info.podzvonicou@gmail.com
+421940817466

Privacy Policy (GDPR)

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (specifically Articles 13 and 14, which establish the so‑called information obligation of the controller). Act No. 18/2018 Coll. on the Protection of Personal Data (specifically Sections 19 and 20)

1. Identification details of the controller

Chalupa Pod Zvonicou s.r.o.
Karpatské námestie 7770/10A
83106 Bratislava – Rača city district
Slovakia
Company ID No.: 57778914

Tax ID No.: 2123112904

info.podzvonicou@gmail.com

+421940817466

2. Types of Personal Data and Their Purpose

  • Processing reservations and performance of the contract
    • Data: First name, last name, email, phone number, permanent address, date of arrival and departure, payment details.
    • Purpose: Reservation confirmation, communication with the guest, issuing documents and providing access to the accommodation.
    • Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
  • Keeping a register of accommodated guests (legal obligation)
    • Data: First name, last name, ID card/passport number, permanent address, date of arrival and departure.
    • Purpose: Fulfilling obligations towards the municipality (local accommodation tax) and the foreign police.
    • Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Accounting and tax purposes
    • Data: Billing details, records of payments.
    • Purpose: Issuing invoices and keeping accounts in accordance with applicable laws.
    • Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Protection of property and security
    • Data: CCTV footage of outdoor areas.
    • Purpose: Protection of the accommodation provider’s property and safety of guests.
    • Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR).
    • Direct marketing (informing existing customers)
      • Data: Email address, phone number, first name and last name.
      • Purpose: Sending newsletters, special offers or discounts to previous guests in accordance with applicable legislation (e.g. the Electronic Communications Act).
      • Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR). The guest has the right at any time to object free of charge to this processing and to unsubscribe (by clicking the link in the email).
    • Marketing and sending news (for non-customers / general newsletter)
      • Data: Email address, first name.
      • Purpose: Sending marketing messages, promotions and news to persons who have not used the accommodation services in the past but have subscribed to the newsletter.
      • Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time.
    • Loyalty program (if discount systems for repeated stays are applied)
      • Data: First name, last name, email, phone number, history of reservations and services used, discounts applied and loyalty points.
      • Purpose: Management of the loyalty account, recording of stays, provision of loyalty discounts, benefits and rewards for regular guests.
      • Legal basis: Performance of the contract on participation in the loyalty program (Art. 6(1)(b) GDPR) or Consent of the data subject (Art. 6(1)(a) GDPR) in the case of voluntary registration.

3. Data Retention Period

Purpose of Processing – Retention Period

Performance of contract / Reservation – for the duration of the contractual relationship and settlement of obligations

Guest register / Accommodation tax – in accordance with the requirements of the municipality of Banský Studenec

Accounting documents and invoices – 10 years following the year to which they relate

Camera recordings – a maximum of 3 days (if no incident has occurred)

Direct marketing – for the duration of the contractual relationship and for a maximum of 5 years from the last stay, or until the client unsubscribes.

Marketing and sending newsletters – 5 years from the granting of consent, or until consent is withdrawn

Loyalty program – for the duration of the client’s participation in the loyalty program (until the account is cancelled / consent is withdrawn), or for a maximum of 5 years from the last activity/stay.

4. To whom your data is provided (recipients)

Your data is stored securely and is not sold to third parties for marketing purposes. It may only be made available to:

  • Accommodation service intermediaries (e.g. Booking.com, Airbnb – depending on the channel through which the reservation was made).
  • Providers of software and accounting services (a data processing agreement applies).
  • Public authorities (municipality/city for accommodation tax, the Foreign Police of the Slovak Republic, the tax office).

5. Rights of the Data Subject (Guests)

Guests have the following rights under the GDPR:

  • Right of access: The right to request confirmation of how and which personal data is processed.
  • Right to rectification: The right to have inaccurate or incomplete data corrected.
  • Right to erasure: The right to have data erased if it is no longer needed for the purposes for which it was collected (except for data that must be retained by law).
  • Right to restriction of processing: The right to request a temporary suspension of processing.
  • Right to object: The right to object to processing based on legitimate interest.
  • Right to lodge a complaint: The right to contact the Office for Personal Data Protection of the Slovak Republic.

6. Data Security

It is declared that appropriate technical and organizational measures have been adopted to ensure the protection of personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access.