Privacy policy

Your privacy matters to us. This document explains which personal data we process, for what purpose, how long, and what rights you have — in line with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.

Valid from: 19 October 2026
Controller: ALEXANDRA HOTEL, s.r.o. · Company ID: 36 845 981

1. Controller

The controller determining the purposes and means of processing your personal data is:

ALEXANDRA HOTEL, s.r.o.
Dvory 581, 020 01 Púchov, Slovak Republic
Company ID: 36 845 981, Tax / VAT ID: 2022463003 / SK2022463003
registered in the Commercial Register of the District Court Trenčín, Section: Sro, Insert No. 18354/R
establishment: Alexandra Sport Hotel***, 1. mája 899, 020 01 Púchov

For privacy matters contact recepcia@alexandrasporthotel.sk or write to the HOTEL registered office.

2. Data we process

Depending on how you contact us, we mainly process:

identification and contact data — name, surname, address, e-mail, phone; for foreign guests passport data (under the Foreigners’ Residence Act),
reservation and stay data — dates, room category, number of persons, ordered services, special requests (e.g. dietary),
payment data — billing data and (where needed for payment) card data processed solely by the payment gateway (Cardpay, Tatrapay, Trustpay) or the bank, not by the HOTEL,
guest register — data kept under a legal duty (name, surname, date of birth, permanent address, ID document number, nationality, arrival and departure dates),
CCTV footage — if common areas (e.g. reception, parking) are monitored, with visible signage,
marketing data — e-mail and, where given, name and address based on consent (contest, questionnaire, newsletter),
website visit data — technical and analytics data via cookies, see section 8.

Special-category data (e.g. health limitations) are processed only to the extent you voluntarily provide them when ordering a service, and solely for safe delivery of that service.

3. Purposes and legal bases

Handling reservations and providing accommodation, catering and related services — contract performance, Art. 6(1)(b) GDPR.
Guest register and reporting duties (Acts No. 253/1998 Coll. and No. 404/2011 Coll.) — legal obligation, Art. 6(1)(c) GDPR.
Local accommodation tax under the City of Púchov regulation and Act No. 582/2004 Coll. — legal obligation.
Accounting and tax documents (Act No. 431/2002 Coll., VAT Act) — legal obligation.
Complaints under the terms and complaints procedure — contract and legitimate interest.
Property and guest/staff security via CCTV in common areas, if installed — legitimate interest, Art. 6(1)(f) GDPR.
Marketing (offers, news, loyalty) — solely on your consent, Art. 6(1)(a) GDPR and Art. IX of the terms; consent is voluntary and withdrawable at any time.
Website analytics and online ads (Google Analytics, Google Ads, Meta Pixel) — based on consent to the relevant cookie category, see section 8.
Establishing and defending legal claims — legitimate interest, Art. 6(1)(f) GDPR.

4. Retention

Reservation and stay (including guest register): 5 years after the stay ends, or as required by special law
Accounting and tax documents: 10 years from issue
Complaints: 3 years after resolution
CCTV of common areas: up to 15 days, unless needed for an incident
Marketing consent: 5 years from consent, or until withdrawal
Cookies and analytics: according to cookie type, see section 8

5. Recipients

Access is limited to persons who need the data for their duties, and to:

the booking system operator booking.alexandrasporthotel.sk (SoftSolutions) as an independent controller of booking data,
payment gateways (Cardpay, Tatrapay, Trustpay) and banks,
external accounting and IT providers as processors,
public authorities where required by law (tax office, City of Púchov, Police Force, Slovak Trade Inspection),
analytics/advertising providers (Google, Meta) to the extent of your cookie consent.

6. Transfers outside the EEA

When using Google (Analytics, Ads) and Meta (Pixel), some technical/analytics data may be processed outside the EEA, especially in the USA, under Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You may withdraw cookie consent at any time — see section 8.

7. Your rights

You have the right to access, rectification, erasure (“right to be forgotten”) where no longer needed for legal duties, restriction, portability, objection (including to direct marketing), withdrawal of consent without affecting prior lawfulness, and to lodge a complaint with the supervisory authority (section 12).

Exercise rights in writing to the registered office or by e-mail to recepcia@alexandrasporthotel.sk. We respond within 30 days.

8. Cookies and website

Our website uses cookies and similar technologies for basic operation, analytics and, where consented, advertising. Cookies may be managed via Google Tag Manager if deployed.

You can change cookie settings anytime via “Cookie settings” in the footer.

The booking system on booking.alexandrasporthotel.sk is operated by SoftSolutions under its own privacy policy.

9. Automated decision-making

We do not carry out automated decision-making with legal effects or profiling under Art. 22 GDPR. Cookies in section 8 are for statistics and remarketing only.

10. Security

We protect personal data with appropriate technical and organisational measures — restricted access, secure payment transmission via certified gateways, and contractual confidentiality of processors.

11. Changes

We may update this policy when laws or services change. The current version is always available on this website with the validity date above.

12. Contact and supervisory authority

Questions: recepcia@alexandrasporthotel.sk or the registered office in section 1.

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
tel.: +421 2 3231 3214
dataprotection.gov.sk