Privacy policy

1. Data controller

Štefan Bekeš, Ždiar 513, 059 55 Ždiar, Slovakia, business ID (IČO): 41955234. Telephone: +421 915 901 444, email: bekes@penzionkamzik.sk. Please send privacy-related questions to bekes@penzionkamzik.sk or by post to the controller’s address.

2. What data we process and why

Accommodation bookings

When you book through this website, by phone or by email, we process your first name and surname, email address, telephone number, stay dates, the number and ages of guests, any notes and deposit payment details (amount and payment status; we do not see your card number, which is handled by the payment gateway). Purposes: entering into and performing the accommodation contract, communication about your stay and accounting. Legal bases: performance of a contract (Article 6(1)(b) GDPR) and compliance with a legal obligation for accounting records (Article 6(1)(c)). The booking system is operated by our processor, Bookolo system s.r.o., Prague, Czech Republic. Payments are handled by the payment service identified in the booking system.

Enquiry form on the Contact page

Name, email address, telephone number, dates, number of guests and message text. Purpose: responding to your enquiry (steps prior to entering into a contract, Article 6(1)(b) GDPR). The form emails your message to us through Resend (Resend, Inc., USA; transfers to this third country are safeguarded by standard contractual clauses) and Cloudflare’s technical infrastructure. The message is not stored on the website; it remains only in our email inbox. To prevent spam, the server temporarily retains the sender’s IP address for up to one hour.

Guest register

On arrival, we record your first name, surname, permanent address, date of birth, identity document number, nationality and length of stay. Purpose and legal basis: the accommodation provider’s statutory duties, namely notifying the stay of foreign nationals under Slovak Act No. 404/2011 Coll. and keeping records for accommodation tax under Slovak Act No. 582/2004 Coll. and the generally binding regulation of the municipality of Ždiar (Article 6(1)(c) GDPR). We cannot provide accommodation without these details.

CCTV

If CCTV is used on the premises, information about its purpose, coverage and retention period is provided on the sign at the entrance.

This website

• This website does not store tracking or advertising cookies and does not use analytics tools that identify you. We measure traffic only through aggregate hosting statistics (Cloudflare), without cookies or profiling, so we do not display a cookie banner.
• Hosting and protection against attacks are provided by Cloudflare, Inc. (data centres in the EU, with legal safeguards under the EU–US Data Privacy Framework). For technical purposes, the server processes IP addresses and browser information in operational logs for a short period.
• The Bookolo booking system on the Reservations page is a third-party service. It may store technical information in your browser that is needed to complete a booking, such as your chosen dates. It only loads on that page.
• The Google map on the Contact page only loads after you click the button. Until then, Google receives no data. Once you click, Google’s privacy policy applies.
• Fonts are stored on our own server; nothing is downloaded from Google Fonts.
• When you first visit, we choose the website language based on the languages set in your browser. If the first of them is English, we also take into account the country of your connection, which our hosting provider derives from your IP address; we do not store it for this purpose.
• If you choose a language yourself, the website remembers your choice in a cookie named “jazyk” for 12 months. If you close the suggestion of another language version, your browser remembers this in its local storage. Both serve only to carry out your choice, not to track you, and you can delete them at any time in your browser settings.

3. Who receives your data

Bookolo system s.r.o. (booking system), the payment gateway (card payments), Resend and Cloudflare (form delivery and hosting), an accountant or accounting firm (accounting records), the municipality of Ždiar (accommodation tax) and public authorities where required by law, such as the foreign police. We do not sell your data or use it for advertising.

4. How long we retain data

• bookings and accounting records: 10 years (Accounting Act);
• guest register: for the periods required by the applicable legislation;
• form enquiries: until the matter is resolved, for no longer than 1 year after the last communication;
• CCTV footage: for the period stated in the CCTV notice.

5. Your rights

You have the right to access and rectify your data, to have it erased if we are no longer legally required to retain it, to restrict processing, to portability of data you provided under a contract, and to object to processing based on a legitimate interest. Write to bekes@penzionkamzik.sk or to the controller’s postal address; we will respond within one month.

If you believe we are handling your data unlawfully, you may lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava, dataprotection.gov.sk.

6. Changes

If the way we process data changes, for example if we introduce analytics with consent, we will update this page and state the date. This version applies from the publication date shown on this page.