1 · Controller
The controller of personal data is the separate legal entity operating the specific object you book (also stated at the time of booking and in the confirmation e-mail). For matters concerning personal data protection, contact us at booking@tatravillas.sk.
2 · What data we process
We process the data you provide to us during booking and communication: first name and surname, e-mail, phone number, stay details (dates, number of guests, apartment) and, to the necessary extent, billing and payment data. We do not process sensitive data.
3 · Purpose and legal basis
We process the data for the purpose of handling the booking and providing the accommodation (performance of a contract), to fulfil legal obligations (in particular accounting and tax obligations), and for communication related to the stay. We send marketing messages (newsletter) only on the basis of your consent, which you may withdraw at any time.
4 · Data recipients
We make the data available, only to the necessary extent, to processors who provide services for us: the Smoobu reservation system (booking management), the payment gateway provider (payment processing) and, in relevant cases, booking portals and the accountant. We do not provide the data to third parties for their own marketing purposes.
5 · Retention period
We retain personal data for the period necessary to fulfil the purpose and for the period required by legal regulations (e.g. accounting documents for the statutory period). Data processed on the basis of consent is retained until that consent is withdrawn.
6 · Your rights
You have the right to access your data, to have it corrected or erased, to restriction of processing, to data portability, and the right to object. You may withdraw consent to processing for marketing purposes at any time. You also have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection of the Slovak Republic.
Each object is operated by a separate legal entity (stated at the time of booking).