Privacy policy

Who processes your data

The controller is Klaudia Bednárová, Drevárska 454/3, 058 01 Poprad, company ID 46749187, Slovakia. Contact: vilapodlesanka@gmail.com, +421 911 375 782.

We have not appointed a Data Protection Officer as we are not required to. Please contact us directly with any request.

What data, why and on what basis

We process personal data for the following purposes:

• Handling your enquiry and the accommodation contract: name, email or phone, home address, dates of stay, number of guests, the room chosen and your note. Together with the enquiry we store the time and wording of your confirmation that you have read this information. Ticking the box in the form confirms that you have read it; it is not consent to processing. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps and performance of a contract).
• Website visit counter: a one-way fingerprint is derived from your IP address and browser data. It changes every day and serves only to avoid counting the same visitor twice on the same day. We do not store the IP address, the fingerprint cannot be reversed and we do not link it to any other data. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in knowing whether the site is visited).
• Guest register and reporting duty: name, date of birth, permanent address, identity document number, dates of stay and, for foreign nationals, citizenship. Legal basis: Art. 6(1)(c) GDPR (Slovak Act No. 404/2011 Coll. on the residence of foreigners and Act No. 253/1998 Coll.).
• Local accommodation tax: records under the municipal ordinance of Vysoké Tatry. Legal basis: Art. 6(1)(c) GDPR (Act No. 582/2004 Coll. on local taxes).
• Accounting and tax duties: invoicing data. Legal basis: Art. 6(1)(c) GDPR (Act No. 431/2002 Coll. on accounting).
• Displaying the Google map: IP address and device data. Legal basis: Art. 6(1)(a) GDPR (your consent, which you may withdraw at any time).

How long we keep the data

• Booking correspondence that did not result in a stay, up to 1 year.
• Data about a completed stay: 3 years after the stay ends (limitation period).
• Guest register, under specific legislation, as a rule 5 years.
• Accounting and tax documents: 10 years under the Accounting Act.
• Visit statistics: daily totals contain no personal data and are kept without a time limit; the fingerprints used to tell visits apart are deleted every day.

Who we share data with

We do not sell your data and never share it for marketing. Recipients may be:

• our accountant or tax adviser,
• our hosting and email provider,
• public authorities where required by law (for example the foreign police or the tax administrator).

How we protect your data

We take measures proportionate to the data involved:

• the whole website and the form submission run over an encrypted connection (HTTPS),
• enquiries go straight to the owner's mailbox and are stored on the server in a file that is not accessible from the internet,
• the website administration is password protected and locks for fifteen minutes after five failed attempts,
• access is limited to the owner and to people who need the data to arrange your stay or to keep the accounts,
• we keep the website and hosting software up to date.

No measure is infallible. Should a breach occur that poses a risk to your rights, we will notify the supervisory authority and, where the risk is high, you as well.

Transfers outside the European Union

If you display the map, your data is processed by Google Ireland Limited and possibly its parent company in the USA. Without your consent the map does not load and no transfer occurs. Details are in the cookie policy.

Is providing data mandatory

We need the booking form data to reply and prepare your accommodation, without it we cannot process the booking. Guest register data is required by law and without it we cannot accommodate you.

Your rights

You have the right to:

• access your data and obtain a copy,
• have inaccurate data corrected or incomplete data completed,
• have your data erased where it is no longer needed and no legal duty prevents it,
• restrict processing,
• data portability for data you provided,
• object to processing,
• withdraw consent to the map at any time, without affecting prior processing.

Complaints

If you believe we handle your data incorrectly, write to vilapodlesanka@gmail.com. You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

Automated decision-making

We do not use your data for automated decision-making or profiling.

This is an informative translation. In case of any discrepancy, the Slovak wording prevails.

Last updated: 2026-10-20