Privacy Policy

1. Introduction

JAO S.R.O ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

We comply with the General Data Protection Regulation (GDPR) and applicable Slovak data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and surname
• Email address
• Phone number
• Payment information (processed securely by our payment provider)
• Reservation preferences and history
• Dietary requirements and allergies

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

4. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing reservations
• Processing payments
• Communicating about your reservation
• Improving our services and website
• Sending promotional communications (with your consent)
• Complying with legal obligations
• Protecting our rights and preventing fraud

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of a contract (reservations)
• Consent: Where you have given explicit consent (marketing communications)
• Legitimate Interest: For improving our services and website security
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing

We may share your personal information with:

• Payment Processors: Airwallex for secure payment processing
• Service Providers: Third parties who assist in operating our website and services
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Reservation data: 3 years after your last visit
• Payment records: As required by tax and accounting laws (typically 10 years)
• Marketing preferences: Until you withdraw consent

9. Your Rights

Under GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected].

10. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: To understand how visitors use our website
• Preference Cookies: To remember your settings and preferences

You can manage cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure payment processing through certified providers
• Regular security assessments
• Access controls and authentication

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Slovak Data Protection Authority:

15. Contact Us

For questions about this Privacy Policy or your personal data, please contact: