Privacy policy
How we process your personal data when you book a stay, on the website and on social media, and what rights you have.
This document fulfils the information obligation under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (“GDPR”), Slovak Act No. 18/2018 Coll. on personal data protection and Section 109 of Slovak Act No. 452/2021 Coll. on electronic communications.
1. Controller
The controller of your personal data is TJ-Legal, s.r.o., Hlavná 133, 080 01 Prešov, Slovakia, company ID 45 447 292, registered in the Commercial Register of the District Court Prešov, section Sro, file no. 22687/P, which operates the Tatra Green accommodation at Golfová 72B and 72C, 059 52 Veľká Lomnica.
Contact for data protection matters: booking@tj-legal.com, +421 949 113 267.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking your stay and communicating with you (e-mail, phone) | name and surname, e-mail, phone, dates and number of guests, content of your message | Art. 6(1)(b) GDPR, performance of a contract and pre-contractual steps | while the booking is handled and 3 years after the stay (general limitation period) |
| Booking via Booking.com | data Booking.com passes on to us to arrange the stay (name, contact, dates, number of guests, any requests) | Art. 6(1)(b) GDPR | as for direct bookings |
| Legal obligations (accounting, guest register, local accommodation tax) | identification and invoicing data, data required for the guest register | Art. 6(1)(c) GDPR | as required by law, accounting documents 10 years |
| Newsletter (offers and news) | Art. 6(1)(a) GDPR, consent | until consent is withdrawn | |
| Operation and security of the website (server logs) | IP address, time, visited URL, browser type | Art. 6(1)(f) GDPR, legitimate interest in secure operation | short term, per hosting settings |
| Traffic measurement (cookies) | cookie identifiers, website usage data | Art. 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021 Coll., consent | see section 3 |
| Our Facebook and Instagram profiles | data you publish on the profiles or send us through them | Art. 6(1)(f) GDPR, legitimate interest in communicating with guests | for the lifetime of the profile, messages until handled |
Providing your data when booking is necessary to conclude and perform the accommodation contract; without it we cannot arrange your stay. Other data you provide voluntarily. Bookings via Booking.com are processed by Booking.com B.V. as an independent controller under its own privacy policy. For our Facebook and Instagram profiles, Meta Platforms Ireland Ltd. is a joint controller for profile insights.
We do not carry out automated decision-making or profiling with legal effects.
3. Cookies and traffic measurement
Cookies are small files your browser stores on your device. We use essential cookies without consent under Section 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications, and analytics cookies only with your consent given in the banner on your first visit. Google Analytics does not load at all before consent (Google Consent Mode v2, default state “denied”). The website does not use marketing or advertising cookies. Declining has no effect on your use of the website.
You can change or withdraw your choice at any time via Cookie settings or the Cookies link in the footer. You can also delete cookies in your browser settings.
| Name | Provider | Category and purpose | Duration |
|---|---|---|---|
| tg_cookie_consent_v1 | tatragreen.sk (browser storage) | essential, stores your consent choice | 12 months |
| _ga, _ga_* | Google Analytics 4 (Google Ireland Ltd.) | analytics, distinguishes visitors and sessions for anonymous traffic statistics | 2 years |
We use Google Analytics 4 with IP anonymisation, without advertising signals and without linking to your Google account. Details on how Google processes data: policies.google.com/privacy.
4. Recipients
Only authorised persons of the controller and the following processors or independent controllers have access to your data:
- Websupport, s.r.o., Karadžičova 12, 821 08 Bratislava, Slovakia, company ID 36 421 928 (web hosting, e-mail)
- Smash, s.r.o., Bendíkova 15828/16, 080 01 Prešov, Slovakia, company ID 46 007 041 (website management and development)
- Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics 4)
- Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (Facebook, Instagram)
- Booking.com B.V., Oosterdokskade 163, 1011 DL Amsterdam, Netherlands (booking platform)
- public authorities where required by law (e.g. the municipality for the guest register)
5. Transfers outside the EU
We process data in the European Union. Google (Google Analytics) and Meta (our Facebook and Instagram profiles) may transfer some data to the USA. Such transfers rely on the European Commission adequacy decision for the EU-U.S. Data Privacy Framework of 10 July 2023 and on standard contractual clauses under Art. 46 GDPR. Google Analytics runs only with your consent.
6. Your rights
Under Articles 15 to 22 GDPR you have the right:
- to access your data and obtain a copy,
- to rectification of inaccurate or incomplete data,
- to erasure where the data is no longer needed or you have withdrawn consent,
- to restriction of processing,
- to data portability for data you provided on the basis of a contract or consent,
- to object to processing based on legitimate interest and to direct marketing,
- to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
- to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovakia, statny.dozor@pdp.gov.sk, dataprotection.gov.sk.
Send your request to booking@tj-legal.com. We will respond without undue delay and within one month at the latest. If we have doubts about your identity, we may ask you to verify it.
7. Security
The website communicates exclusively over encrypted HTTPS. Data is stored on servers in the European Union, only authorised persons have access via individual credentials, and data is backed up regularly. The website is not intended for children under 16 and we do not knowingly process their data.
8. Changes to this document
We may update this document when tools or legislation change. The current version is always available on this page with the effective date.
9. Contact
TJ-Legal, s.r.o., Hlavná 133, 080 01 Prešov, Slovakia
booking@tj-legal.com
+421 949 113 267