of residence of citizens and the register of residents of the Slovak Republic.\nLegal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (Art. 6(1)(c) GDPR).<\/p>\n<p><strong>Legal basis:<\/strong> performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (Art. 6(1)(c) GDPR).<\/p>\n\n<h3>3.2 Handling a contact request<\/h3>\n<p><strong>Purpose:<\/strong> responding to an enquiry sent via the contact form or email.<\/p>\n<p><strong>Legal basis:<\/strong> the controller's legitimate interest (Art. 6(1)(f) GDPR) \u2014 responding to your request.<\/p>\n\n<h3>3.3 Bookkeeping<\/h3>\n<p><strong>Purpose:<\/strong> compliance with legal obligations in the area of accounting and taxes.<\/p>\n<p><strong>Legal basis:<\/strong> compliance with a legal obligation (Art. 6(1)(c) GDPR) \u2014 in particular Act No. 431\/2002 Coll. on accounting.<\/p>\n\n<h3>3.4 Cookies and website analytics<\/h3>\n<p><strong>Purpose:<\/strong> ensuring the functionality of the website and analysing traffic.<\/p>\n<p><strong>Legal basis:<\/strong> consent for analytical and marketing cookies (Art. 6(1)(a) GDPR); legitimate interest for technically necessary cookies.<\/p>\n\n<h2>4. Scope of Personal Data Processed<\/h2>\n\n<h3>When booking accommodation, we process:<\/h3>\n<ul>\n<li>first and last name<\/li>\n<li>email address<\/li>\n<li>phone number<\/li>\n<li>dates of stay (check-in, check-out)<\/li>\n<li>number of guests<\/li>\n<li>selected accommodation type<\/li>\n<li>optional notes about the stay<\/li>\n<li>data needed to issue an invoice<\/li>\n<li>when accommodating a guest, also data under the residence-reporting act (type and number of ID document, date of birth, nationality)<\/li>\n<\/ul>\n\n<h3>When using the contact form, we process:<\/h3>\n<ul>\n<li>name<\/li>\n<li>email address<\/li>\n<li>phone number (optional)<\/li>\n<li>content of the message<\/li>\n<\/ul>\n\n<h3>Automatically collected data:<\/h3>\n<ul>\n<li>IP address, browser type, operating system<\/li>\n<li>date and time of visit<\/li>\n<li>pages visited<\/li>\n<li>cookies<\/li>\n<\/ul>\n\n<h2>5. Retention Period<\/h2>\n<table>\n<thead>\n<tr><th>Purpose<\/th><th>Retention period<\/th><\/tr>\n<\/thead>\n<tbody>\n<tr><td>Booking and invoice data<\/td><td>10 years (Accounting Act)<\/td><\/tr>\n<tr><td>Guest residence reporting<\/td><td>5 years (Residence Reporting Act)<\/td><\/tr>\n<tr><td>Contact form data<\/td><td>max. 12 months after handling<\/td><\/tr>\n<tr><td>Cookies<\/td><td>by type \u2014 from 1 day to 24 months<\/td><\/tr>\n<\/tbody>\n<\/table>\n<p>After the set period expires, personal data is securely destroyed unless there is another legal reason for its further retention.<\/p>\n\n<h2>6. Recipients of Personal Data<\/h2>\n<p>Your personal data may be provided to the following categories of recipients:<\/p>\n<ul>\n<li><strong>Web hosting provider<\/strong> \u2014 stores data on servers<\/li>\n<li><strong>Email service provider<\/strong> \u2014 ensures the delivery of emails<\/li>\n<li><strong>Accountant \/ accounting firm<\/strong> \u2014 for tax and accounting purposes<\/li>\n<li><strong>Public authorities<\/strong> \u2014 in cases stipulated by law (police, tax office)<\/li>\n<li><strong>Banks and payment institutions<\/strong> \u2014 when processing payments for the stay<\/li>\n<\/ul>\n<p>The controller does not provide personal data to third parties for marketing purposes and does not sell personal data.<\/p>\n\n<h2>7. Transfer to Third Countries<\/h2>\n<p>Personal data is processed primarily within the European Union. Where services involving data transfer outside the EU are used (for example Google Analytics), the transfer is safeguarded by the EU Standard Contractual Clauses or another appropriate mechanism under Art. 46 GDPR.<\/p>\n\n<h2>8. Your Rights<\/h2>\n<p>As a data subject, you have the following rights under the GDPR and Act No. 18\/2018 Coll.:<\/p>\n<ul>\n<li><strong>Right of access<\/strong> (Art. 15) \u2014 to find out whether and what data we process about you<\/li>\n<li><strong>Right to rectification<\/strong> (Art. 16) \u2014 to correct inaccurate or incomplete data<\/li>\n<li><strong>Right to erasure<\/strong> (Art. 17) \u2014 to request deletion of data when it is no longer needed or consent has been withdrawn<\/li>\n<li><strong>Right to restriction of processing<\/strong> (\u010dl. 18)<\/li>\n<li><strong>Right to data portability<\/strong> (Art. 20)<\/li>\n<li><strong>Right to object to processing<\/strong> (Art. 21)<\/li>\n<li><strong>Right to withdraw consent<\/strong> (Art. 7) \u2014 at any time, without affecting prior processing<\/li>\n<li><strong>Right to lodge a complaint<\/strong> with the supervisory authority \u2014 the Office for Personal Data Protection of the Slovak Republic, Hrani\u010dn\u00e1 12, 820 07 Bratislava, <a href=\"https:\/\/dataprotection.gov.sk\" target=\"_blank\" rel=\"noopener\">dataprotection.gov.sk<\/a><\/li>\n<\/ul>\n<p>To exercise any of these rights, send your request to <a href=\"mailto:vysoketatry@privativa.sk\">vysoketatry@privativa.sk<\/a>We will respond without undue delay, within 30 days at the latest.<\/p>\n\n<h2>9. Cookies<\/h2>\n<p>The privativa.sk website uses cookies \u2014 small text files stored in your browser.<\/p>\n<h3>Types of cookies used:<\/h3>\n<ul>\n<li><strong>Necessary cookies<\/strong> \u2014 required for the basic functionality of the site (language, cookie consent). They do not require your consent.<\/li>\n<li><strong>Analytical cookies<\/strong> \u2014 used to track traffic and user behaviour (e.g. Google Analytics). They require your consent.<\/li>\n<li><strong>Marketing cookies<\/strong> \u2014 not currently used.<\/li>\n<\/ul>\n<p>You can withdraw your consent to the use of cookies at any time by deleting cookies in your browser or by changing the cookie-bar settings on your next visit to the site.<\/p>\n\n<h2>10. Security Measures<\/h2>\n<p>The controller has adopted appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access:<\/p>\n<ul>\n<li>encrypted communication (HTTPS\/SSL)<\/li>\n<li>access to data only for authorised persons<\/li>\n<li>regular data backups<\/li>\n<li>up-to-date software and security solutions<\/li>\n<\/ul>\n\n<h2>11. Final Provisions<\/h2>\n<p>This Policy may be updated from time to time. The current version is always available at privativa.sk\/gdpr. The controller will inform data subjects of any significant changes in an appropriate manner.<\/p>\n<p>If you have any questions regarding the protection of personal data, please contact us:<\/p>\n<div class=\"iva-contact-box\">\n<p><strong>Priv\u00e1t IVA \u2014 Ivana Korbelov\u00e1<\/strong><\/p>\n<p>E-mail: <a href=\"mailto:vysoketatry@privativa.sk\">vysoketatry@privativa.sk<\/a><br>\nPhone <a href=\"tel:+421911905399\">+421 911 905 399<\/a><\/p>\n<p>Nov\u00fd Smokovec 19060<br>062 01 High Tatras<\/p>\n<\/div>\n\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>PRIV\u00c1T IVA \u00b7 GDPR Z\u00e1sady ochranyosobn\u00fdch \u00fadajov \u00da\u010dinn\u00e9 od 2. j\u00fana 2026 1. \u00davod Tieto Z\u00e1sady ochrany osobn\u00fdch \u00fadajov (\u010falej len \u201eZ\u00e1sady&#8220;) vysvet\u013euj\u00fa, ako Priv\u00e1t IVA sprac\u00fava osobn\u00e9 \u00fadaje n\u00e1v\u0161tevn\u00edkov webovej str\u00e1nky privativa.sk a host\u00ed ubytovacieho zariadenia vo Vysok\u00fdch Tatr\u00e1ch. Spracovanie osobn\u00fdch \u00fadajov sa riadi Nariaden\u00edm Eur\u00f3pskeho parlamentu a Rady (E\u00da) 2016\/679 z 27. apr\u00edla [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4312","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/pages\/4312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/comments?post=4312"}],"version-history":[{"count":13,"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/pages\/4312\/revisions"}],"predecessor-version":[{"id":4328,"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/pages\/4312\/revisions\/4328"}],"wp:attachment":[{"href":"https:\/\/privativa.sk\/en\/wp-json\/wp\/v2\/media?parent=4312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}