Privacy policy
We use the details you send us through the form only to reply to you and arrange your stay.
We provide this information in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.
Controller
O.S.TAY s. r. o., Svetlá 253/30, 040 17 Košice - mestská časť Barca, Company ID (IČO): 55930743, Tax ID (DIČ): 2122131165, VAT ID (IČ DPH): SK2122131165
Contact: 0918 822 820, info@ostay.sk
What data we process
- name,
- email address or phone number,
- arrival and departure dates and number of guests,
- the content of your message.
Purpose and legal basis
We process the data to reply to your enquiry and prepare your stay. The legal basis is the taking of steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and the consent you give in the form (Art. 6(1)(a) GDPR), which you may withdraw at any time.
How long we keep it
We delete data from an enquiry that does not result in a booking within 12 months at the latest. We keep data relating to a completed stay for the period required by accounting and tax regulations.
Who we share it with
We do not sell the data or pass it on for marketing. Only the service providers (processors) we need to run the website and communicate with you may have access to it: Vercel (web hosting) and Resend (email delivery). Both companies are based in the USA, so the data may be transferred outside the EU. Such transfers are based on standard contractual clauses approved by the European Commission or, where applicable, the EU-US Data Privacy Framework.
Your rights
- to request access to your data and its rectification,
- to request erasure or restriction of processing,
- to object to processing and to request data portability,
- to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal,
- to lodge a complaint with the supervisory authority, Úrad na ochranu osobných údajov SR (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava.
You can exercise your rights using the controller's contact details above.
Cookies, statistics and the map
Without your consent, we only use strictly necessary cookies, which remember your choice.
If you consent, we measure website traffic using Google Analytics, provided by Google Ireland Limited. This tells us which pages people read, where they come to the website from and how many enquiries we receive through the form. In doing so, Google stores _ga cookies (valid for up to 2 years) and processes visit data such as device type, browser and approximate location based on your IP address. We keep visit data for no more than 14 months. Google may transfer it to the USA on the basis of the EU-US Data Privacy Framework. The legal basis is your consent.
We only display the Google map on the Location page after you consent; Google may then process your IP address and store its own cookies in accordance with its policies. You can change your consent at any time via Cookie settings in the footer.
Valid from 3 November 2026.