Privacy Policy

Effective from 27.10.2026

1. Data controller

The data controller is Dušan Šroba – DATACLICK, Andreja Bažíka 31/102, 027 32 Zuberec, Slovak Republic, Company ID: 44281820 (the "Controller"). Contact: the Contact page.

2. What data we process

• Registration data of hosts and guests: name, e-mail, phone, password (hashed).
• When you sign in with Google, we receive only your name, e-mail address and Google account identifier from Google — used solely to create and sign in to your account. We never see your Google password.
• Listing data: title, description, photos, location, prices.
• Inquiries and messages sent through the Portal's forms.
• Technical data: IP address, browser type, cookies needed for the website to function.
• When you send an inquiry or a message, we store your IP address and browser type to prevent misuse of the forms (fake and mass inquiries). The legal basis is legitimate interest; we anonymise the IP address after 90 days.

3. Purpose and legal basis of processing

We process data to provide the Portal's services (facilitating contact between host and guest, managing the user account, communication), based on the performance of a contract (GDPR Art. 6(1)(b)) and the Controller's legitimate interest in operating and securing the Portal (GDPR Art. 6(1)(f)).

4. Cookies

The Portal uses technical cookies necessary for login and session functionality, and, with your consent, third-party analytics/marketing cookies. See the Cookies page for the full list.

5. Retention period

We retain personal data for the duration of the user account and thereafter for as long as necessary to comply with legal obligations (e.g. accounting and tax regulations).

6. Rights of data subjects

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing. Send requests via the Contact page.

7. Data sharing

We do not share personal data with third parties, except to the extent necessary to operate the Portal (e.g. the hosting provider) or where required by law.

8. Data obtained from publicly available sources

For listings compiled by the Operator (unclaimed listings), we process data about the accommodation facility and, to the necessary extent, the contact details of its owner or operator (name, e-mail, phone) where this is a natural person. The source is publicly available information, in particular the accommodation's own website, public directories and registers and online accommodation portals.

The purpose is to inform visitors about the accommodation on offer, to pass guest inquiries to the owner and to offer them to take over the listing. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). The owner's contact details are not displayed publicly. We keep them while the listing is published or until an objection is raised.

We inform the owner about the processing at the latest at the first contact. They may object to the processing at any time (Art. 21 GDPR) via the content report form; we will then stop processing their data and change or remove the listing as they wish.

9. Recipients and processors

Personal data may be processed on our behalf by the following categories of processors, only to the extent necessary to operate the Portal:

• hosting and e-mail service provider,
• SMS gateway provider (SMS notifications to owners),
• Cloudflare (protecting forms against bots),
• OpenAI (text translation and AI chat; data is not used to train models),
• Google (analytics only with consent, Sign in with Google),
• PayPal and Stripe (host payments),
• accounting software (issuing invoices).

We pass the details of an inquiry to the host the guest sent it to.

10. Transfers to third countries

Some processors (e.g. OpenAI, Google, Cloudflare, Stripe, PayPal) may also process data outside the European Economic Area, in particular in the USA. Transfers are based on an adequacy decision of the European Commission (EU–US Data Privacy Framework) or on standard contractual clauses.

11. Automated decision-making

We do not carry out automated decision-making with legal effects or profiling. Automatic protective measures (e.g. limits on the number of inquiries) may hold an inquiry back for review; a person decides what happens next.

12. Retention periods

• IP addresses when forms are submitted: 90 days, then anonymised,
• AI chat conversation records: 180 days,
• accounting documents: 10 years under accounting law,
• consents (e.g. to publish photos): while the listing is published and then for the period during which claims can be made,
• other data: for as long as necessary for the purpose of processing.

13. Right to lodge a complaint

If you believe that the processing of your personal data breaches the law, you have the right to lodge a complaint with a supervisory authority: in Slovakia the Office for Personal Data Protection (dataprotection.gov.sk), in Czechia the Office for Personal Data Protection (uoou.gov.cz), or the supervisory authority in your country of residence.

14. Anonymous visitor statistics

To know how many people use the Portal and which pages are useful, we count page views with our own cookieless measurement. We store nothing on your device and do not keep your IP address: the IP address and browser identifier are turned into a one-way anonymous fingerprint that changes every day and cannot be traced back to a person. We only store the page you came from (e.g. a search engine), the device and browser type, and the country derived from the time zone.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in operating and improving the Portal. The data is not shared with third parties and is deleted after 400 days. Google Analytics is still used only with your consent.

The same cookie-free measurement (with an anonymous fingerprint that changes daily and without storing IP addresses) is also provided by our technical supplier DSDATA.sk, which develops and maintains the Portal. It processes the data solely on our behalf as a processor (Art. 28 GDPR) and does not use it for any other purpose.