Legal
Privacy policy
This notice explains what personal data we collect via rezidenciastela.sk, why, and your rights under the GDPR (Regulation (EU) 2016/679) and Slovak Act 18/2018.
Last updated: 24 April 2026
1. Data controller
The data controller under Article 4(7) GDPR is:
VAHOreal s.r.o.
Contact: info@rezidenciastela.sk, +421 918 511 111
Tomáš Vahalík is the authorised representative for communication with data subjects.
2. What data we process
We process the following categories of personal data:
• Identification — first and last name
• Contact — email, phone number
• Message content — anything you voluntarily share via contact form or chatbot
• Technical — IP address, browser type, pages visited (anonymised for analytics)
3. Purposes of processing
We use your data only to:
• Respond to enquiries submitted via the contact form
• Arrange and conduct apartment viewings
• Prepare reservation and purchase contracts
• Produce anonymised traffic statistics (only with consent via the cookie banner)
4. Legal basis
Processing is based on:
• Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps
• Art. 6(1)(f) GDPR — legitimate interests of the controller (site functionality, abuse prevention)
• Art. 6(1)(a) GDPR — consent (analytics cookies)
5. Recipients
We do not share your data with third parties for marketing purposes. We do use technical processors:
• Supabase (database and backend hosting) — EU region
• OpenAI (chatbot processing) — data not used for model training
• Hosting provider (Vercel or equivalent) — EU region
All processors are contractually bound to GDPR compliance.
6. Retention periods
Contact-form data is kept for as long as necessary to process the enquiry, at most 3 years from last contact.
Chatbot transcripts are retained for 12 months to improve the service.
Data tied to an apartment reservation or sale is retained for the period required by law (accounting records 10 years).
7. Your rights
As a data subject you have the right to:
• Access your data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure — the right to be forgotten (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent for analytics cookies at any time
Exercise your rights by emailing info@rezidenciastela.sk. We reply within 30 days.
8. Right to lodge a complaint
If you believe your data has been mishandled, you may lodge a complaint with the supervisory authority:
Slovak Data Protection Authority
Hraničná 12, 820 07 Bratislava
www.dataprotection.gov.sk
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced on this page together with a new "last updated" date.