Privacy Policy · Riders Park Donovaly
Privacy Policy
Your privacy matters to us. This page explains what personal data we collect, why and how we use it, how we protect it, and what rights you have. Processing is carried out in accordance with EU Regulation 2016/679 (GDPR).
I
Data Controller
1.The data controller within the meaning of Art. 4(7) GDPR is GOIMPEX BRATISLAVA a.s., Prešovská 39, 821 02 Bratislava, Slovakia, company registration no. 35758015, registered in the Commercial Register of the Municipal Court Bratislava III (hereinafter "the Controller").
2.Contact: info@parksnow.sk. The Controller has not appointed a Data Protection Officer (DPO) as this obligation does not arise under Art. 37 GDPR.
3.This privacy policy applies to the website www.parksnow.sk and related digital services operated under RIDERS PARK DONOVALY.
II
Categories of Personal Data & Purposes of Processing
Website visits
1.When you visit www.parksnow.sk, we automatically process technical log data: IP address, browser type, operating system, language, URL visited, referrer URL, date and time of access. This is used to ensure website security, functionality, and performance.
Contact form & email
2.When you contact us via the form or email, we process your name, email address, optionally phone number, and message content, for the purpose of handling your enquiry or complaint.
Ticket sales & reservations
3.When purchasing a ticket or making a reservation, we process name and surname, email address, billing details, and payment data (handled by our payment gateway — we do not store card numbers). The purpose is contract performance and statutory accounting.
Newsletter & marketing
4.If you subscribe to our newsletter, we process your email address to send updates on news, promotions, and events. You may withdraw consent at any time via the unsubscribe link in any email or by writing to info@parksnow.sk.
Cookies & analytics
5.We use cookies on our website. For full details see our Cookie Policy.
III
Legal Basis for Processing
1.Contract performance (Art. 6(1)(b) GDPR) — ticket sales, reservations, handling complaints and customer requests.
2.Legitimate interests (Art. 6(1)(f) GDPR) — ensuring website security and functionality, fraud prevention, direct marketing to existing customers.
3.Legal obligation (Art. 6(1)(c) GDPR) — statutory accounting, tax obligations, and other legal requirements.
4.Consent (Art. 6(1)(a) GDPR) — newsletter subscription, analytics and marketing cookies. Consent is voluntary and may be withdrawn at any time without negative consequences.
IV
Recipients & Data Processors
1.We do not sell or rent personal data to third parties. We may share data with trusted processors acting solely on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR:
2.Payment gateways — processing online payments; all payment processors are PCI DSS certified.
3.Email & newsletter tool — sending booking confirmations, tickets, and marketing emails.
4.Web hosting & CDN — operating the website and secure data storage.
5.Analytics tools — anonymised traffic statistics (where analytics cookies consent was given).
6.We disclose data to public authorities (police, tax offices, courts) only to the extent required by law.
V
International Data Transfers
1.We process personal data primarily within the European Union. Some tools (e.g. analytics or email services) may process data in the US or other third countries. In such cases we ensure an adequate level of protection through Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) or other appropriate safeguards.
VI
Data Retention Periods
1.Accounting & tax records — 10 years from the end of the relevant financial year (statutory requirement).
2.Customer contacts, sales records — for the duration of the contractual relationship and 3 years thereafter (limitation period).
3.Newsletter — until consent is withdrawn or 3 years of inactivity.
4.Website server logs — maximum 12 months from the time of recording.
5.Cookies — as per the expiry periods specified in our Cookie Policy.
VII
Your Rights as a Data Subject
1.Right of access (Art. 15 GDPR) — you have the right to confirm whether we process your personal data, and if so, to access it and obtain further information.
2.Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate or completion of incomplete personal data.
3.Right to erasure / right to be forgotten (Art. 17 GDPR) — you may request erasure of your data where it is no longer necessary, consent has been withdrawn, or data was processed unlawfully.
4.Right to restriction of processing (Art. 18 GDPR) — you may request restriction of processing in cases provided for by GDPR.
5.Right to data portability (Art. 20 GDPR) — you have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format.
6.Right to object (Art. 21 GDPR) — you may object at any time to processing based on legitimate interests or for direct marketing purposes.
7.Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
8.Submit requests to info@parksnow.sk. We will respond within 30 days.
Right to lodge a complaint with a supervisory authority
If you believe your data is processed in breach of GDPR, you may lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.
VIII
Data Security
1.We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. The website uses encrypted connections (HTTPS/TLS). Access to personal data is restricted to authorised employees and processors bound by confidentiality obligations. In the event of a security incident, we act in accordance with Arts. 33–34 GDPR.
IX
Changes to This Policy
1.We may update this policy from time to time, for example due to legislative changes or new processing activities. The current version is always available on this page with the date of the last update. We will notify you of significant changes by email or via an announcement on the website.