PRIVACY POLICY

Transparent information about how we process personal data.

Effective 23 August 2026 · version 1.0

Controller

Trust group, s.r.o, IČO/ID 53 537 173
Štvrť SNP 144/61, 914 51 Trenčianske Teplice
Privacy contact: info@paxcafe.sk.

What we process, why, and the legal basis

Reservations

We process name, email, optional phone, date, time, duration, party size, area, table and note to manage and confirm bookings. The legal basis is Article 6(1)(b) GDPR. Required fields are necessary; phone and note are optional.

Reviews

We process name, email, rating and text for moderation and possible publication. Email is not public. Publication relies on consent, which may be withdrawn at any time.

We process email and consent records only if you subscribe. You may unsubscribe through any newsletter or by contacting us.

Security

Technical logs and communications may be processed to secure the service, resolve errors and protect legal rights based on legitimate interests.

Retention

Bookings are normally retained for 12 months; reviews while moderated or published and until withdrawal or deletion, unpublished submissions normally up to 12 months; newsletter details until unsubscribe; technical logs normally 30 days. Law or legal claims may require longer retention.

Recipients and transfers

Authorised staff and hosting, database, authentication and email providers, notably Vercel, Supabase and Resend, may process necessary data. Transfers outside the EEA use GDPR safeguards.

Maps and external content

Google Maps and Mapy.cz are not loaded automatically. After you request a map, its provider may receive your IP address and browser information under its own terms.

Cookies and local storage

The public website does not use analytics or marketing cookies. Essential technical storage may support secure administration. Future optional cookies will require prior consent.

Your rights

You may request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent. We normally respond within one month and may verify identity.

Complaint

You may complain to the Slovak Data Protection Authority, Námestie 1. mája 18, 811 06 Bratislava, Slovakia. dataprotection.gov.sk.

Automated decisions

We do not use automated decision-making or profiling producing legal or similarly significant effects.

Changes

The current version is always available on this page.

Form protection – Cloudflare Turnstile

Cloudflare Turnstile protects forms against spam. Opening a form sends technical data, such as your IP address and browser information, to Cloudflare. The service uses this data to detect bots and improve that protection. Cloudflare privacy information.