Privacy policy and cookies
Data controller
The controller of your personal data is SPN plus, s. r. o., registered office M. R. Štefánika 49, 022 01 Čadca, IČO 36397318, which operates the Villa Helia guesthouse, Medzihradská 1563, 026 01 Dolný Kubín.
E-mail: info@villahelia.sk · phone: +421 911 222 806
We are a small family guesthouse and have not appointed a Data Protection Officer (DPO) — please contact us directly with any questions about your personal data.
Effective from 27 September 2026
What data we process
When you book by e-mail, by phone or via Booking.com, we process your first name and surname, e-mail, phone number, dates of stay, number of guests and any special requests. On check-in we process the data required by the Act on the Registration of Foreigners' Stay and the Act on Local Taxes (permanent address, ID document number, nationality, date of birth) — we keep a guest register.
Legal basis: performance of the accommodation contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
Newsletter
If you subscribe to our newsletter, we process your e-mail address, language, date and time of consent, IP address and subscription confirmation (double opt-in). We only send news once you have confirmed the link in the e-mail.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the link in every e-mail or by writing to info@villahelia.sk — withdrawal does not affect the lawfulness of processing carried out before it.
Communication
When you write to us or call, we process your contact details and the content of your message so that we can reply. We keep messages for no more than 12 months after they are dealt with, unless they lead to a booking.
Legal basis: our legitimate interest in communicating with prospective guests (Art. 6(1)(f) GDPR).
Recipients
We do not share your data with third parties for marketing purposes. It is accessed only by the processors who help us run the website and the guesthouse: our web hosting provider (servers in the EU), the booking portal Booking.com B.V. (for bookings made via Booking, under its own privacy terms), our accountants and, to the extent required by law, public authorities (the municipality — accommodation tax; the foreign police).
We do not transfer data outside the EU/EEA, except for Google tools (analytics) where you have given consent — these are covered by the EU standard contractual clauses.
Retention period
We keep booking data for the duration of your stay and then for as long as necessary to handle any complaints (3 years). Accounting documents are kept for 10 years under the Accounting Act. The guest register is kept for 5 years as required by law. Newsletter data until you withdraw consent; after unsubscribing we delete your e-mail within 30 days. Records of cookie consent are kept for 12 months so that we can prove consent.
Your rights
Under the GDPR you have the right of access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), the right to object to processing based on legitimate interest (Art. 21) and the right to withdraw consent at any time. Send your request to info@villahelia.sk — we will reply within 30 days.
If you believe your rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
Cookies
Cookies are small files that your browser stores when you visit a website. We divide them into three categories and you choose which ones to allow.
Necessary — they hold the website together: remembering your cookie choice (vh_consent, 180 days), an anonymous visitor identifier to prove consent (vh_visitor, 365 days) and a technical session (VHSESS, until the browser is closed). The website does not work properly without them, so no consent is required.
Analytics — anonymous visitor statistics via Google Analytics 4 (_ga, _ga_*, 2 years; IP addresses are anonymised). Only run with your consent.
Marketing — campaign measurement and remarketing (Meta Pixel, Google Ads). Only run with your consent, and we do not currently use them.
The map of the surroundings runs from our own data with no tracking. Bookings are made on Booking.com, which has its own privacy and cookie terms.