Privacy Policy & Cookie Policy

1. Data Controller

2. What personal data we process

Depending on how you use our website, we may process the following categories of personal data:

• Identification data: first name, last name
• Contact data: email address, phone number
• Enquiry / reservation data: rental dates, vehicle type, pick-up location
• Technical data: IP address, browser type, operating system, pages visited
• Analytics data: on-site behaviour (with consent only)

3. Purposes and legal basis of processing

• Handling enquiries and reservations — legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Preparing rental agreement and invoice — legal basis: performance of contract and legal obligation
• Website operation and security — legal basis: legitimate interest of the controller
• Visitor analytics — legal basis: consent (Art. 6(1)(a) GDPR)
• Marketing — legal basis: consent (Art. 6(1)(a) GDPR); processed only with consent

4. Recipients of personal data

We do not sell your personal data. We share it only with trusted processors necessary for operating the website and providing services:

• Hosting provider (server infrastructure)
• Analytics tools — Microsoft Clarity, Google Analytics (consent only)
• Email provider for confirmation messages

5. Payments

This website does not process online card payments. Vehicle rental is invoiced separately following agreement with the client. No payment card data is therefore processed through this website.

6. Retention periods

• Contact data and reservations: 24 months from last contact
• Server logs: 6 months
• Accounting records: 10 years (legal obligation)

7. What are cookies

Cookies are small text files stored on your device when you visit a website. They help ensure proper website functionality, remember your preferences, and (with consent) analyse traffic or personalise content.

8. Types of cookies we use

• Necessary cookies — technically required for basic website functionality; no consent needed
• Analytics cookies — Microsoft Clarity, Google Analytics; consent required
• Marketing cookies — conversion tracking, remarketing networks; consent required

9. Managing cookie consent

You can change or withdraw your consent at any time using the button below, or through your browser settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Your rights as a data subject

Under GDPR you have the following rights:

• Right of access — request a copy of your personal data we process
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — "right to be forgotten" subject to legal conditions
• Right to restriction of processing — in certain circumstances
• Right to data portability — in machine-readable format
• Right to object — against processing based on legitimate interest
• Right to withdraw consent — at any time without giving reasons

Submit requests to: info@umbrellaslovakia.sk

11. Age of consent

Our services are intended for persons over 16 years of age. Under Slovak law, the age of consent for processing personal data via digital services is 16. Persons under 16 must not contact us without parental or guardian consent.

12. Security of personal data

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All communication is conducted via encrypted HTTPS protocol.

13. Changes to this policy

We reserve the right to update this policy at any time. The current version is always available on this page. For material changes, we will notify you via a banner on the website.

14. Supervisory authority (DPA)

If you believe that the processing of your personal data is in breach of GDPR, you have the right to lodge a complaint with the supervisory authority: