GDPR – information on personal data processing
Last updated: 9 November 2026
Draft: this text has not yet been checked by a lawyer. Items in [square brackets] still have to be filled in before publication.
This information is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Slovak Act No. 18/2018 Coll. on personal data protection.
Controller
Ivanco s.r.o., Koceľova 17, Bratislava, Slovakia, Company ID 46155228. Contact: ivanco26@yahoo.com, phone +421 904 638 187.
Categories of personal data
Name, e-mail address, phone number and postal address. For bookings also the data required to carry out the trip, such as number of participants and, where needed, date of birth or travel document details.
Data subjects
Customers, people interested in our tours, group organisers and business partners.
Purposes and legal bases
- Handling enquiries and concluding and performing the contract (Art. 6(1)(b))
- Accounting, tax and other legal obligations (Art. 6(1)(c))
- Sending offers and information about new tours by electronic means, with your consent (Art. 6(1)(a))
- Protecting our legal claims and securing the website (Art. 6(1)(f))
Source of the data
The data come from you: through our website forms, the booking system, e-mail, phone or WhatsApp.
Retention
- Enquiries that do not lead to a contract: [12] months
- Contract and accounting records: for the period required by law
- Marketing contact data: until you withdraw your consent
Recipients
Booking system provider Bókun, payment providers, hotels and local partners involved in your trip, hosting provider, accountants and authorities where the law requires. We do not pass data to other recipients. If data are transferred outside the European Economic Area, this happens only with appropriate safeguards.
Your rights
You have the right to access your data, to have them corrected, erased or restricted, to receive the data you provided or have them transferred to another controller, to object to processing and to withdraw consent at any time (Art. 15 to 21 GDPR).
You may exercise these rights orally or in writing, for example by e-mail to ivanco26@yahoo.com. For oral requests we need to verify your identity.
There is no automated decision-making or profiling.
Complaint
You can lodge a complaint with the Slovak supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk (Art. 77 GDPR).