Legal

Privacy Policy

Effective from 2026-07-22. This policy describes how Stagislava s.r.o. processes personal data under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll.

1. Controller

Stagislava s.r.o., Desiata 26, 831 01 Bratislava, IČO: 00 000 000. Data protection contact: info@stagislava.com.

We are not required to appoint a Data Protection Officer; requests are handled directly by the managing director.

2. What data we process

  • Identification and contact data: name, email, phone number.
  • Inquiry content: event type, group size, dates, selected activities, notes.
  • Communication data: content of emails and WhatsApp messages.
  • Server technical data: IP address and User-Agent in standard hosting logs (kept short-term for security).

We do not process any special categories of data (health, biometrics, etc.) and do not carry out automated decision-making or profiling.

3. Purpose and legal basis

  • Handling inquiries and preparing offers legal basis: pre-contractual steps at the data subject's request (Art. 6(1)(b) GDPR).
  • Contract performance Art. 6(1)(b) GDPR.
  • Accounting and tax obligations Art. 6(1)(c) GDPR (Slovak Accounting Act No. 431/2002 Coll.).
  • Legitimate interest Art. 6(1)(f) GDPR: site security and record of communications.

4. Retention

  • Inquiries that did not lead to a contract: 24 months from the last communication.
  • Contract and accounting documents: 10 years (statutory obligation).
  • Server logs: max. 30 days.

5. Recipients and processors

We share data only with the following categories of recipients:

  • Website hosting and domain provider.
  • Email service provider.
  • WhatsApp / Meta Platforms Ireland Ltd. (when you contact us via WhatsApp).
  • External activity suppliers we book on your behalf (only the minimum needed — name, group size, date).
  • Our accountant and public authorities where required by law.

6. Transfers outside the EU

If you contact us via WhatsApp, communication may be processed by Meta Platforms, Inc. in the USA under the Standard Contractual Clauses approved by the European Commission. We do not perform other cross-border transfers by default.

7. Your rights

As a data subject, you have the right to:

  • access your data (Art. 15 GDPR);
  • rectification (Art. 16);
  • erasure — the right to be forgotten (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing (Art. 21);
  • lodge a complaint with the supervisory authority.

You can exercise these rights by email at info@stagislava.com. We reply within 30 days.

Supervisory authority: Slovak Data Protection Authority, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

8. Cookies

Details are in our Cookies Policy.

9. Changes to this policy

We may update this policy. The current version is always on this page with the effective date shown.

The Slovak version is legally binding. The English translation is provided for information only.