Privacy Policy
1. General provisions
These terms and conditions for the protection of personal data (hereinafter referred to as the ” Terms “) provide information on the processing of personal data when operating the Ubytovna Tatrasová website and related accommodation services. They are in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the ” GDPR “) and Act No. 18/2018 Coll. on the Protection of Personal Data.
Please note: User registration and online purchase of goods/services are not possible on the website. Personal data is collected only through communication forms.
These terms and conditions for the protection of personal data (hereinafter referred to as the ” Terms “) provide information on the processing of personal data when operating the Ubytovna Tatrasová website and related accommodation services. They are in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the ” GDPR “) and Act No. 18/2018 Coll. on the Protection of Personal Data.
Please note: User registration and online purchase of goods/services are not possible on the website. Personal data is collected only through communication forms.
2. Operator
The controller who determines the purposes and means of processing personal data is:
Detail Value Business name: EKO – Ba sro Punch: Karpatské námestie 7770/10A, Bratislava – Rača district, 83106 ID: 52989691 VAT number: SK2121205834 Contact email: info@ubytovna-tarasova.sk Contact numbers: 0917798119, 0918664831
(hereinafter referred to as the ” Operator “)
The controller who determines the purposes and means of processing personal data is:
| Detail | Value |
| Business name: | EKO – Ba sro |
| Punch: | Karpatské námestie 7770/10A, Bratislava – Rača district, 83106 |
| ID: | 52989691 |
| VAT number: | SK2121205834 |
| Contact email: | info@ubytovna-tarasova.sk |
| Contact numbers: | 0917798119, 0918664831 |
(hereinafter referred to as the ” Operator “)
3. Responsible person
The person responsible for ensuring compliance with obligations and for communication with data subjects is:
Detail Value Name and surname: Viktor Baca Address: Humenský Rokytov 224, Rokytov pri Humenno 067 13 Contact email: info@ubytovna-tarasova.sk Contact phone: 0917798119
The person responsible for ensuring compliance with obligations and for communication with data subjects is:
| Detail | Value |
| Name and surname: | Viktor Baca |
| Address: | Humenský Rokytov 224, Rokytov pri Humenno 067 13 |
| Contact email: | info@ubytovna-tarasova.sk |
| Contact phone: | 0917798119 |
4. Purposes, legal basis and categories of personal data processed
The operator processes personal data for the following purposes:
Purpose of processing Legal basis for processing (Art. 6 GDPR) Categories of processed personal data A. Processing of communication (via form) Pre-contractual relations based on the request of the data subject (paragraph 1(b)) Name, surname, email address, phone number, content of the message/request, IP address of the sender (for form protection). B. Responding to inquiries and communicating (via the Contact Form) Legitimate interest of the Operator (paragraph 1 letter f) – to respond to customer inquiries. Name, surname, email address, phone number, message content, sender’s IP address (for form protection). C. Request for accommodation services (via form) Pre-contractual relations based on the request of the data subject (paragraph 1(b)) Name, surname, email address, phone number, content of the message/request, IP address of the sender (for form protection). D. Protecting forms from spam and abuse (Cloudflare Turnstile service) Legitimate interest of the Operator (paragraph 1 letter f) – to ensure the protection and functionality of IT systems. IP address , browser/device information, data processed by the Turnstile service (e.g. mouse movement). E. Traffic measurement and website analysis (Google Analytics) Consent of the data subject (paragraph 1 letter a) – for non-essential cookies. IP address (anonymized), browser and device information, behavior on the site.
Note on IP address: The IP address is recorded when the form is submitted and is used primarily for technical security and protection against abuse, especially in connection with the Cloudflare Turnstile service.
The operator processes personal data for the following purposes:
| Purpose of processing | Legal basis for processing (Art. 6 GDPR) | Categories of processed personal data |
| A. Processing of communication (via form) | Pre-contractual relations based on the request of the data subject (paragraph 1(b)) | Name, surname, email address, phone number, content of the message/request, IP address of the sender (for form protection). |
| B. Responding to inquiries and communicating (via the Contact Form) | Legitimate interest of the Operator (paragraph 1 letter f) – to respond to customer inquiries. | Name, surname, email address, phone number, message content, sender’s IP address (for form protection). |
| C. Request for accommodation services (via form) | Pre-contractual relations based on the request of the data subject (paragraph 1(b)) | Name, surname, email address, phone number, content of the message/request, IP address of the sender (for form protection). |
| D. Protecting forms from spam and abuse (Cloudflare Turnstile service) | Legitimate interest of the Operator (paragraph 1 letter f) – to ensure the protection and functionality of IT systems. | IP address , browser/device information, data processed by the Turnstile service (e.g. mouse movement). |
| E. Traffic measurement and website analysis (Google Analytics) | Consent of the data subject (paragraph 1 letter a) – for non-essential cookies. | IP address (anonymized), browser and device information, behavior on the site. |
Note on IP address: The IP address is recorded when the form is submitted and is used primarily for technical security and protection against abuse, especially in connection with the Cloudflare Turnstile service.
5. Recipients of personal data
Personal data may be disclosed to the following categories of recipients who act as intermediaries or entities fulfilling a legal obligation for the Operator:
Intermediaries:
Companies operating the website.
Google Ireland Limited (for the Google Analytics service, which is used to analyze website traffic).
Cloudflare, Inc. (for the Turnstile service, which protects forms from spam/bots).
In the case of using external reservation systems, the providers of these reservation systems.
State authorities: In the case of fulfilling legal obligations (e.g. Slovak Police Force, Tax Office).
Personal data may be disclosed to the following categories of recipients who act as intermediaries or entities fulfilling a legal obligation for the Operator:
Intermediaries:
Companies operating the website.
Google Ireland Limited (for the Google Analytics service, which is used to analyze website traffic).
Cloudflare, Inc. (for the Turnstile service, which protects forms from spam/bots).
In the case of using external reservation systems, the providers of these reservation systems.
State authorities: In the case of fulfilling legal obligations (e.g. Slovak Police Force, Tax Office).
6. Retention period of personal data
The operator stores personal data for the period necessary to fulfill the purpose of the processing:
Data from forms (A, B, C, D): For the period necessary to process the request/inquiry and resolve any disputes, usually a maximum of 1 year.
- Analytical data (E): Data in Google Analytics is stored for 26 months, or until the data subject deletes the cookies.
The operator stores personal data for the period necessary to fulfill the purpose of the processing:
Data from forms (A, B, C, D): For the period necessary to process the request/inquiry and resolve any disputes, usually a maximum of 1 year.
- Analytical data (E): Data in Google Analytics is stored for 26 months, or until the data subject deletes the cookies.
7. Transfer to third countries
When using Google Analytics (Google Ireland Limited/Google LLC) and Cloudflare Turnstile (Cloudflare, Inc.), data may be transferred to the United States of America (USA). The operator ensures the protection of personal data in accordance with the GDPR by applying appropriate safeguards, such as Standard Contractual Clauses (SCC) and other technical and organizational measures.
When using Google Analytics (Google Ireland Limited/Google LLC) and Cloudflare Turnstile (Cloudflare, Inc.), data may be transferred to the United States of America (USA). The operator ensures the protection of personal data in accordance with the GDPR by applying appropriate safeguards, such as Standard Contractual Clauses (SCC) and other technical and organizational measures.
8. Cookies and external services
The Ubytovna Tatrasová website uses cookies and external services:
The Ubytovna Tatrasová website uses cookies and external services:
a) Cookies
Cookies are small text files that are stored on your device and are used to improve the functionality of the website. We use them to:
Technical (necessary) cookies: They ensure the basic functionality of the website and forms. The legal basis is legitimate interest.
Analytical cookies (Google Analytics): They are used to measure and analyze traffic and user behavior on the website. We process these cookies only with your consent .
Cookies are small text files that are stored on your device and are used to improve the functionality of the website. We use them to:
Technical (necessary) cookies: They ensure the basic functionality of the website and forms. The legal basis is legitimate interest.
Analytical cookies (Google Analytics): They are used to measure and analyze traffic and user behavior on the website. We process these cookies only with your consent .
b) Google Analytics
The operator uses the Google Analytics service , which is provided by Google Ireland Limited. This service collects data on the behavior of visitors to the website. The operator has activated IP anonymization in Google Analytics , which ensures that Google shortens the IP address in EU/EEA member states.
The operator uses the Google Analytics service , which is provided by Google Ireland Limited. This service collects data on the behavior of visitors to the website. The operator has activated IP anonymization in Google Analytics , which ensures that Google shortens the IP address in EU/EEA member states.
c) Cloudflare Turnstile
To protect forms from automated spam and abuse, the Operator uses the Cloudflare Turnstile service , provided by Cloudflare, Inc. This service analyzes user interaction with the form (e.g. mouse movement) and may use cookies or collect the IP address to verify that it is a human interaction, based on the Operator’s legitimate interest in protecting its IT systems.
To protect forms from automated spam and abuse, the Operator uses the Cloudflare Turnstile service , provided by Cloudflare, Inc. This service analyzes user interaction with the form (e.g. mouse movement) and may use cookies or collect the IP address to verify that it is a human interaction, based on the Operator’s legitimate interest in protecting its IT systems.
9. Rights of the data subject
As a data subject, you have the following rights in accordance with the GDPR:
Right to access personal data (Article 15 GDPR).
Right to rectification of inaccurate data (Article 16 GDPR).
Right to erasure (“right to be forgotten”) in cases provided for by law (Article 17 GDPR).
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Article 20 GDPR).
The right to object to processing based on legitimate interest (Article 21 GDPR), in particular to the processing of IP addresses for the purposes of form protection.
The right to withdraw consent at any time (Article 7 GDPR), in particular consent to the use of analytical cookies.
The right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.
You can exercise your rights in writing at the Operator’s address or by email to the responsible person.
These Personal Data Protection Terms and Conditions shall enter into force and effect on the date of their publication on the Operator’s website
As a data subject, you have the following rights in accordance with the GDPR:
Right to access personal data (Article 15 GDPR).
Right to rectification of inaccurate data (Article 16 GDPR).
Right to erasure (“right to be forgotten”) in cases provided for by law (Article 17 GDPR).
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Article 20 GDPR).
The right to object to processing based on legitimate interest (Article 21 GDPR), in particular to the processing of IP addresses for the purposes of form protection.
The right to withdraw consent at any time (Article 7 GDPR), in particular consent to the use of analytical cookies.
The right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.
You can exercise your rights in writing at the Operator’s address or by email to the responsible person.
These Personal Data Protection Terms and Conditions shall enter into force and effect on the date of their publication on the Operator’s website