Privacy policy
1. Controller
Marián Hodonský
Čapášska 67, 94304 Obid
Company ID (IČO): 40622126
E-mail: info@sturovo.eu
We run Štúrovo.eu, an accommodation directory and guide to Štúrovo and the surrounding area, through which guests can send booking requests to hosts. This policy explains what personal data we process, why, and what rights you have.
2. Guests: booking requests
- What data: name, e-mail, phone (optional), dates of stay, number of guests, your message, page language and IP address.
- Purpose: to pass your request to the host, to e-mail you about its status (received, confirmed, declined, cancelled) and to protect the form from abuse.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). IP address: legitimate interest in preventing spam (Art. 6(1)(f) GDPR).
- Who receives it: the host you send the request to. The host is an independent controller of your data and is responsible for any further use (for example for the stay itself).
- How long: request data is deleted 2 years after the departure date, the IP address after 30 days.
3. Hosts: account and listing
- Account data (e-mail, name if provided, password stored only as a hash, language, dates of registration and acceptance of the terms). Purpose: registration, sign-in and e-mails about the account and bookings. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Listing data (name, description, address, map location, phone, e-mail, website, photos, price, capacity, availability). Once approved it is shown publicly. If you include personal data (such as a name or phone number), it will be publicly visible. Uploaded photos are re-saved, which removes hidden data such as location from your phone.
- Listings added by the operator from publicly available sources or provided by the host. Legal basis: legitimate interest in informing visitors (Art. 6(1)(f) GDPR). Hosts can ask us to correct, remove or take over a listing at info@sturovo.eu.
- Security data (IP address of failed sign-in attempts, kept for at most 24 hours; hosting technical logs). Legal basis: legitimate interest in protecting accounts.
Visitors who do not send a request or register do not give us any personal data, and we do not track them.
4. Cookies
We use a single strictly necessary cookie (session) that enables sign-in and protects forms. It expires when you close the browser. We use no analytics or advertising cookies, so we do not show a consent banner.
5. Processors and third parties
- Our hosting and e-mail provider (Websupport, s. r. o.), which processes data on our behalf.
- OpenStreetMap Foundation (map tiles and address search): when a map is shown, tiles are loaded from their servers, which transmits your IP address. When searching for an address on the map, the text you enter is sent to their Nominatim service. Your device location is used only after you click “My location”.
We do not sell personal data, use it for advertising or transfer it outside the European Union.
6. Retention
Accounts and listings are kept until you delete your account. Deleting an account also deletes its listings, photos and received requests (copies may remain in hosting backups for their retention period). Guest requests are deleted 2 years after departure. Verification and password reset links are valid for 1 to 24 hours.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and to object. Hosts can handle most of this themselves on the My account page. Guests can cancel a request via the link in the e-mail. Otherwise write to us at info@sturovo.eu.
8. Complaints
If you believe we handle your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).