Skip to content

Privacy Policy

Privacy Policy

This Privacy Policy explains how Creavia s.r.o. collects, processes, and protects your personal data when you visit our website www.cestavcase.sk, purchase tickets/vouchers for the Cesta v čase experiential exhibition, and use our services.

We always process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection (Slovakia).

1. Who is the Data Controller?

The data controller responsible for determining the purpose and means of processing your personal data is: Creavia s.r.o.Registered office: M. Kukučína, 96237, Kováčová, Slovakia Exhibition venue: Námestie sv. Trojice 9, 969 01 Banská Štiavnica, Slovakia ID (IČO): 56 210 469 E-mail: info@cestavcase.sk

2. What Personal Data Do We Process?

We only process the minimum amount of data necessary to deliver your ticket or voucher:

  • Email Address (mandatory): Used to send the purchased ticket/voucher with a QR code and the payment confirmation.

  • First and Last Name of the buyer or recipient (optional): Processed only if you choose to enter it when purchasing a voucher in order to personalize it.

  • Technical Data and Cookies: IP address, browser information, and cookies (analytical and marketing cookies are processed only if you give us your active consent via the cookie banner).

We do not request, record, or process your phone numbers, physical addresses, dates of birth, titles, or signatures.

3. For What Purposes and on What Legal Basis Do We Process Data?

We process your data based on the following legal grounds:

A) Performance of a Contract (Art. 6 (1) (b) GDPR)

  • Purpose: Order processing, generating and delivering the ticket/voucher to your email, and handling potential complaints or customer support requests.

  • Without providing this data, we would not be able to enter into a contract with you and deliver your ticket.

B) Compliance with a Legal Obligation (Art. 6 (1) (c) GDPR)

  • Purpose: Issuing and archiving tax and accounting documents. We are required to store invoices in accordance with the Slovak Accounting Act.

C) Legitimate Interest (Art. 6 (1) (f) GDPR)

  • Purpose: Protecting our legal claims (e.g., in the event of disputes), ensuring the security of our website and reservation system.

D) Your Consent (Art. 6 (1) (a) GDPR)

  • Purpose: Tracking website traffic (analytics) and targeting advertisements (marketing) via cookies. These cookies are deployed exclusively based on your consent granted via the cookie banner (managed by the CookieYes tool), which you can change or withdraw at any time.

4. How Long Do We Retain Your Data?

  • Data related to purchases and payments are retained for 10 years, as required by the Slovak Accounting Act.

  • Cookie consent data is retained for the duration of the specific cookie file (usually a few days to months), or until you withdraw your consent via the cookie banner or delete cookies in your browser.

5. To Whom Do We Disclose Your Data?

Your email address (and potentially name) is processed within our booking/e-shop system. Data is accessible only to our verified contractual partners who provide:

  • Web hosting and reservation system operations.

  • Online payment processing (payment gateway).

  • Accounting and tax services.

If you grant consent to cookies via the cookie banner, anonymized data about your behavior on the website may be processed by third-party tools (e.g., Google Analytics, Meta Pixel). We strictly do not sell your data to third parties.

6. What Are Your Rights?

Under the GDPR, you have the following rights against us:

  1.  
  • request access to your personal data,
  • request its rectification if it is inaccurate or incomplete,
  • request its erasure, provided we are no longer required to retain it by law,
  • request restriction of processing,
  • data portability for data we process based on a contract or your consent, i.e., the right to receive such data in a structured, commonly used, and machine-readable format and to transmit it to another controller,
  • object at any time to the processing of your personal data where such processing is based on our legitimate interest (point 3C),
  • withdraw your consent to the use of analytical and marketing cookies at any time.

You may exercise your rights by e-mail at info@cestavcase.sk.

7. Right to Lodge a Complaint with a Supervisory Authority

If you believe that we are processing your personal data in violation of applicable legal regulations, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic Hraničná 12, 820 07 Bratislava 27 Slovak Republic Website: www.dataprotection.gov.sk

This Privacy Policy is effective as of 16.07.2026.
↑ Up