Privacy Policy
Last updated: July 2025
1. Data Controller
The data controller pursuant to Art. 4(7) GDPR is RS Properties s. r. o., Čapajevova 8660, 080 01 Prešov, Slovak Republic (IČO: 56356293). Contact: info@rsproperties.sk
2. Data We Collect
- Account data: name, email address, phone number
- Booking data: stay dates, guest count, special requests, pet information
- Payment data: booking amount, transaction ID (card details processed solely by Stripe)
- Technical data: IP address, browser type, visited pages
3. Legal Basis for Processing
- Performance of contract (Art. 6(1)(b) GDPR) — booking fulfilment, confirmation emails
- Legal obligation (Art. 6(1)(c) GDPR) — accounting records
- Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, service improvement, post-stay review requests
4. Data Processors
We share data only with trusted service providers: Stripe (payments), Supabase (database, EU servers), Resend (transactional email), Hostex (calendar management), Vercel (hosting). We do not sell personal data.
5. Retention Periods
- Booking & payment records: 10 years (Slovak accounting law)
- User account: active period + 90 days after deactivation
- Technical logs: 90 days
6. Your Rights
Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact us at info@rsproperties.sk. You may also lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).
7. Cookies
We use only essential session cookies required for login and CSRF protection. No third-party tracking or advertising cookies are used.