Privacy Notice

This notice explains, in plain language, what personal data we process when you use Tokaj Slovakia, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

In short

We set no cookies and show no advertising. There are no advertising or cross-site tracking scripts.
You can read the whole guide without giving us any personal data.
We receive personal data from you only when you write to us through a form, and we use it only to deal with your message.
The map loads from OpenStreetMap only after you click "Show map".
We list businesses using public business information. Cellars belonging to private individuals are listed only with their consent.

Who is responsible

The controller of your personal data is the operator of Tokaj Slovakia (see the details below). For any question about privacy, or to use your rights, write to us through the contact form or to the e-mail address in the details below.

When you browse the site

Tokaj Slovakia is a set of static pages hosted by Cloudflare. When your browser asks for a page, Cloudflare has to process your IP address, browser and device details, the address of the page and the time of the request. It uses this data to deliver the page and to protect the site against attacks and abuse, and keeps it for a limited time in security and error logs. We do not use these logs to identify or profile visitors.

Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
Processor: Cloudflare, Inc. processes this data on our behalf under a data processing agreement. Cloudflare may process data outside the EU, including in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the European Commission's standard contractual clauses.

No cookies

We do not set cookies, so there is no consent banner: there is nothing to consent to.

Visitor statistics

We may use Cloudflare Web Analytics to count visits. If we switch it on, a small script from Cloudflare measures page loads and shows us only aggregated figures, such as page views, referring websites, countries and device types. It sets no cookies, and Cloudflare states that it does not track visitors across websites or build profiles of them. The legal basis is our legitimate interest in knowing which pages are useful (Art. 6(1)(f) GDPR).

Clicks on links to other websites

When you click the website, phone number, e-mail or a navigation link of a listed business, your browser sends our server a short anonymous notice so that we can count it; affiliate links, once switched on, pass through a short redirect on our server that counts them in the same way. We record only which listing and which type of link was clicked, the language of the page, the country our host derives from the connection, and when. We do not store your IP address and set no cookies. The counts help us show businesses how often visitors contact them. On the other website, its own privacy policy and cookies apply.

The map

The interactive map does not load until you click "Show map". When you do, your browser fetches map tiles from servers of the OpenStreetMap Foundation (OSMF) in the United Kingdom, which receives your IP address and browser details, as any website you visit would. The OSMF is responsible for that data under its own privacy policy. If you prefer not to load the map, every place is also listed in plain text.

Language suggestion

If your browser's language differs from the language of the page, we may suggest another language version. When you close the suggestion, your browser remembers this in its local storage (localStorage) so that it does not appear again. This information stays on your device and is never sent to us. You can delete it at any time by clearing the site data in your browser.

When you write to us

You can write to us through these forms: add a business, correct a listing, claim a listing, submit an event, and cooperation and press.

What we receive: your name, your e-mail address, your message and, where relevant, the name of the business, listing or event. The form sends this to the editors as an e-mail through Cloudflare Email Service.
Spam protection: the form contains a hidden field that only automated programs fill in, rejects messages sent unrealistically fast, and limits how many messages can be sent from one IP address within a minute. The IP address used for this limit is not stored with your message.
Why: to answer you and, where you ask us to, to add, correct or update a listing or an event.
Legal basis: if your message concerns a Partner package or other cooperation you want to enter into, we process it to take steps at your request before a contract and to perform that contract (Art. 6(1)(b) GDPR). For all other messages, such as corrections, claims, event tips and press questions, the legal basis is our legitimate interest in answering you and keeping the guide accurate (Art. 6(1)(f) GDPR).
Do you have to give it? No, but we need your name and e-mail address to reply.
Who sees it: the editors, Cloudflare as the service that delivers the e-mail, and our e-mail provider, which stores our mailbox. We never sell your data or use it for marketing.
How long we keep it: up to 24 months after our last contact with you, then we delete it. If you become a Partner, contracts and invoices are kept for as long as Slovak accounting and tax law requires.

If your message leads to a change in a listing, we publish only the corrected business details, never your name or your message.

Businesses listed in the guide

This section gives the information required by Article 14 GDPR to the people behind the businesses we list, because we did not collect their details from them directly.

What we publish: the business name, village, address and map location, phone number, e-mail address, website, opening hours or how to book, services, languages spoken and the date of our last check.
Where it comes from: the business's own website and public profiles, the regional tourism board (Košice Region Tourism), OpenStreetMap and public business registers, such as the Slovak commercial and trade registers, as well as what owners tell us.
Is it personal data? For companies, mostly not. For self-employed people and family businesses, a name, phone number or e-mail address can be personal data.
Why and on what basis: to give visitors a complete and accurate guide to the region, so that they can find and contact businesses that welcome them. This is in the legitimate interest of visitors and of the businesses themselves (Art. 6(1)(f) GDPR). We publish only what a business already makes public. Cellars belonging to private individuals are listed only with their consent (Art. 6(1)(a) GDPR), which they can withdraw at any time.
How long: for as long as the business operates and the listing is useful to visitors. Listings we cannot verify are marked as possibly out of date and then reviewed.
Your choices: you can ask us to correct your details, object to the listing or have it removed. If you object, we remove your personal details or hide the listing. Owners can also claim their listing at no cost.

When we add a listing that includes the details of a self-employed person, we tell them about it wherever we can reach them.

Your rights

Under the GDPR, you have the right to:

access the personal data we hold about you (Art. 15)
have inaccurate data corrected (Art. 16)
have your data erased (Art. 17)
restrict how we use it (Art. 18)
receive data you gave us in a portable format, where processing is based on consent or a contract (Art. 20)
object to processing based on our legitimate interest (Art. 21)
withdraw your consent at any time, without affecting what we did before

To use any of these rights, write to us through the contact form or to the e-mail address in the details below. We will reply within one month. We may ask you to confirm your identity first, so that we do not give your data to someone else.

We make no automated decisions about you and do no profiling.

Complaints

If you think we handle your data unlawfully, you have the right to complain to the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk

You can also complain to the supervisory authority in the EU country where you live or work. We would be grateful for the chance to put things right first, so please tell us too.

Children

Tokaj Slovakia is a guide to a wine region and is not aimed at anyone under 18. We do not knowingly collect data from children.

Changes to this notice

We will update this notice whenever we change how we handle data, for example before we switch on visitor statistics or affiliate links, or start a newsletter. A newsletter would only ever be sent to people who sign up for it. The date of the last update is shown on this page.