Privacy Policy

1. Who processes your data

The controller of your personal data is AdviseCo, s.r.o., Lovinského 22, 811 04 Bratislava, Slovakia, company ID (IČO) 56504331, registered in the Commercial Register of the Bratislava III City Court, section Sro, file no. 181590/B.

For anything related to personal data, reach us at info@goadria.eu.

2. What we process and why

• Bookings and rental requests: first and last name, email, phone, guest counts and children's ages, the dates and products you chose, your note. We need these to conclude and perform the rental contract (Art. 6(1)(b) GDPR). Children's ages are used only to check accommodation capacity.
• Boat documents: if you skipper the boat yourself, you upload a scan of your skipper licence (with its year of issue) and radio operator certificate. We process them to verify the legal requirements for operating the boat — based on the contract and our legitimate interest in safe operation (Art. 6(1)(b) and (f) GDPR).
• Account: email, name, phone and password — we store only a cryptographic hash, never the password itself. An account is optional and exists to give you an overview of your bookings (Art. 6(1)(b) GDPR).
• Billing and accounting data: we process these because Slovak Act No. 431/2002 Coll. on accounting requires it (Art. 6(1)(c) GDPR).
• Emails: we only send transactional messages about your booking or account — confirmations, payment details, status changes. We send no marketing.

3. Who we share data with

We do not sell your data. We share it only with suppliers who process it for us and on our instructions:

• Mailgun (Sinch) — email delivery; we use servers in the EU region.
• Our hosting provider — running the site and storing data on servers in the EU.
• Accounting and invoicing software — issuing invoices and statutory records.

We do not transfer data outside the European Union and the European Economic Area. If a supplier ever made that technically unavoidable, the transfer would be covered by standard contractual clauses.

4. How long we keep data

• Bookings: for the duration of the rental and then for the statutory limitation periods; accounting records for 10 years.
• Boat document scans: deleted no later than one year after the rental ends.
• Account: for as long as you keep it. After you delete it, only data we must keep by law remains.
• Car rental requests: until handled, at most one year.

5. Cookies

We use only cookies that are strictly necessary for the site to work — which is why you will not find a cookie banner here; under Section 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications, essential cookies require no consent:

• NEXT_LOCALE — remembers your chosen language (Slovak / English).
• authjs.session-token — keeps you signed in; set only when you log into an account.
• authjs.csrf-token — protects forms against abuse.

We use no analytics or marketing cookies.

6. Your rights

Under the GDPR you have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Just write to info@goadria.eu — we reply within a month at the latest.

If you believe we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

7. Automated decision-making

We do no profiling and no automated decision-making — every booking request is reviewed by a person.

8. Changes to this policy

If we change this policy, the new version will be published on this page together with its effective date.