Privacy policy

Papaya Guide Privacy Policy

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”) and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter the “Data Protection Act”). The security of personal data and its lawful processing are our top priority. Here you will find out how we process your personal data and how we ensure its security.

1. OUR DETAILS

Who are we?

Personal data is processed by: Trade name:Andrea Kurhajcova, Registered with:the District Office of Rimavska Sobota under reg. no. 650-19695, Place of business:Druzstevna 1252/11, 982 01 Tornala, Slovak Republic, Company ID (IČO):51696576, Tax ID (DIČ):1086689076, Email: info@papayaguide.com, Phone:+1 849 373 0063, (hereinafter the “Controller”).

2. CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND RETENTION PERIOD

What personal data do we process, for what purpose, on what legal basis, and for how long?

We only process the personal data that we strictly need to achieve the stated purpose. We process personal data for the following purposes:

Accounting records

We process the personal data of customers, suppliers, and other persons recorded in our accounting records, comprising name, surname, address for billing purposes, bank account number, payment details, telephone number, email, and signature, for the purpose of bookkeeping and complying with our obligations under the Accounting Act and other relevant legislation. The legal basis for processing this personal data is compliance with a legal obligation. We retain accounting records for 10 years.

Operation of the Platform

We process the personal data of Platform users, comprising name, surname, address, email, and telephone number, for the following purposes:

• pre-contractual communication,

• creating a user account,

• creating and publishing a Provider profile,

• communication and use of the Platform,

• provision of the Controller's services,

• intermediating the conclusion of a contract between the Provider and the Customer through the Platform,

• receiving and disbursing funds in favour of the Provider,• keeping records of contracts for the prescribed period.

The legal basis for processing this personal data is the performance of a contract. We retain the personal data of prospects from pre-contractual communication for a maximum of 3 months. We process the personal data of registered users for the duration of their registration.

Contact form

We process the personal data of inquirers, comprising name, surname, email, and the subject of the message, for the purpose of receiving and handling your inquiry. The legal basis for processing this personal data is the performance of a contract or pre-contractual relations. We retain this personal data for 6 months.

Newsletter

We process the personal data of persons who have subscribed to our newsletter through the dedicated form, comprising their email address, on the legal basis of the data subject's consent. We process the personal data of our customers and other persons with whom we have a contractual relationship for the purpose of sending newsletters, on the legal basis of legitimate interest, namely informing them about the Controller's activities, offers, and promotions. The data subject may withdraw their consent or object to the processing of their personal data at any time by sending a written notice or unsubscribing from the newsletter. We process this personal data for a period of 1 year from the last order.

Competitions

We process the personal data of competition participants, comprising name, surname, username, and any other information provided, for the purpose of participating in and evaluating the competition. The legal basis is the consent of the data subject, given upon entering the competition. We process this personal data for the duration of the competition, and the winner's personal data for 1 year after its conclusion. A participant may withdraw their consent at any time, which will result in their exclusion from the competition.

Customer reviews

We process the personal data of customers who have submitted a review, comprising title, name, surname, and the subject matter of the review, with the data subject's consent, for the purpose of publishing the review on the Controller's website and on social media. We process this personal data for a period of 5 years. The customer may withdraw their consent at any time by sending a notice by email.

Management of social media

We process the personal data of followers of our official social media pages for the purpose of managing those social media accounts. The legal basis for processing this personal data is legitimate interest, namely presenting the Controller and its services through social media. We process this personal data for as long as you remain a follower of our page.

Cookies

We process cookies to ensure the proper functioning of our website, to make it easier to use, and for advertising purposes. The legal basis for processing cookies is your consent, given by clicking the relevant button on the cookie banner. We retain cookies for 14 months. For more information on what cookies are and how we process them, please see below our Cookie Notice.

3. CONSENT

In the cases described above, we process your personal data on the legal basis of consent, meaning only with your consent. You may withdraw this consent at any time by deleting your user account, unsubscribing from the newsletter, sending a notice to our email address, or, in the case of cookies, by changing your browser settings.

4. RECIPIENTS

To whom do we provide your personal data?

We provide personal data to a third party only where required by specific legislation or where necessary for the performance of a contract. This concerns, in particular, public authorities and other authorised entities. We may also provide your personal data to a processor that supplies us with professional and specialised services. Where we engage a processor to process personal data, we have entered into a data processing agreement with that processor and have bound it to confidentiality. We have engaged the following processors to process your personal data:

• an accounting firm

• a provider of an online invoicing system

• a provider of the Platform

• a provider of an online email-dispatch system

Your personal data may also be provided to other persons for the purpose of performing a contract, such as a carrier or a business partner providing services related to the administration of the Platform and to marketing.

5. THIRD COUNTRIES

Where do we transfer your personal data?

Personal data may be transferred to a third country, namely the USA, but solely in connection with the use of Google and Meta services.

6. COMPLAINTS

Not satisfied? 

If you are not satisfied with how we process your personal data, you may let us know at info@papayaguide.com. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that we are processing your personal data unlawfully.

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07, Bratislava, Slovak Republic, Email: statny.dozor@pdp.gov.sk

7. HOW WE PROCESS PERSONAL DATA

How do we process your personal data?

We process personal data in both electronic and paper form. We do not use any automated individual decision-making. We keep records of all processing activities and have implemented the necessary technical and organisational security measures to protect personal data. These measures include, in particular, antivirus software, a strong-password policy, and encryption. We regularly back up the personal data entrusted to us so that it can be restored immediately in the event of accidental damage or loss. Persons who process personal data have been instructed accordingly and bound to confidentiality. We exercise great care in selecting our processors, ensuring that any processor we select provides adequate guarantees for the security of your personal data.

8. RIGHTS OF DATA SUBJECTS

What rights do you have as a data subject?

The GDPR grants you certain rights that allow you to influence how we process your personal data. However, not all rights can be exercised under all circumstances; this depends on the legal basis for the processing of personal data.

a) Right of access – You have the right to know whether we process your personal data. Where we do, you may ask us for access to that data. Upon your request, we will issue a confirmation containing information about how our company processes your personal data.

b) Right to rectification – You have the right to have the personal data we process about you be accurate, complete, and up to date. If it is inaccurate or outdated, you may ask us to correct or complete it. We will carry out the correction without undue delay, having regard to technical feasibility.

c) Right to erasure – Under certain circumstances, you have the right to have your personal data erased. You may ask us to erase it at any time. We will erase your personal data if:

• we no longer need it for the purpose for which you provided it to us;

• you withdraw your consent;

• you object to the processing of your personal data;

• we are processing your personal data unlawfully;

• the personal data must be erased in order to comply with a legal obligation;

• you are a child, or the parent of a child, who consented to the processing of personal data online;

d) Right to restriction of processing – You may ask us to restrict the processing of your personal data. If we grant your request, we will only store your data and will not otherwise process it. Processing of your data will be restricted where:

• you notify us that it is inaccurate, until such time as we have verified its accuracy;

• we are processing it unlawfully, but you do not consent to its erasure and instead request that we merely restrict its processing;

• we no longer need it, but you need it to establish, exercise, or defend legal claims;

• you have objected to the processing of your personal data, until such time as we have verified whether our legitimate interests override your grounds for objection.

e) Right to data portability – In the cases provided for by law, you have the right to have your personal data transferred to another controller. This applies in particular to personal data processed with your consent or for the performance of a contract, where the processing is carried out by automated means and is technically feasible.

f) Right to object – Where we process your personal data on the legal basis of legitimate interest, you have the right to object to such processing. Unless we demonstrate compelling legitimate grounds for the processing that override your interests or rights, we will, without undue delay, cease processing your personal data following your objection. You may send us your request to exercise any of the above rights by email. We will deal with all your requests and will inform you of the outcome in the same manner in which you submitted your request.

9. FINAL PROVISIONS

This Privacy Policy enters into force on the date of its publication, i.e. on 11 May 2026. We reserve the right to amend this Privacy Policy if there is a change in how personal data is processed within our company.

Cookie Notice

In order to ensure that this website functions properly and to improve the services we provide, we sometimes store small data files, known as cookies, on your device.

1. What are cookies?

Cookies are small text files created through communication between this website and your browser. Cookies are stored by our servers, via your browser, on your device (computer, mobile phone, or tablet). Thanks to cookies, our website recognises your device on your next visit.

2. What do we use cookies for?

Our servers use cookies to improve the quality of our services and to tailor the content of the website to your needs and preferences. We use them, in particular, to:

a) monitor the proper functioning of the website,

b) improve the quality of the services we provide,

c) recognise you and make it easier to use the website on a repeat visit,

d) collect, analyse, and evaluate information about your access to and behaviour on the website,

e) provide information relevant to your interests and needs,

f) recommend services that match your interests and needs,

g) carry out remarketing.

Cookies are used by almost every website. On a repeat visit, they help the website remember the pages you have visited and your previous settings.

By browsing this website, you consent to the storage of cookies for the purpose described above. The data collected is anonymous and does not lead to your direct identification.

3. What types of cookies are there?

In terms of duration, we use both temporary and persistent cookies.

a) Temporary cookies are stored on your device only for the duration of your visit, until you close the website.

b) Persistent cookies are stored on your device and remain there until you delete them or until the period set in your browser expires.

In terms of content, the Controller uses the following cookies:

a) Strictly necessary technical cookies, which are required for the proper and effective use of the website (e.g. login credentials). They allow you to browse the website and use its basic functions. Technical cookies may be used even without your consent;

b) Functional cookies, which are created in response to actions you have taken on the website. They enable the website to provide enhanced functionality, greateruser comfort, or personalised settings that are not strictly necessary for the basic operation of the website. They are used, for example, to remember interface settings, save user preferences, and similar purposes. Some of these may be stored without your consent, while others require your consent;

c) Analytical and statistical cookies, which we use to measure traffic and evaluate how the website is used, so that we can improve its content, functionality, and user experience. We use these cookies only with your consent;

d) Marketing cookies, through which it is possible to assess your range of interests and needs and, on that basis, offer you relevant services. We use these cookies only with your consent.

4. How do we obtain cookies?

We process essential cookies, which are necessary for the website to function properly, without your consent. We process all other cookies, the processing of which is not necessary for the proper functioning of the website, only with your consent. You may give your consent by selecting the relevant cookies on the banner on our website. You may choose which categories of cookies you consent to and which you do not.

5. What cookies do we use?

The exact name of each cookie is set out on the cookie banner, which you can access on your first visit to the website and by clicking on “Cookie settings” in the website footer.

6. How long do we retain cookies?

The retention period varies depending on the specific cookie. The exact retention period is set out on the cookie banner, which you can access on your first visit to the website and by clicking on “Cookie settings” in the website footer.

7. How to withdraw your consent to the processing of cookies?

You can change your cookie settings in your browser at any time. You can delete cookies, block them, disable their use entirely, or restrict them to the categories you choose. Information on browsers and how to manage cookies can be found on the following websites or in the further documentation of internet browsers:

Chrome: https://support.google.com/chrome/answer/95647

Edge: https://support.microsoft.com/en-us/microsoft-edge

Internet Explorer: https://support.microsoft.com/en-us/help/17442

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/security-and-privacy/

8. Third-party cookies

Our website contains links and connections to other websites, such as Facebook or Instagram. As a result, while browsing our website, cookies that are not under our control may be created. You can read the terms of use for cookies on the respective websites of those third parties.

9. Who to contact?

If you have any questions regarding the use of cookies on our website, please contact us at info@papayaguide.com.