The controller who decides the purposes and means of processing your personal data is Miroslav Smrtič, Škovránčia 5374/3, 903 01 Senec, Slovak Republic, Company ID (IČO): 50087002.
For anything related to personal data you can reach us at kancelariasenec@gmail.com or by phone at +421 908 899 389. We have not appointed a data protection officer, as the law does not require one.
Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.
2. What data we process
We only process data you provide yourself, plus basic technical data about your visit:
Office booking: first and last name, e-mail address, phone number, date and time of the booking, price, payment method and status, payment identifier and variable symbol.
Contact form: e-mail address, subject and message text.
Accounting records: the data needed to issue and archive the proof of payment.
User account (if you create one): username, e-mail and a password stored as a cryptographic hash.
Technical data: IP address, browser type and website analytics data.
3. Purposes and legal bases
Handling the booking, communicating about it and granting access to the space — performance of a contract under Art. 6(1)(b) GDPR. Without this data we cannot process a booking.
Processing the payment and any refund — performance of a contract under Art. 6(1)(b) GDPR.
Bookkeeping and archiving of accounting documents — legal obligation under Art. 6(1)(c) GDPR, in particular Act No. 431/2002 Coll. on accounting.
Replying to a message from the contact form — legitimate interest under Art. 6(1)(f) GDPR in communicating with people interested in the service.
Protecting the space and property, keeping a record of bookings and establishing or defending legal claims — legitimate interest under Art. 6(1)(f) GDPR.
Measuring website traffic with analytics tools — your consent under Art. 6(1)(a) GDPR. Analytics only starts once you give it in the cookie bar, and the consent can be withdrawn at any time.
4. Who we share data with
We do not sell personal data and never share it for marketing purposes. It is disclosed only to parties directly involved in delivering the service:
Stripe Payments Europe, Ltd. (Ireland) — card payment processing. Card details are entered directly on Stripe’s secure page and never reach us.
The provider’s bank — for bank transfer payments.
Google Ireland Limited — e-mail delivery and website analytics (Google Analytics).
The hosting provider running the website and the booking database.
An accountant and tax adviser, and public authorities where the law requires it.
5. Transfers outside the EU
Some of the providers listed above belong to groups headquartered in the United States and data may reach them. Such transfers are covered by the standard contractual clauses approved by the European Commission, or by certification under the EU–US Data Privacy Framework.
6. How long we keep data
Once these periods expire the data is deleted or anonymised.
Booking data and the related accounting documents: 10 years from the end of the accounting year in which the booking took place (statutory archiving period).
Contact form messages: no longer than 1 year after the last exchange.
User account data: for as long as the account exists, and no longer than 1 year after it is closed.
Analytics data: no longer than 14 months.
7. Cookies and analytics
The website uses only these categories of cookies:
A technical cookie holding your booking in progress, so you can return to it after coming back from the payment gateway. It lasts at most 3 days.
A login cookie and a session cookie, set only if you sign in to the administration.
Google Analytics cookies, which measure website traffic in aggregate form. They are only set once you allow them in the cookie bar; until then the analytics script is not loaded at all.
You can change your decision about analytics cookies at any time with the button below — the cookie bar reappears and you can choose again.
You can also restrict or block cookies in your browser settings at any time. If you block the technical cookie, the booking process may not work correctly.
8. Your rights
In relation to your personal data you have the right:
to access the data and obtain a copy of what we process about you,
to have inaccurate data corrected and incomplete data completed,
to have data erased where it is no longer needed and no statutory archiving duty prevents it,
to restrict the processing,
to receive the data you gave us and have it ported to another controller,
to object to processing based on legitimate interest,
to withdraw consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing before it.
To exercise your rights, write to kancelariasenec@gmail.com. We will respond within one month at the latest. If you believe the processing of your data breaches the law, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
9. Automated decision-making and security
We do not use your data for automated individual decision-making or profiling.
The connection between your browser and our server is encrypted. Only the provider has access to the booking database, passwords are stored as cryptographic hashes, and card details are never stored on our side.