Close × Back Privacy
Information on the processing of personal data under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data, as amended.
1. Controller
The controller of your personal data is Wayfare s. r. o. , with its registered office at Bottova 8005/5, 811 09 Bratislava – mestská časť Staré Mesto, Slovakia, Company ID (IČO): 56 531 982, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, file no. 190612/B (the “controller”, “we” or “us”).
Correspondence address: Račianska 75, 831 02 Bratislava, Slovakia
E-mail:
We have not appointed a data protection officer, as we are not required to do so under Article 37 of the GDPR. You may contact us on any data protection matter using the contact details above.
2. Purposes, legal bases and scope of processing
If you contact us through the contact form on this website or by e-mail, we process your name, e-mail address, the subject and content of your message, any information you choose to provide in the message or its attachments (for example a telephone number, job title or company name), and the date and time the message was received.
We process this data to handle and respond to your enquiry and for related communication. The legal basis is our legitimate interest in communicating with people who contact us and in handling their enquiries (Article 6(1)(f) GDPR). Where your enquiry concerns entering into a contract with you, the legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Providing personal data is voluntary; without your contact details, however, we cannot reply to you. Please do not send us special categories of personal data (for example data concerning health) or personal data of other people unless this is necessary to handle your enquiry.
Data submitted through the contact form is not stored on the website. The form delivers it to our e-mail mailbox, where we treat it in the same way as an e-mail message. To protect the form against automated abuse, we check the answer to a simple verification question; this does not involve profiling.
2.2 Business communication and contractual relationships
If you communicate with us as a contractual partner, a prospective partner, or as a representative, employee or contact person of such a party, we process your identification and contact details, information about your position and employer, and the content of our communication.
We process this data to prepare, conclude and perform contracts and to conduct business communication. Where you are a party to the contract, the legal basis is the performance of the contract or taking steps prior to entering into it (Article 6(1)(b) GDPR); otherwise it is our legitimate interest in communicating with business partners and their representatives (Article 6(1)(f) GDPR). Where correspondence forms part of accounting or other records that we are required to keep, we process it to comply with our legal obligations (Article 6(1)(c) GDPR).
If we did not obtain your personal data directly from you, we obtained it from the person who sent us the message or mentioned you in it (for example your employer or a colleague), or from publicly available sources such as the commercial register.
2.3 Establishment, exercise or defence of legal claims
To the extent necessary, we may also process the personal data described in sections 2.1 and 2.2 to establish, exercise or defend our legal claims. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
2.4 Operation and security of the website
When you visit the website, technical data necessary to display and secure it is processed, in particular your IP address, the date and time of the request, the page requested and information about your browser and device. This data is processed by our hosting provider as our processor in order to deliver the content, keep the website running securely and protect it against abuse. The legal basis is our legitimate interest in the secure and functional operation of the website (Article 6(1)(f) GDPR). We do not use this data to identify visitors or for analytics or marketing.
3. Cookies and similar technologies
This website does not use cookies or any other technology that stores information on, or accesses information stored on, the user’s terminal equipment. We use no analytics, marketing or other tracking tools, we embed no third-party content, and fonts, images and all other files are loaded exclusively from our own website. For this reason, we do not ask for your consent under Section 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications, as amended.
Should we start using such technologies in the future, we will inform you in advance and, where required by law, ask for your consent.
4. Recipients of personal data
Personal data may be disclosed to the following recipients:
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, which provides us with cloud services (Microsoft 365 e-mail and Microsoft Azure hosting) as our processor;
IT service providers that administer and support our information systems as our processors;
legal, tax and accounting advisers and auditors bound by a duty of confidentiality;
public authorities and other persons where we are required to do so by law.
We do not sell personal data or disclose it to third parties for marketing purposes.
5. Transfers of personal data to third countries
We process personal data primarily within the European Union and the European Economic Area. Where the provision of cloud services involves a transfer of personal data to a third country (for example the United States of America), the transfer is based on an adequacy decision of the European Commission (in particular Commission Implementing Decision (EU) 2023/1795 on the EU-U.S. Data Privacy Framework) or on standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR). On request, we will provide you with a copy of the standard contractual clauses; please contact us using the details in section 1.
6. Retention periods
Enquiries received through the contact form or by e-mail that do not lead to cooperation are kept while they are being handled and for no longer than two years after our last communication.
Business correspondence relating to a contractual relationship is kept for the duration of that relationship and thereafter for the limitation periods for claims arising from it (generally four years under the Slovak Commercial Code), unless a specific law requires a longer period.
Documents that we are required to keep under specific laws (for example accounting records under Slovak Act No. 431/2002 Coll. on Accounting, as amended) are kept for the periods laid down by those laws.
Where proceedings concerning a legal claim are pending, we keep the necessary data until they are finally concluded.
Technical data about visits to the website is kept by our hosting provider only for as long as necessary to operate and secure the website, and in any case for no longer than 30 days.
7. Your rights
As a data subject, you have the right to:
request access to your personal data (Article 15 GDPR);
have inaccurate personal data rectified and incomplete personal data completed (Article 16 GDPR);
have your personal data erased where there are grounds for doing so (Article 17 GDPR);
restrict the processing of your personal data (Article 18 GDPR);
data portability, where personal data is processed by automated means on the basis of a contract (Article 20 GDPR).
Right to object. You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data that we carry out on the basis of our legitimate interest (Article 21 GDPR). We will then no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
You may exercise your rights using the contact details in section 1. We will respond to your request without undue delay and in any event within one month of receiving it; where justified, we may extend this period by a further two months, in which case we will inform you. If we have reasonable doubts about your identity, we may ask you for additional information necessary to confirm it.
If you believe that the processing of your personal data infringes the GDPR or Slovak Act No. 18/2018 Coll., you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Article 77 GDPR). The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho 7/B, 821 04 Bratislava, Slovakia, www.dataprotection.gov.sk , with which you may file a petition to initiate proceedings under Section 100 of Act No. 18/2018 Coll.
8. Automated decision-making
We do not carry out automated individual decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).
9. Security of personal data
We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration, including encrypted data transmission and access control.
We may update this information from time to time, in particular when the law or the way we process personal data changes. The current version is always published on this website.
This English version is provided for convenience. In the event of any discrepancy, the Slovak version prevails.
Effective from 4 October 2026
