Privacy Policy

1. Data Controller Identification

The data controller responsible for personal data processing according to the General Data Protection Regulation (EU) 2016/679 (GDPR) is:

2. Purposes and Legal Grounds for Processing

We only process your personal data to the extent strictly necessary for the following purposes:

• Booking enquiries and accommodation services: Name, email, phone number, dates of stay and number of guests for preparing offers, booking confirmation and fulfilling accommodation contracts (Art. 6(1)(b) GDPR).
• Communication and contact messages: Responding to questions sent via contact forms, email or WhatsApp (Art. 6(1)(f) GDPR – legitimate interest).
• Compliance with legal obligations: Guest registration book, local tourist tax reporting for the municipality of Ždiar, foreign police registration and tax/accounting compliance (Art. 6(1)(c) GDPR).

3. AI Concierge and Technical Tools

Our website features an interactive AI assistant powered by Google Gemini API to provide quick answers about rooms, prices, meals, and activities in the Belianske Tatras.

Questions submitted to the AI assistant are processed exclusively to generate answers. Please do not submit confidential personal data into the chat conversation.

4. Data Recipients and Processors

We do not sell or provide your personal data to third parties for marketing purposes. Access is limited to authorized personnel and verified technical infrastructure providers:

• Resend Inc.: Secure delivery of booking notification emails.
• Google LLC (Google Cloud, Firebase & Google Maps): Provider of secure hosting infrastructure, map services and artificial intelligence models.
• Public authorities: Municipality of Ždiar (tourist tax), Foreign Police and Tax Office strictly as required by law.

5. Data Retention Period

Data from non-completed booking enquiries is retained for a maximum of 6 months. Accommodation records and accounting documents are retained for the statutory period required by law (typically 10 years).

6. Cookies

Our website uses only essential technical functions required for the proper operation of the site. We do not use any third-party analytics or advertising cookies (such as Google Analytics or Meta Pixel).

On your first visit the site asks for your consent to store your cookie preference. Your choice is saved in your browser’s localStorage (key “goralturist-cookie-consent”) — we do not use any cookies for this. You can change your decision at any time via the “Cookie settings” button in the page footer.

7. Your Rights under GDPR

Under GDPR, you have the right to:

• Request access to your personal data and obtain a copy,
• Request rectification of inaccurate or incomplete data,
• Request erasure of personal data ("right to be forgotten"),
• Request restriction of processing,
• Object to data processing based on legitimate interest,
• Data portability to another controller,
• Lodge a complaint with a supervisory authority (Data Protection Authority of the Slovak Republic, dataprotection.gov.sk).

To exercise your rights, please contact us by email at: goralturistinfo@gmail.com.