Privacy policy

1. Data controller

Štefan Bekeš, Ždiar 513, 059 55 Ždiar, Slovakia, business ID (IČO): 41955234. Telephone: +421 915 901 444, email: info@resortkamzik.sk. Please send privacy-related questions to info@resortkamzik.sk or by post to the controller’s address.

2. What data we process and why

Accommodation bookings

When you book through this website, by phone or by email, we process your first name and surname, email address, telephone number, stay dates, the number and ages of guests, any notes and deposit payment details (amount and payment status; we do not see your card number, which is handled by the payment gateway). Purposes: entering into and performing the accommodation contract, communication about your stay and accounting. Legal bases: performance of a contract (Article 6(1)(b) GDPR) and compliance with a legal obligation for accounting records (Article 6(1)(c)). The booking system is operated by our processor, Bookolo system s.r.o., Prague, Czech Republic. Payments are handled by the payment service identified in the booking system.

Enquiry form on the Contact page

Name, email address, telephone number, dates, number of guests and message text. Purpose: responding to your enquiry (steps prior to entering into a contract, Article 6(1)(b) GDPR). The form emails your message to us through Resend (Resend, Inc., USA; transfers to this third country are safeguarded by standard contractual clauses) and Cloudflare’s technical infrastructure. The message is not stored on the website; it remains only in our email inbox. To prevent spam, the server temporarily retains the sender’s IP address for up to one hour.

Guest register

On arrival, we record your first name, surname, permanent address, date of birth, identity document number, nationality and length of stay. Purpose and legal basis: the accommodation provider’s statutory duties, namely notifying the stay of foreign nationals under Slovak Act No. 404/2011 Coll. and keeping records for accommodation tax under Slovak Act No. 582/2004 Coll. and the generally binding regulation of the municipality of Ždiar (Article 6(1)(c) GDPR). We cannot provide accommodation without these details.

CCTV

If CCTV is used on the premises, information about its purpose, coverage and retention period is provided on the sign at the entrance.

This website, visitor analytics and cookies

• Visitor analytics without cookies. To know how many people visit the website, where they come from, which pages they read, what they use on them (for example the booking button, the phone number or the date picker), which dates are in demand and how many bookings the website has brought, we record these events on our own server. Nothing is stored on or read from your device in the process. We do not store IP addresses or any identifier that could tell individual visitors apart, only daily totals (page, traffic source, device type, country). The traffic source is passed on to the next page in the link address (the kz parameter). When a booking is made, our server reads the amount, dates and rooms from the booking system, never your name or contact details. Legal basis: our legitimate interest in knowing how the website works and what it brings (Art. 6(1)(f) GDPR). This data is deleted after 25 months.
• Google Analytics and PostHog – only with your consent. More detailed visitor analytics: Google Analytics 4 (Google Ireland Limited) and PostHog (PostHog Inc., data stored in the EU). PostHog also records movement and clicks on the page (click map and visit recording); what you type into forms is not recorded and the booking system is hidden in the recording. Cookies _ga (2 years) and ph_ (1 year). We keep Google Analytics data for 14 months, PostHog visit recordings for 30 days and other PostHog data for 1 year.
• Meta Pixel and Google Ads – only with your consent to ad measurement. They match a visit and a booking with a click on our ad on Facebook, Instagram or Google, so that we know whether the advertising pays off. Providers: Meta Platforms Ireland Limited and Google Ireland Limited; data may be transferred to the USA under the EU-US Data Privacy Framework. Cookies _fbp and _fbc, _gcl and our own kz_rek with the ad click identifier (90 days). When a booking is made, our server may send Meta the booking details (amount and dates) together with this identifier, never your name or contact details.
• Your consent. On your first visit a banner asks for your consent; rejecting is as easy as accepting, and in the settings you can also allow just one of the two purposes. You can change your choice or withdraw consent at any time via the Cookie settings link in the footer; withdrawing also deletes the cookies of these services. The website remembers your choice in the browser’s local storage for 12 months. Legal basis: consent (Art. 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021 Coll.).
• Hosting and protection against attacks are provided by Cloudflare, Inc. (data centres in the EU, with legal safeguards under the EU–US Data Privacy Framework). For technical purposes, the server processes IP addresses and browser information in operational logs for a short period.
• The Bookolo booking system on the Reservations page is a third-party service. It may store technical information in your browser that is needed to complete a booking, such as your chosen dates. It only loads on that page.
• The Google map on the Contact page only loads after you click the button. Until then, Google receives no data. Once you click, Google’s privacy policy applies.
• Fonts are stored on our own server; nothing is downloaded from Google Fonts.
• When you first visit, we choose the website language based on the languages set in your browser. If the first of them is English, we also take into account the country of your connection, which our hosting provider derives from your IP address; we do not store it for this purpose.
• If you choose a language yourself, the website remembers your choice in a cookie named “jazyk” for 12 months. If you close the suggestion of another language version, your browser remembers this in its local storage. Both serve only to carry out your choice, not to track you, and you can delete them at any time in your browser settings.

3. Who receives your data

Bookolo system s.r.o. (booking system), the payment gateway (card payments), Resend and Cloudflare (form delivery and hosting), an accountant or accounting firm (accounting records), the municipality of Ždiar (accommodation tax) and public authorities where required by law, such as the foreign police. With your consent also Google, Meta and PostHog, to the extent described in the section on this website. Andrej Petrulák – TatraByte runs the website and the analytics for us as our processor. We do not sell your data.

4. How long we retain data

• bookings and accounting records: 10 years (Accounting Act);
• guest register: for the periods required by the applicable legislation;
• form enquiries: until the matter is resolved, for no longer than 1 year after the last communication;
• aggregate visitor data and records of bookings made through the website (without name or contact details) – 25 months, the ad click identifier – 90 days,
• Google Analytics – 14 months, PostHog – visit recordings 30 days, other data 1 year,
• CCTV footage: for the period stated in the CCTV notice.

5. Your rights

You have the right to access and rectify your data, to have it erased if we are no longer legally required to retain it, to restrict processing, to portability of data you provided under a contract, and to object to processing based on a legitimate interest. Write to info@resortkamzik.sk or to the controller’s postal address; we will respond within one month.

If you believe we are handling your data unlawfully, you may lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava, dataprotection.gov.sk.

6. Changes

If the way we process data changes, we will update this page. Last change: September 2026 – visitor analytics and cookie consent.