StayNest

Privacy Policy

Last updated: July 2025

1. Data Controller

The data controller pursuant to Art. 4(7) GDPR is RS Properties s. r. o., Čapajevova 8660, 080 01 Prešov, Slovak Republic (IČO: 56356293). Contact: info@rsproperties.sk

2. Data We Collect

  • Account data: name, email address, phone number
  • Booking data: stay dates, guest count, special requests, pet information
  • Payment data: booking amount, transaction ID (card details processed solely by Stripe)
  • Technical data: IP address, browser type, visited pages

3. Legal Basis for Processing

  • Performance of contract (Art. 6(1)(b) GDPR) — booking fulfilment, confirmation emails
  • Legal obligation (Art. 6(1)(c) GDPR) — accounting records
  • Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, service improvement, post-stay review requests

4. Data Processors

We share data only with trusted service providers: Stripe (payments), Supabase (database, EU servers), Resend (transactional email), Hostex (calendar management), Vercel (hosting). We do not sell personal data.

5. Retention Periods

  • Booking & payment records: 10 years (Slovak accounting law)
  • User account: active period + 90 days after deactivation
  • Technical logs: 90 days

6. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact us at info@rsproperties.sk. You may also lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

7. Cookies

We use only essential session cookies required for login and CSRF protection. No third-party tracking or advertising cookies are used.