1. Operator
Veľtrh nehnuteľností s.r.o., with its registered office at Rázusova 1692/11, Piešťany 921 01, Company ID No.: 55 209 963 (hereinafter referred to as the “Operator”).
1.1 Legal Basis for Processing
Registration for the event (ticket issuance, delivery of the QR code, organizational information) is processed on the legal basis of the performance of a contract (Article 6(1)(b) of the GDPR).
We process marketing emails about upcoming events and offers only on the basis of your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time.
Certain processing activities (e.g., basic security logs, essential cookies) may be carried out on the basis of a legitimate interest (Article 6(1)(f) of the GDPR), and we always respect your right to object.
1.2. Purpose of Personal Data Processing
We process personal data for the following purposes: (i) ticket registration and management of the visitor’s account (performance of a contract), (ii) organizational communication regarding the current event (performance of a contract), (iii) newsletters and marketing of future events (consent), (iv) participation in a contest (performance of a contract or consent—depending on the contest rules), (v) publication of photos and video recordings from the event (legitimate interest).
You grant your consent for the period specified in Section 6.5 and may revoke it at any time. Upon expiration of this period, the controller will immediately delete the personal data provided from the controller’s information systems. This does not apply if the data subject has exercised their right to erasure under Article 17 of the GDPR. Consent may be revoked at any time in writing by sending a letter to the controller’s address or by email to gdpr@veltrhnehnutelnosti.sk.
You can opt out of receiving marketing communications about new products in any email by clicking the “unsubscribe” link. Under the conditions set forth in the GDPR, the data subject has the right to request from the controller access to personal data concerning the data subject, as well as the right to have such data rectified, erased, or to restrict its processing, or the right to object to the processing, as well as the right to data portability. The data subject’s rights are further detailed in Articles 15 through 23 of the GDPR and on the controller’s website at www.veltrhnehnutelnosti.sk.
The controller is not required to designate a data protection officer. If you have any questions regarding the processing of personal data, please contact us at gdpr@veltrhnehnutelnosti.sk
2. What Information We Collect
In providing our services, we collect the information about you specified in sections 2.1 through 2.4.
2.1. Information Provided When Registering a Ticket
When registering for a visitor ticket at https://www.veltrhnehnutelnosti.sk/pre-navstevnikov/, we require the following personal information: first name, last name, email address, and phone number. This information is necessary to create your ticket, send you a QR code, facilitate organizational communication, and ensure your entry to the event.
2.2 Information for Sending Newsletters and Updates
If you choose to subscribe to our marketing communications about our activities, we also collect related data. Your email address is required; your first name is optional and is used solely for personalization purposes. We do not require a phone number for the newsletter.
2.3 Exhibitor Information
If you decide to list your company, we collect data from publicly available registries (such as the commercial register) about the company, as well as the information you provide regarding the contact persons at those companies.
2.4 Data Collected Through the Use of Our Services
When you use our services, we also collect data about how you use them. This includes information regarding your interactions with the website www.veltrhnehnutelnosti.sk. We also collect data about the devices and computers you use to access our services, including IP addresses, browser settings, operating system information, and, where applicable, information about your mobile device, information about which website you came from, the pages you visit, and information from cookies and similar tools. We also collect information related to your registration with Meta (Facebook), including your first name, last name, company, email address, and phone number, or data automatically pre-filled from your Facebook profile (e.g., email address, first name—Facebook fills this in for you).
3. How We Use the Data
We send transactional emails (QR codes, program changes) in connection with registration (performance of the contract). We send marketing emails (news/upcoming events) only with your consent. We record the time and version of the consent provided and include an easy unsubscribe option in every email.
3.1 Provision of Our Services
The information we collect from you when you purchase a ticket for an event or when you register as an exhibitor for an event.
3.2 Communicating with You
(a) Organizational communications regarding this event (e.g., program changes, instructions) – we send these in accordance with the terms of the contract.
(b) Marketing of upcoming events and offers – we send these only with your consent; each email includes an unsubscribe link.
3.3 Taking Photographs and Recording Videos at Events
INCHEBA, a.s. provides surveillance of the premises (CCTV) as an independent operator in accordance with its own rules.
The organizer may take photographs and record video during the event for presentation and promotional purposes (legal basis: legitimate interest). We prefer group shots and illustrative photos. If you do not wish to be captured in a close-up shot, please notify the info point or the photographer/videographer directly—we will accommodate your request (right to object). We generally retain these recordings for a maximum of 3 years or until an objection is raised.
4. Safety and Protection of Rights
We also use your data to ensure the security of the services we provide, to respond to claims filed against us, in proceedings before government and other authorities that oversee our activities, and to enforce claims that we have incurred.
4.1 Cookies
Cookies are small pieces of data that are stored in your browser or on your mobile device while you browse websites. Individual cookies have different “lifespans”—that is, they remain stored on your device for varying lengths of time. Some cookies are deleted from your device after you close your browser window (session cookies), while others remain stored on your device even after you finish browsing our website (persistent cookies).
4.2 Why We Use Cookies
Cookies allow us to remember your actions and preferences, for example, over a certain period of time, so you don’t have to re-enter them every time you return to the website or navigate from one webpage to another. Cookies also help us understand what interests you on our website, whether it is easy enough to navigate, and whether you can find what you’re looking for. We therefore use cookies to improve your user experience.
Cookies may also record other information, such as the number of visitors to our website and which pages of our site you visit most frequently. We use analytical cookies to collect data on traffic to our website, information about searches performed on our site, and to understand how you navigate our site so that we can make it as user-friendly as possible for you. For these cookies, we use solutions from the following third parties: Google Analytics – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use the following types of cookies:
Essential cookies: Necessary for the website to function (e.g., session cookies). Legal basis: legitimate interest (Article 6(1)(f) of the GDPR).
Analytical cookies: To analyze website traffic (e.g., Google Analytics with IP anonymization). Legal basis: consent (Article 6(1)(a) of the GDPR).
Marketing cookies: To personalize ads (e.g., Meta).
Legal basis: consent.
We obtain consent for non-essential cookies through the cookie banner on our website. You can revoke this consent at any time in your browser settings or through the banner.
4.3 How to Limit the Use of Cookies
You have the option to manage or restrict how we and our partners use cookies and similar technologies. For example, you can adjust your web browser settings: although most browsers are set by default to accept cookies, their settings allow you to delete or reject cookies.
We set non-essential (analytical/marketing) cookies only after you give your consent via the cookie banner; the website remains fully functional even without them. You can change your preferences at any time by clicking the “Cookie Settings” link in the footer.
4.4 Security Measures and Incidents
To protect your personal data from unauthorized access, loss, or misuse, we implement technical and organizational measures in accordance with Article 32 of the GDPR. These measures include: data encryption (e.g., HTTPS for the website), access controls (authorized employees only), regular data backups, firewall and antivirus protection, as well as employee training on data protection.
In the event of a personal data breach that could pose a risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 of the GDPR, either by email or on our website. We will also report the incident to the Slovak Data Protection Authority within 72 hours.
5. Legal Basis
The processing of your personal data is based primarily on:
- Performance of the contract (ticket registration, participation in the contest).
- Consent – particularly when sending commercial communications about upcoming events and offers.
- Compliance with legal obligations.
- Legitimate interest – e.g., protection of the organizer’s rights, basic security logs, organizational communication regarding the current event, illustrative photos/videos.
Any consent you provide is voluntary, and you may withdraw it at any time; this does not affect the lawfulness of the processing that took place prior to the withdrawal. You can opt out of receiving marketing communications in any email by clicking “unsubscribe,” or by sending an email to info@veltrhnehnutelnosti.sk
6. To Whom We Disclose Data
We do not disclose, make available, or provide your personal data to any other parties, except in the situations described below:
6.1 If you request it from us
We disclose or make personal data available only if you request us to do so.
6.2 In cases of external processing
Your personal data is made available to certain suppliers of ours, who process it on our behalf in accordance with our instructions and this document. In doing so, they comply with all necessary security, technical, and organizational measures to provide the required protection for your personal data. We have entered into Data Processing Agreements (DPAs) with these partners:
– Google Ireland Limited (Google Analytics) – Gordon House, Barrow Street, Dublin 4, Ireland.
– Google Ireland Limited (YouTube) – Gordon House, Barrow Street, Dublin 4, Ireland.
– MailChimp / The Rocket Science Group LLC (newsletter distribution) – 675 Ponce de Leon Ave NE, Atlanta, GA 30308, USA.
– Meta Ireland Limited – Merrion Road, Dublin 4, Ireland
– Hotjar Limited – Dragonara Business Center, 5th Floor, Dragonara Road, Paceville, St. Julian’s, STJ 3141, Malta
– EQUILIBRIO – EQ real, s.r.o. – Jesenského 27, 040 01 Košice – Staré Mesto District, Slovakia
6.3 For legal reasons and to prevent damage
We may also retain your data or disclose it to others in order to comply with obligations arising from laws and regulations, requirements of government and other authorities, to assert our claims, or to defend ourselves in proceedings where others assert claims against us. The categories of third parties to whom we disclose personal data for these reasons include, for example, courts, government and other relevant authorities that oversee our activities, are responsible for resolving disputes or enforcing decisions, as well as our accounting advisors and auditors.
6.4 Transfer to Third Countries
We do not actively transfer your personal data to third countries outside the EU. However, some partners with whom we collaborate in processing personal data do carry out such transfers, specifically to the U.S. The parties to whom this data is disclosed in the U.S. comply with the terms of the EU-U.S. Data Privacy Framework (DPF) or the Standard Contractual Clauses (SCCs) approved by the European Commission, thereby providing an adequate level of protection for your personal data in accordance with Article 46 of the GDPR. Specifically:
- Google Ireland Limited and Meta Ireland Limited (are located in the EU but may transfer data to the U.S. based on the SCCs and a completed Transfer Impact Assessment).
- MailChimp / The Rocket Science Group LLC (certified under the EU-US DPF).
- Hotjar Limited (headquartered in the EU—Malta; transfers to third countries are not required).
In the case of data transfers, we conduct a Transfer Impact Assessment (TIA) to ensure data protection.
6.5 How Long We Retain Data
Purpose of processing: Ticket registration
Data categories: first name, last name, email, phone number
Legal basis: performance of a contract
Retention period: 3 years from the date of the event
Purpose of processing: Newsletter
Data categories: email (name optional)
Legal basis: consent
Retention period: until revoked / max. 3 years
Purpose of processing: Contests
Data categories: first name, last name, contact information
Legal basis: performance of a contract (or consent)
Retention period: 3 years (winners) / 1 year (others)
Purpose of processing: Marketing (photo/video)
Data categories: photograph, video recording
Legal basis: legitimate interest
Retention period: max. 3 years or until an objection is raised
Purpose of processing: Cookies / analytics
Data categories: IP addresses, cookie identifiers
Legal basis: consent (analytics/marketing)
Retention period: depending on the type of cookie (session/persistent)
The personal data of participants who do not win will be deleted within 1 year of the end of the contest.
6.6 Right of Access to Data
You have the right to obtain confirmation from us as to whether we are processing your personal data, and if we are processing your personal data, we will provide you with information about what data we process about you and for what purpose, to whom your personal data has been disclosed, and how long we will retain your personal data.
6.7 Right to Correction
If you believe that our institution is processing incorrect personal data about you, you may exercise your right to request that we correct it by contacting us directly at gdpr@veltrhnehnutelnosti.sk. It is important to us that we process accurate personal data about you, so please be sure to exercise this right whenever, for example, you move or there is a change in any of your personal data that is important to your relationship with us.
6.8 Right to Erasure (Right to Be Forgotten)
You have the right to have the personal data we process about you erased if the following conditions are met and no legal exceptions apply:
– the data are no longer necessary for the purposes for which they were collected;
– you withdraw your consent to the processing of your personal data, and there is no other legal basis for such processing;
– based on your specific situation, you object to the processing of your personal data processed on the basis of a legitimate interest, unless there are compelling legitimate grounds for the processing that override your interests, or you may object to processing for direct marketing purposes;
– Personal data was processed unlawfully.
6.9 Right to Object
You have the right to object to the processing of your data based on our legitimate interests. If we do not have a compelling legitimate reason for processing your data and you object, we will no longer process your personal data.
6.10 Filing Complaints
If you wish to file a complaint regarding the way your personal data is processed, including to exercise the rights listed above, you may contact us at gdpr@veltrhnehnutelnosti.sk or in writing at our registered office address. We will thoroughly review all your suggestions and complaints. If you are not satisfied with our response, or if you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; phone number: +421 2 3231 3214; email: statny.dozor@pdp.gov.sk. You may also file a complaint electronically via the online form on the Slovak Data Protection Authority’s website: https://dataprotection.gov.sk.
7. Changes to Information Regarding the Processing of Personal Data
We may update this privacy policy from time to time, for example, in connection with changes to our services or applicable laws. We will notify you in advance of any significant changes via email (if we have your contact information) or through a notice on our website at www.veltrhnehnutelnosti.sk.
In Bratislava on September 29, 2025
