Personal Data Protection

PRIVACY POLICY AND PERSONAL DATA PROTECTION

  1. Introduction

ProZeta s.r.o., with its registered office at Padlých hrdinov 24, 821 06 Bratislava – Podunajské Biskupice, Company ID (IČO): 36739499, as the controller of personal data, processes personal data in accordance with:

Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"), Act No. 18/2018 Coll. on the Protection of Personal Data, and other applicable legal regulations of the Slovak Republic.

This Privacy Policy explains:

what personal data we process, for what purpose, to whom it may be disclosed, how it is protected, and what rights you have as a data subject. This Privacy Policy applies to the following websites and services:

www.hotelmodena.sk
www.maranello-ristorante.sk
www.apolka.sk
www.happydaycatering.sk

  1. Data Controller

The controller of personal data is:

ProZeta s.r.o.
Padlých hrdinov 24
821 06 Bratislava – Podunajské Biskupice

Data Protection Contact:
Mgr. Roxana Pastuchová
Email: pastuchova@prozeta.sk
Phone: +421 915 613 223

  1. What Personal Data We Process

We primarily process the following data:

  • first and last name,
  • phone number,
  • email address,
  • billing details,
  • permanent residence address,
  • data necessary for reservations or orders,
  • data related to guest accommodation,
  • IP address,
  • cookies and website usage data,
  • communication conducted through forms, email, or social media.

In the case of accommodation services, to the extent required by law we may also process:

  • date of birth,
  • identity document number,
  • nationality,
  • data required under the Act on the Residence of Foreign Nationals and local accommodation fees.
  1. Purpose of Personal Data Processing

We process personal data primarily for the purpose of:

  • handling reservations and orders,
  • providing hotel, restaurant, and catering services,
  • communicating with customers,
  • issuing accounting and tax documents,
  • handling inquiries and complaints, sending commercial and marketing communications,
  • personalizing our service offerings, organizing competitions,
  • promotional activities, and events,
  • improving our services and websites,
  • traffic analytics,
  • ensuring the protection of property and safety through a camera surveillance system.
  1. Legal Basis for Processing

We process personal data on the basis of:

  • performance of a contract,
  • fulfillment of a legal obligation,
  • the controller's legitimate interest,
  • the data subject's consent.

Where processing is based on consent, you may withdraw that consent at any time.

  1. Marketing Communication

Where consent has been granted, we may use your data to:

  • send newsletters, inform you about news, events, and promotions,
  • carry out remarketing and personalized advertising,
  • run marketing campaigns on social media and web platforms.

You may unsubscribe from marketing emails at any time via the link included in the email or by contacting the controller.

  1. Cookies and Analytical Tools

We use cookies and similar technologies on our websites for the purpose of:

  • ensuring the proper functioning of the website,
  • traffic analytics,
  • measuring campaign performance, personalizing content and advertising.

We divide cookies into the following categories:

Necessary cookies

Required for the basic functionality of the website.

Statistical cookies

Help us analyze traffic and improve website content.

Marketing cookies

Used for personalized advertising and remarketing.

Users may change or withdraw their consent to the use of cookies at any time through the cookie settings or their internet browser.

  1. Third Parties and Processors

Personal data may be disclosed to third parties only to the extent necessary, in particular to:

  • reservation system providers,
  • accounting companies, IT and web service providers,
  • marketing and analytical tool providers,
  • CRM system providers,
  • payment service providers,
  • public authorities, where required by law.

Each processor is bound by a duty of confidentiality and a data processing agreement in accordance with the GDPR.

  1. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purpose of processing or for the period required by applicable law.

Data required for accounting and legal purposes is retained in accordance with the relevant statutory periods.

Marketing data is retained until consent is withdrawn or an objection is raised.

  1. Camera Surveillance System

Selected premises may be monitored by a camera surveillance system for the purpose of:

  • protecting property,
  • ensuring the safety of guests,
  • preventing unlawful activity.

Recordings are retained for the necessary period and are not disclosed to third parties, except in cases stipulated by law.

  1. Protection of Personal Data

We adopt appropriate technical, organizational, and personnel measures to protect personal data against:

  • unauthorized access,
  • loss,
  • misuse,
  • damage,
  • unauthorized disclosure.

Access to personal data is granted only to authorized persons designated by the controller.

  1. Rights of the Data Subject

You have the right to:

  • request access to your data,
  • have inaccurate data corrected,
  • have your data erased,
  • restrict processing,
  • object to processing,
  • data portability,
  • lodge a complaint with the supervisory authority.

The supervisory authority is:

Office for Personal Data Protection of the Slovak Republic

Hraničná 12

820 07 Bratislava

  1. Final Provisions

The controller reserves the right to update or amend this Privacy Policy.

The current version of the Privacy Policy is always published on the company's websites.

Date of last update: 10.09.2026

Book