1. Data Controller

Data Controller: Juraj Kálmán
Address: Šoltésovej 3670/25, 058 01 Poprad, Slovakia
Business ID: 40621880
Tax ID: 1028132875
E-mail: kalmanjuraj@gmail.com
Phone: +421 914 654 291

2. Personal Data We Process

When providing our services, we process the following categories of personal data:

Identification data: name, surname, date of birth, ID card or passport number (required by law for guest registration)

Contact data: email address, phone number, residential address

Reservation data: arrival and departure dates, number of guests, special requests

Payment data: payment card details are processed exclusively by our payment processor

3. Purpose and Legal Basis

We process your personal data for these purposes:

Contract performance (Art. 6(1)(b) GDPR):
- Processing reservations and providing accommodation services
- Communication regarding your reservation
- Payment processing

Legal obligations (Art. 6(1)(c) GDPR):
- Maintaining guest records as required by Slovak law
- Retention of accounting documents

Legitimate interest (Art. 6(1)(f) GDPR):
- Improving our services
- Property protection

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose of processing:

- Reservation data: 3 years after the end of stay
- Accounting documents: 10 years (legal requirement)
- Guest records: according to legal requirements
- Marketing communication: until consent is withdrawn

5. Your Rights

In relation to the processing of your personal data, you have the following rights:

Right of access: You have the right to obtain confirmation as to whether your personal data is being processed and, if so, to access that data.

Right to rectification: You have the right to have inaccurate personal data corrected.

Right to erasure: You have the right to request the deletion of your personal data if they are no longer needed for the purposes for which they were collected.

Right to restriction: You have the right to request restriction of processing of your personal data.

Right to data portability: You have the right to receive your personal data in a structured format.

Right to object: You have the right to object to the processing of your personal data.

Right to withdraw consent: If processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise these rights, contact us at: kalmanjuraj@gmail.com

6. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. Payment data is processed exclusively by certified payment processors in compliance with PCI DSS standards.

7. Data Sharing

We may share your personal data with the following categories of recipients:

- Payment processors (for payment processing)
- Booking system providers
- Government authorities (if required by law)

We only share data necessary to provide the service and require third parties to maintain the same data protection standards.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovakia
Tel.: +421 2 3231 3214
E-mail: statny.dozor@pdp.gov.sk
Web: www.dataprotection.gov.sk

9. Changes to This Policy

We may occasionally update this privacy policy. The current version is always available on our website.

Last updated: July 2025