Privacy Policy

To log in, keep your own hiking diary, rate places or add posts to the Community, we need to process some of your personal data. Below you will find what data this is, why we need it, how long we keep it and what rights you have.

1. Who is the controller

The website “Zdolané” (zdolane.sk) is operated by Tomas s.r.o., which is also the controller of your personal data. If you have any questions about data protection, contact us at info@zdolane.sk.

2. What data we process

During registration and login: your name or nickname, email address and password. We never store your password in readable form — the server keeps only its secure cryptographic fingerprint (hash), from which the password cannot be recovered. At registration we also record the time and the version of this text you agreed to. Next, content you add yourself: entries in your hiking diary (places you have climbed, visits, notes), place ratings, posts, comments and likes in the Community, and reports of inappropriate content. If you write to us via the contact form, we process your name, email and the text of your message. Finally, technical data needed to run the website securely: IP address, time and address of the request in the server logs.

3. For what purpose and on what legal basis

We process account, diary, rating and Community data to create and manage your account, let you log in, store your hiking diary and show your posts in the Community. The legal basis is the performance of a contract — providing the features you requested by registering (Art. 6(1)(b) GDPR) — and the consent you gave during registration. We use contact form data only to reply to your message, and technical data to protect the website against misuse (e.g. limiting the number of attempts); the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We do not use your data for advertising, profiling or automated decision-making.

4. How long we retain the data

We keep account, diary, rating and Community data for as long as you have an account. You can delete your account at any time in My account — this also deletes all related data, including your posts and comments in the Community. Deleted data disappears from backups within 2 months at the latest. Contact form messages are not stored in the website's database; we keep the delivered emails only as long as needed to handle your message. A login on a device expires after 30 days of inactivity, and technical server logs are continuously overwritten by newer ones.

5. Who may have access to them

We do not sell your data or provide it to third parties for marketing purposes. Only the operator and the necessary service providers who process data on our behalf as processors have access to it: the server and backup provider (Hetzner Online GmbH, data centres in the European Union), the content delivery and attack protection network provider (Cloudflare) and the email delivery service provider. If any of them processes data outside the European Union, this happens only with appropriate safeguards under the GDPR. Posts and comments you add to the Community are publicly visible to all website visitors together with your name or nickname — that is part of the Community feature itself.

6. Cookies and audience measurement

The website uses a single cookie — a strictly necessary technical login cookie, which is stored only after you log in and without which you would have to log in on every visit. We do not use tracking or advertising cookies. We measure traffic with a tool that does not use cookies and stores only aggregate statistics without identifying individual visitors. That is why the website does not ask you to consent to cookies.

7. Your rights

You have the right to access your data, correct it, delete it, restrict its processing, request its portability and object to its processing. You can change your name, download your data (export in JSON format) and delete your account directly in My account. You can withdraw the consent given during registration at any time — by deleting your account or by email. If you feel your data is not being handled correctly, you have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

8. Contact

For anything related to your data, contact us at info@zdolane.sk or via the contact form.