Privacy policy.
This site asks only for the details needed to answer your request. Below is exactly what happens to them.
Last updated: 2 October 2026
This document was drafted for the new website and will be reviewed by the hotel’s legal counsel before launch.
1. Who processes your data
The controller is HGM s.r.o., Kammerhofská 5, 969 01 Banská Štiavnica, Slovakia, which operates Hotel Grand Matej.
| Legal name | HGM s.r.o. |
|---|---|
| Registered seat | Kammerhofská 5, 969 01 Banská Štiavnica, Slovakia |
| Company ID (IČO) | 31568742 |
| Tax ID (DIČ) | 2020477987 |
| VAT ID (IČ DPH) | SK2020477987 |
| Data protection contact | Darina Kaníková, recepcia@grandmatej.sk, +421 903 404 533 |
For data protection matters write to recepcia@grandmatej.sk or call +421 903 404 533.
2. What data and why
Forms (booking, event inquiry, wedding inquiry)
We process what you send us: your name or e-mail, phone number, date, guest count, event type and the text of your message.
- Purpose: to prepare the reply, offer or booking you asked for.
- Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.
- Retention: if the enquiry leads to no booking or contract, we delete the data no later than 1 year after our last exchange. If a booking is made, we keep it for the duration of the contract and then for as long as accounting and tax law requires (accounting records 10 years).
Server logs
The hosting provider records ordinary technical request data (IP address, timestamp, browser type) to run and secure the site.
- Legal basis: Article 6(1)(f) GDPR — legitimate interest in operating the site securely.
- Hosting provider: Websupport s. r. o., Karadžičova 12, 821 08 Bratislava, Slovakia, company ID 36 421 928.
- Retention: only as long as needed to run and secure the site, usually a few weeks; the logs are then deleted automatically.
3. Who we share it with
Form submissions are delivered to the hotel e-mail and handled only by the staff preparing your offer. Beyond that, data is shared only with processors providing the technical operation of the site:
- Websupport s. r. o., Karadžičova 12, 821 08 Bratislava, Slovakia — website hosting and sending form submissions by e-mail,
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — the hotel’s mailbox (Google Workspace),
- PREVIO s.r.o. — the hotel’s booking system, if you book a room online on the Booking page,
- we do not sell your data and do not use it for profiling or automated decision-making.
4. Third-party content
The Contact page embeds a map from OpenStreetMap. Loading it reveals your IP address to the OpenStreetMap operator. The map only loads once you scroll to it.
Fonts are served from our own server, so visiting the site sends no request to Google Fonts or any other external service.
5. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest.
Send requests to recepcia@grandmatej.sk. If you believe we handle your data improperly, you may lodge a complaint with the Slovak Data Protection Authority, Hraničná 12, 820 07 Bratislava.
6. Changes
If analytics or another tool is added to the site, we will describe it here and in the cookie notice, and update the date above.