At Výtoky – forest sport park we value your trust. This page explains what personal data we process about you, why, for how long and what your rights are. We follow Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
1. Who processes your data
Controller: Výtoky s.r.o., registered office Hviezdoslavova 1902/36, 921 01 Piešťany, Slovakia, Company ID (IČO) 56573448, Tax ID (DIČ) 2122346050.
Facility: VÝTOKY – forest sport park, Hubina 313, 922 21 Moravany nad Váhom (cadastral area Hubina)
Data protection contact: info@vytoky.sk, +421 915 057 619
We have not appointed a data protection officer (DPO) because the law does not require us to. You can contact us directly about anything.
2. Booking requests and reservations
When you fill in the form on the Booking page or contact us by e-mail or phone, we process:
- the contact person's first and last name, e-mail and phone number,
- the name of the school, club or organisation,
- the type and dates of the stay, number of people, meals, additional services (e.g. live cooking) and your note.
We need this data to check availability, prepare an offer, confirm the reservation and organise the stay. Legal basis: steps prior to entering into a contract and performance of the contract (Art. 6(1)(b) GDPR). Without this data we cannot handle your request.
We store the booking record in our internal reservation overview and calendar (Google). The website only publicly shows the occupancy of dates by colour, never your name or contact details. For public events that choose this option, the organisation's name and a link to its website may be shown in the Upcoming events section.
Retention: while the request and the stay are being handled and then for 3 years (for possible complaints and claims). Enquiries that did not lead to a stay are deleted after 1 year at the latest.
3. Accommodation and accommodation tax
If you stay with us, we keep a register of guests for the purposes of the local accommodation tax, which we pay to the municipality. For foreign nationals we are also obliged to report their stay to the foreign police. For this we mainly process name, address, date of birth, nationality, ID document number and dates of arrival and departure. Legal basis: legal obligation (Art. 6(1)(c) GDPR, Slovak Act No. 582/2004 Coll. on local taxes and the municipality's generally binding regulation, Act No. 404/2011 Coll. on the residence of foreigners). We keep this data for as long as these regulations require, usually 5 years.
4. Invoices and accounting
To issue invoices and keep our accounts, we process billing details (name, address, company ID, tax ID, contact person) and payment details. Legal basis: legal obligation (Art. 6(1)(c) GDPR, Slovak Act No. 431/2002 Coll. on accounting and Act No. 222/2004 Coll. on VAT). Retention: 10 years from the end of the year to which the document relates.
5. Review requests
After your stay we may send you one e-mail asking for a review on Google. Legal basis: our legitimate interest in improving our services and getting feedback from customers (Art. 6(1)(f) GDPR). If you do not want such e-mails, simply reply to info@vytoky.sk and we will not send you any more. You write the review directly on Google, where Google's rules apply.
6. General communication
If you write to us or call us with a question, we use your contact details only to reply. Legal basis: legitimate interest in answering your message (Art. 6(1)(f) GDPR). We keep e-mails for a maximum of 3 years.
7. CCTV
Parts of the park are monitored by cameras. Monitored areas are marked with a sign. The purpose is to protect property, keep guests safe and detect crime. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). The cameras do not record rooms, the sauna, changing rooms or toilets.
Recordings are kept for a maximum of 15 days and are then automatically overwritten. If a recording captures an incident needed for proceedings (e.g. theft), we keep it until the proceedings end and may provide it to the police or a court. Only the park management has access to the recordings.
8. Cookies and visitor statistics
The website uses essential cookies without which it would not work (e.g. remembering your choice in the cookie banner). These do not require consent.
We use analytics cookies (Google Analytics 4, loaded via Google Tag Manager) only if you agree to them in the cookie banner. They help us find out which pages are read and how many booking requests come from the website. Legal basis: your consent (Art. 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications). You can change or withdraw your consent at any time using the round cookie icon in the bottom left corner of the page. Data in Google Analytics is kept for a maximum of 14 months.
On some pages we show a Google map and reviews from Google. When you load them, Google may process your IP address in accordance with its privacy policy. Links to Facebook and Instagram are just links: we do not send them any data unless you click them.
9. Who we share data with
We do not sell your data. We only share it with these recipients, who help us provide our services:
- Q7 – web hosting and the info@vytoky.sk e-mail,
- Google (Google Ireland Ltd. and Google LLC) – reservation overview, calendar, sending confirmations, Google Analytics, Maps,
- CookieYes Limited – cookie banner management and record of your consent,
- an external accounting firm – bookkeeping.
Where required by law, we may also provide data to public authorities (e.g. the tax office, the municipality, the police).
Some providers (Google) may also process data in the USA. The transfer is protected by the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.
10. Your rights
You have the right to:
- know what data we hold about you and get a copy of it,
- have incorrect data corrected,
- request deletion of data if it is no longer needed or the law does not require us to keep it,
- request restriction of processing,
- data portability for data you have provided to us,
- object to processing based on legitimate interest (e.g. review requests or CCTV),
- withdraw consent at any time (e.g. for cookies), which does not affect processing before the withdrawal.
Just write to us at info@vytoky.sk. We will reply without undue delay, within 1 month at the latest.
If you believe we are handling your data incorrectly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. However, we would be glad if you contacted us first.
11. Further information
We do not carry out automated decision-making or profiling. We protect data with passwords, two-factor login and access limited to the members of our team who handle bookings.
We may update this page, for example when we add a new service. The current version is always published here.
Valid from 6 November 2026. This is a translation; in case of doubt, the Slovak version applies.