Last updated: February 17, 2026
1. Operator
Brand Force s.r.o.
Registered in: Slovak Republic
Web: brandforce.sk
E-mail: info@brandforce.sk
The operator of the tatry.top portal processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR) and Act No. 18/2018 Coll. on the protection of personal data.
2. What data we process
The tatry.top portal is an informational website without user registration. We process only the minimum data necessary to ensure the operation and improvement of the site:
- Anonymized visitor identifier β created using a SHA-256 hash with a daily salt (it is not possible to identify a person retroactively)
- Browser timezone β for approximate determination of visitor region
- Screen resolution and window size β to optimize display
- Browser language β to provide the correct language version
- URL of the visited page and referring page
- Time spent on the page
Important: We do not collect names, email addresses, IP addresses (they are hashed at the server level with a daily salt), or browser user-agent strings.
3. Purpose of processing
- Traffic analytics β understanding how visitors use the site so we can improve it
- Technical operation β ensuring correct display of content
4. Legal basis
- Consent (Art. 6(1)(a) GDPR) β analytical cookies are activated only after consent is given via the cookie banner
- Legitimate interest (Art. 6(1)(f) GDPR) β essential cookies for the technical operation of the site
5. Cookies
Cookies are small text files that are stored in your browser. On this site we use:
| Cookie name |
Purpose |
Category |
Validity period |
cookie_consent |
Storing your cookie preferences |
Essential |
365 days |
Our analytics do not use cookies β the anonymized identifier is generated on the server side using a hash of the IP address with a daily salt. After the day expires, it is not possible to associate visits with the same visitor.
Change cookie settings
6. Data retention period
- Analytics data: maximum 26 months
- Cookie consent: 365 days (then the banner is displayed again)
- Hash identifier: changes daily (daily salt)
7. Your rights
Under the GDPR, you have the following rights:
- Right of access β you can request information about processed data
- Right to rectification β you can request correction of inaccurate data
- Right to erasure β you can request deletion of your data
- Right to data portability β you can request your data in a machine-readable format
- Right to withdraw consent β at any time via cookie settings
- Right to lodge a complaint β with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk)
8. Security
- The entire site is secured with HTTPS/TLS encryption
- IP addresses are hashed (SHA-256 with a daily salt) β it is not possible to recover them
- Data minimization principle β we collect only essential data
- Security headers: CSP, HSTS, Referrer-Policy, Permissions-Policy
- Attack protection: fail2ban, UFW firewall
9. Third parties
We do not share your data with any third parties. All services are operated on our own servers. We do not use Google Analytics, Facebook Pixel, or any other external analytics or advertising services.