Privacy Policy

1. Data Controller Identification

The data controller responsible for personal data processing according to the General Data Protection Regulation (EU) 2016/679 (GDPR) is:

2. Purposes and Legal Grounds for Processing

We only process your personal data to the extent strictly necessary for the following purposes:

• Booking enquiries and accommodation services: Name, email, phone number, dates of stay and number of guests for preparing offers, booking confirmation and fulfilling accommodation contracts (Art. 6(1)(b) GDPR).
• Communication and contact messages: Responding to questions sent via contact forms, email or WhatsApp (Art. 6(1)(f) GDPR – legitimate interest).
• Compliance with legal obligations: Guest registration book, local tourist tax reporting for the municipality of Ždiar, foreign police registration and tax/accounting compliance (Art. 6(1)(c) GDPR).

3. AI Concierge and Technical Tools

Our website features an interactive AI assistant powered by Google Gemini API to provide quick answers about rooms, prices, meals, and activities in the Belianske Tatras.

Questions submitted to the AI assistant are processed exclusively to generate answers. Please do not submit confidential personal data into the chat conversation.

4. Data Recipients and Processors

We do not sell or provide your personal data to third parties for marketing purposes. Access is limited to authorized personnel and verified technical infrastructure providers:

• Resend Inc.: Secure delivery of booking notification emails.
• Google LLC (Google Cloud, Firebase & Google Maps): Provider of secure hosting infrastructure, map services and artificial intelligence models.
• Public authorities: Municipality of Ždiar (tourist tax), Foreign Police and Tax Office strictly as required by law.

5. Data Retention Period

Data from non-completed booking enquiries is retained for a maximum of 6 months. Accommodation records and accounting documents are retained for the statutory period required by law (typically 10 years).

6. Cookies

Our website does not use any third-party tracking, profiling or advertising cookies (such as Google Analytics or Meta Pixel). We only use essential technical functions necessary for the proper operation of the website.

7. Your Rights under GDPR

Under GDPR, you have the right to:

• Request access to your personal data and obtain a copy,
• Request rectification of inaccurate or incomplete data,
• Request erasure of personal data ("right to be forgotten"),
• Request restriction of processing,
• Object to data processing based on legitimate interest,
• Data portability to another controller,
• Lodge a complaint with a supervisory authority (Data Protection Authority of the Slovak Republic, dataprotection.gov.sk).

To exercise your rights, please contact us by email at: goralturistinfo@gmail.com.