StayNest

Privacy Policy

Last updated: July 2025

1. Data Controller

The data controller pursuant to Art. 4(7) GDPR is RS Properties s. r. o., Čapajevova 8660, 080 01 Prešov, Slovak Republic (IČO: 56356293). Contact: info@rsproperties.sk

2. Data We Collect

  • Account data: name, email address, phone number
  • Booking data: stay dates, guest count, special requests, pet information
  • Payment data: booking amount, transaction ID (card details processed solely by Stripe)
  • Technical data: IP address, browser type, visited pages

3. Legal Basis for Processing

  • Performance of contract (Art. 6(1)(b) GDPR) — booking fulfilment, confirmation emails
  • Legal obligation (Art. 6(1)(c) GDPR) — accounting records
  • Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, service improvement, post-stay review requests

4. Data Processors

We share data only with trusted service providers: Stripe (payments), Supabase (database, EU servers), Resend (transactional email), Hostex (calendar management), Vercel (hosting), and — only with your consent — Meta (ad measurement, see section 7). We do not sell personal data.

5. Retention Periods

  • Booking & payment records: 10 years (Slovak accounting law)
  • User account: active period + 90 days after deactivation
  • Technical logs: 90 days

6. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact us at info@rsproperties.sk. You may also lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

7. Cookies

We always use essential session cookies required for login and CSRF protection; these need no consent.

With your consent (Art. 6(1)(a) GDPR) we also use marketing cookies and the Meta Pixel of Meta Platforms Ireland Ltd. It measures how well our Facebook and Instagram ads work (for example how many bookings follow an ad) and helps target our advertising. Meta receives data about your visit (cookie identifier, IP address, pages viewed and, once a booking is completed, its value and the name of the property — never your name, email or card details). Without your consent the Meta Pixel is not loaded.

You can withdraw consent at any time through the “Cookie settings” link in the page footer, which shows the cookie banner again. Meta processes the data as an independent controller under its own policy (facebook.com/privacy/policy) and may transfer it to the US under the European Commission’s adequacy decision (EU–US Data Privacy Framework).

We always use essential cookies. With your consent we also use marketing cookies (Meta Pixel) to measure how well our ads work. Without consent we do not load them. More information