Rezidencia Stela

Legal

Privacy policy

This notice explains what personal data we collect via rezidenciastela.sk, why, and your rights under the GDPR (Regulation (EU) 2016/679) and Slovak Act 18/2018.

Last updated: 24 April 2026

1. Data controller

The data controller under Article 4(7) GDPR is: VAHOreal s.r.o. Contact: info@rezidenciastela.sk, +421 918 511 111 Tomáš Vahalík is the authorised representative for communication with data subjects.

2. What data we process

We process the following categories of personal data: • Identification — first and last name • Contact — email, phone number • Message content — anything you voluntarily share via contact form or chatbot • Technical — IP address, browser type, pages visited (anonymised for analytics)

3. Purposes of processing

We use your data only to: • Respond to enquiries submitted via the contact form • Arrange and conduct apartment viewings • Prepare reservation and purchase contracts • Produce anonymised traffic statistics (only with consent via the cookie banner)

4. Legal basis

Processing is based on: • Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps • Art. 6(1)(f) GDPR — legitimate interests of the controller (site functionality, abuse prevention) • Art. 6(1)(a) GDPR — consent (analytics cookies)

5. Recipients

We do not share your data with third parties for marketing purposes. We do use technical processors: • Supabase (database and backend hosting) — EU region • OpenAI (chatbot processing) — data not used for model training • Hosting provider (Vercel or equivalent) — EU region All processors are contractually bound to GDPR compliance.

6. Retention periods

Contact-form data is kept for as long as necessary to process the enquiry, at most 3 years from last contact. Chatbot transcripts are retained for 12 months to improve the service. Data tied to an apartment reservation or sale is retained for the period required by law (accounting records 10 years).

7. Your rights

As a data subject you have the right to: • Access your data (Art. 15 GDPR) • Rectify inaccurate data (Art. 16 GDPR) • Erasure — the right to be forgotten (Art. 17 GDPR) • Restrict processing (Art. 18 GDPR) • Data portability (Art. 20 GDPR) • Object to processing (Art. 21 GDPR) • Withdraw consent for analytics cookies at any time Exercise your rights by emailing info@rezidenciastela.sk. We reply within 30 days.

8. Right to lodge a complaint

If you believe your data has been mishandled, you may lodge a complaint with the supervisory authority: Slovak Data Protection Authority Hraničná 12, 820 07 Bratislava www.dataprotection.gov.sk

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page together with a new "last updated" date.