Privacy and Cookies

1. Controller

The controller of personal data is:

TATRY GERLACH, spol. s r.o.
Lidická 1537/16, 059 51 Poprad - Matejovce, Slovakia
Company ID (IČO): 36 459 402
Registered in the Commercial Register of the District Court Prešov, section: Sro, insert no. 11517/P
Phone: +421 903 990 002
E-mail: info@chatyupaliho.sk

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection. For any questions about data protection, contact us using the details above.

2. What data we process

• Inquiry and booking data: name, phone, e-mail, dates of stay, number of guests, and any information about a pet. The website has no contact form; you give us your data by phone or e-mail.
• Accommodation book data: data from the ID document required by law (for foreign nationals, also the data needed to report the stay).
• Payment data: information on payment of the deposit and price (sender’s account number, amount, date). We do not process payment card data.
• Website technical data: IP address, browser type and time of access, recorded in server logs by the hosting provider.

3. Purposes and legal bases

• Handling your inquiry, concluding and performing the accommodation contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations (Art. 6(1)(c) GDPR): keeping the accommodation book and reporting the stay of foreign nationals under Act No. 404/2011 Coll. on the Residence of Foreign Nationals, registration of stays under Act No. 253/1998 Coll., tax and accounting law, and the accommodation tax under Act No. 582/2004 Coll. on Local Taxes.
• Legitimate interest (Art. 6(1)(f) GDPR): security and stability of the website, and the defence and exercise of legal claims.
• Consent (Art. 6(1)(a) GDPR): loading the Google Maps map on the Contact page. The map loads only after you consent.

4. Recipients

• the hosting provider Vercel Inc. (website operation, server logs),
• Google Ireland Ltd. / Google LLC, only if you consent to loading the map,
• Mega ubytovanie as an independent controller for bookings made through the portal,
• our accountant and tax advisor,
• public authorities where required by law: the Police Force of the Slovak Republic (foreigners’ police), the municipality of Pribylina, the tax office.

5. Transfers to third countries

Vercel Inc. and Google LLC are based in the USA. Data transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses.

6. Retention

We keep personal data only as long as necessary for the given purposes. Data from inquiries that do not lead to a booking is deleted without undue delay. Data in the accommodation book, tax documents and other data are kept for the periods set by specific laws; accounting documents for 10 years under the Accounting Act. Data needed to defend legal claims is kept for the limitation period. Server logs are kept for a short time according to the hosting provider’s settings.

7. Your rights

You have the right of access to your personal data, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You can withdraw any consent you have given at any time; withdrawal does not affect the lawfulness of processing before it. We do not use automated decision-making or profiling.

You can exercise your rights by e-mail at info@chatyupaliho.sk. You also have the right to lodge a complaint with the supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27
www.dataprotection.gov.sk

8. Cookies and browser storage

The website uses no analytics or advertising cookies and does not track your behaviour. We store only the following items in your browser’s local storage (localStorage):

• chaty-consent — stores your privacy choice (consent to external content). Necessary.
• chaty-season — remembers the summer/winter display you chose. Functional; set only after you click the season switch.

External content — Google Maps. The map on the Contact page loads only after you consent (in the privacy banner or with the “Load map” button). Once loaded, Google may set its own cookies and process your data under its own policy: policies.google.com/privacy. Fonts are hosted on the website itself and therefore make no external requests.

How to change your consent: click the Privacy settings link in the page footer. You can also delete stored data at any time in your browser settings.

9. Effective date

This policy takes effect on 8 October 2026. We may update it; the current version is always published on this page.