← Back to lomniski.sk

PRIVACY POLICY

Effective from 22 October 2026. Policy on the processing of personal data under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.

1. Who processes your data

The controller is Progres Tatry, s. r. o., Tatranská Polianka 22, 062 01 Vysoké Tatry, Slovakia (premises: Tatranská Lomnica 269, 059 60 Vysoké Tatry), Company ID (IČO) 47 515 538, registered in the Commercial Register of the District Court Prešov, section Sro, insert no. 30027/P (the “school” or “we”). Contact for personal data matters: info@lomniski.sk, +421 948 419 833.

2. What data and why

Lesson booking. When you submit the booking form we process: the requested date, discipline (skiing / snowboarding), number of people, age group and level, interest in renting equipment, preferred language, name, phone number, e-mail and your note. Purpose: to arrange and confirm the lesson date and assign an instructor. Legal basis: performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b) GDPR). Without a name, phone number, e-mail and date we cannot handle the booking.

Phone and e-mail. If you contact us directly, we process the data you give us for the purpose of replying and arranging the lesson (Art. 6(1)(b) GDPR).

Technical operation of the website. The web server records your IP address to the extent necessary to deliver the page and to protect the form from abuse (limiting the number of attempts). Legal basis: legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). Your “skiing / snowboarding” choice is stored only in your browser (sessionStorage) and is not shared with anyone.

Chat with the assistant Lomi. If you write a message in the chat, its text and the earlier messages of the same conversation are sent by our server to the artificial intelligence provider Anthropic, PBC (USA), which generates the reply. The provider processes them under its published API terms and does not use them to train models without your permission. Transfers to the USA are governed by the provider's contractual safeguards. We do not store the messages: the conversation exists only in the open window of your browser, and we do not send your name or e-mail with the message. Please do not type personal data into the chat; use the booking form for that. Lomi is an AI assistant, its answers may be inaccurate and are not binding; only a confirmation from the school is binding. Purpose: answering your questions about the school. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). To protect against abuse the server briefly records the IP address and the number of messages.

Review request after the lesson. After your lesson we may send you a one-time e-mail asking for a Google review. For this we use the name, e-mail, language and the age group and number of people from your booking (only so that we address you correctly). We send at most one such e-mail, the review is entirely voluntary, and the e-mail is sent through the Resend service (see section 4). If you do not want to receive it, write to us and we will not use your e-mail for this purpose. Legal basis: legitimate interest in feedback from our clients (Art. 6(1)(f) GDPR).

3. Cookies and third-party services

Visit statistics (only with your consent). On your first visit we ask whether you agree to measurement. If you agree to visit statistics, Google Analytics 4 is loaded (provider: Google Ireland Limited, possibly Google LLC, USA). It stores the cookies _ga and _ga_* (valid for up to 2 years) and records visit statistics without directly identifying you: which pages you view, which country and device you come from, how far you scroll down the page, which parts of it you see, which booking buttons you use, which fields of the booking form you start filling in (never what you type into them), and whether a booking was submitted (never your name, phone number or e-mail). Purpose: to learn how many people visit the website and to improve it. Legal basis: your consent (Art. 6(1)(a) GDPR). We keep Google Analytics data for at most 14 months. Transfers to the USA rely on the EU standard contractual clauses or the EU-US Data Privacy Framework.

Ad measurement (only with your consent). If you also agree to ad measurement, Google Ads is loaded (provider: Google Ireland Limited, possibly Google LLC, USA). It stores _gcl_* cookies (valid for about 90 days) that remember you came to the website from our ad on Google, and when a booking is submitted it tells Google that a booking was made (never your name, phone number or e-mail). Purpose: to learn which ads bring bookings and to spend the advertising budget sensibly. We do not personalise ads for you. Legal basis: your consent (Art. 6(1)(a) GDPR). Transfers to the USA rely on the same safeguards as for Google Analytics.

Meta measurement and ads (only with your consent). If you also agree to this item, the Meta Pixel is loaded (provider: Meta Platforms Ireland Limited, possibly Meta Platforms, Inc., USA). It stores the _fbp cookie (always) and _fbc (if you arrive from a Facebook/Instagram ad), valid for about 90 days, and after a booking is submitted it reports a standard “Lead” event to Meta (never your name, phone number or e-mail). Unlike Google Ads, this is not measurement-only: Meta may also use this data to show you more relevant ads on Facebook/Instagram (remarketing) and to optimise how our ads are delivered. Purpose: to learn which ads bring bookings and to target the advertising budget sensibly. Legal basis: your consent (Art. 6(1)(a) GDPR). Transfers to the USA rely on the European Commission’s standard contractual clauses.

If you decline or do nothing, nothing is loaded. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer; the choice itself is stored only in your browser (localStorage).

The map in the Contact section is a Google Maps service and loads only after you click it; from that moment Google may set its own cookies in line with Google’s policy. Links to Instagram lead outside this website.

4. Who we share data with

The booking is delivered to the school by e-mail via the e-mail service Resend (Resend, Inc., USA — EU standard contractual clauses) to the school’s mailbox in Google Workspace. The data is seen by the instructor who teaches the lesson. We do not sell the data or pass it on for third-party marketing. We do not transfer it outside the EU/EEA, except for any use of Google services as described in section 3.

5. How long we keep data

We keep booking data until the end of the ski season in which the lesson took place, at most 12 months from the booking; data needed for accounting and tax purposes for as long as the law requires.

6. Your rights

Under the GDPR you have the right to:

You can exercise your rights by e-mail at info@lomniski.sk. We will reply within one month at the latest.

7. Children

We teach children, but the booking is always made by a parent or legal guardian — we process a child’s data (age, level) only to the extent provided to us for this purpose.

8. Changes

We may update this policy when the way the website works changes. The current version is always on this page.