Privacy Policy

1. Operator

Brand Force s.r.o.
Registered office: Gunduličova 1, 811 05 Bratislava, Slovak Republic
Company ID (IČO): 52 415 325 · Tax ID (DIČ): 2121044783
Web: brandforce.sk
E-mail: info@brandforce.sk

The operator of the tatry.top portal processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR) and Act No. 18/2018 Coll. on the protection of personal data.

2. What data we process

The tatry.top portal is an informational website with no user registration and no forms. We process personal data only to the minimum extent, in two cases:

a) Visitor statistics (our own analytics)
When a page is displayed, your browser sends the following data to our server:

• Address (URL) and path of the page displayed
• Referring page (referrer) – the page you came from
• Browser language
• Screen resolution and browser window size
• Time zone – used to roughly estimate the visitor’s country
• Time spent on the page – sent when you leave the page

From the IP address, the server calculates an anonymised identifier (a SHA-256 hash with a secret salt that changes every day, truncated to 16 characters). Neither the IP address itself nor the browser user-agent is stored in the analytics. Once the salt changes, visits from different days cannot be linked to the same visitor. Analytics does not run on this page (Privacy Policy).

b) Technical server access logs
With every request, the web server automatically records the IP address, time, requested address and browser user-agent. These logs are used solely to keep the website secure and running and to protect it against attacks.

3. Purpose of processing

• Visitor statistics – anonymous overviews of how the website is used, so that we can improve its content
• Website security and operation – protection against attacks and misuse (e.g. automatic blocking of attacking IP addresses with fail2ban) and troubleshooting

4. Legal basis

• Legitimate interest (Art. 6(1)(f) GDPR) – anonymous visitor statistics to improve the content, and keeping the website secure and running

5. Cookies

This website does not use cookies or any other browser storage (such as localStorage). That is why there is no cookie consent banner either.

6. Data retention

• Analytics records: 90 days, then deleted automatically
• Aggregate statistics (e.g. visit counts) contain no personal data
• Anonymised identifier: the salt changes daily, so the identifier is only valid within a single day
• Technical server logs: 14 days, then deleted automatically

7. Your rights

Under the GDPR, you have the following rights:

• Right of access – you can request information about the data being processed
• Right to rectification – you can request the correction of inaccurate data
• Right to erasure – you can request the deletion of your data
• Right to restriction of processing – you can ask us to temporarily stop processing your data
• Right to object (Art. 21 GDPR) – you can object to processing based on legitimate interest
• Right to lodge a complaint – with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk)

8. Security

• The entire website is secured with HTTPS/TLS encryption
• IP addresses are not stored in the analytics; only a hash is kept (SHA-256 with a secret daily salt)
• The principle of data minimisation – we process only the data that is necessary
• Security headers: CSP, HSTS, Referrer-Policy, Permissions-Policy
• Protection against attacks: fail2ban and a firewall

9. Third parties

We do not share your data with any third parties. The website and the analytics run on the operator’s own servers in Slovakia. Fonts and images are hosted directly on our server, so your browser does not contact any external services during your visit. We do not use Google Analytics, Facebook Pixel or any other external analytics or advertising services.

10. Contact

For questions regarding the protection of personal data, contact us:

Brand Force s.r.o.
E-mail: info@brandforce.sk
Web: brandforce.sk