Privacy Policy
Last updated: March 2026
1. Data Controller
The data controller responsible for the processing of your personal data is Ing. Barbara Chiusoliová, operating under the trade name Forest Park Garden Apartment, with registered address at Mokrohajská cesta 10, 841 04 Bratislava, Slovakia (hereinafter “Forest Park Garden Apartment”, “we”, or “us”). For any questions regarding the processing of your personal data, you may contact us at apartmentmokrohajska10@gmail.com.
2. Data We Collect
We collect and process the following personal data in connection with your reservation and stay:
Account & reservation data: first name, last name, email address, phone number, number of guests, check-in and check-out dates, and booking preferences.
Identity documents: copies of a valid identity document (ID card or passport) for all guests aged 18 and over, as required by Slovak accommodation law and for the administration of the local tourist tax.
Payment data: payment card details are collected and processed exclusively by our payment service provider, Tatra banka, a.s. (CardPay). Forest Park Garden Apartment does not store, access, or process your full card number, CVV, or other sensitive payment information on its own servers.
Technical data: IP address, browser type, and device information collected automatically when you visit our website.
3. Legal Basis for Processing
We process your personal data on the following legal grounds under the General Data Protection Regulation (GDPR):
Performance of a contract: processing your reservation, managing your stay, processing payments, and communicating with you about your booking.
Legal obligation: collecting identity documents as required by Slovak Act No. 253/1998 Coll. on the reporting of residence of citizens of the Slovak Republic and the register of inhabitants, and for the administration of the local tourist tax pursuant to Slovak Act No. 582/2004 Coll. on local taxes.
Legitimate interest: protecting the security of the property, preventing fraud, and improving our services.
4. Payment Processing
All payments, including accommodation fees and security deposit holds, are processed via the CardPay service provided by Tatra banka, a.s.. Your card details are entered directly on the secure payment gateway of the bank and are protected by the 3-D Secure standard. Forest Park Garden Apartment never comes into contact with your full card details, and no such data is stored on or transmitted through our servers. For information on how Tatra banka handles your data, please refer to the Tatra banka Legal Information.
5. Data Sharing
We do not sell, rent, or trade your personal data. Your data may be shared with the following categories of recipients only as necessary:
Tatra banka, a.s. — for the secure processing of payments and transactions.
City of Bratislava — guest registry data and tourist tax records as required by law.
Slovak Police — guest registry data if required by law.
6. Data Retention
Reservation and account data is retained for the duration of your account and for 3 years following your last stay, in accordance with general limitation periods under Slovak law. Identity document copies are retained for the period required by Slovak accommodation reporting obligations and deleted thereafter. Payment transaction records are retained for 10 years in accordance with Slovak accounting legislation (Act No. 431/2002 Coll.).
7. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may request correction of inaccurate or incomplete data.
Right to erasure — you may request deletion of your data where there is no legal obligation for its retention.
Right to data portability — you may request your data in a structured, machine-readable format.
Right to object — you may object to processing based on legitimate interest.
To exercise any of these rights, please contact us at apartmentmokrohajska10@gmail.com. We will respond within 30 days.
8. Supervisory Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Slovak supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava
9. Cookies
Our website uses essential cookies required for the functioning of the booking system and user authentication. These cookies do not track your activity across other websites and do not require consent under GDPR. We do not use advertising or analytics cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.