In Spišská
Nová Ves

Operation
Neovia
Mixed-use project
ulica Ing. Straku 2145
052 01 Spišská Nová Vesy
Slovensko

website
operator
www.neovia.sk

Trek Café s.r.o.
Nábrežná 826/54
053 11 Smižany
Slovensko

IČO: 46 653 333
DIČ: 2023498576
Email: info@apartmanyturiec.eu
Telefón: +421 (0)905 714 541

1. Purposes of personal data processing

We process personal data for the following purposes:

• concluding reservation agreements, future purchase agreements, and purchase agreements
• communication with interested parties and buyers
• maintenance of business and contractual documentation
• marketing activities (only with the consent of the data subject)
• fulfillment of legal obligations (accounting, tax obligations)

2. Categories of processed data

• identification data (name, surname, date of birth, personal ID number – if required for the Land Registry)
• contact details (address, telephone, email)
• payment details
• contractual relationship data (reservations, contracts, communication)

3. Legal basis for processing

• Art. 6 para. 1 lit. b GDPR – performance of a contract
• Art. 6 para. 1 lit. c GDPR – legal obligation
• Art. 6 para. 1 lit. f GDPR – legitimate interest
• Art. 6 para. 1 lit. a GDPR – consent (for marketing)

4. Retention period

• Contractual documents: 10 years
• Accounting documents: 10 years
• Marketing data: until withdrawal of consent
• Communication with interested parties: 2 years from the last contact

5. Rights of data subjects

The customer has the right to:

• access to their data
• rectification
• erasure (if there is no legal obligation to retain it)
• restriction of processing
• data portability
• filing an objection
• withdrawal of consent
• lodging a complaint with the Office for Personal Data Protection of the Slovak Republic

6. Transfer of personal data to third parties

Data may be provided to:

• attorneys/lawyers
• accounting firms
• banks for mortgage financing
• IT and marketing service providers
• public authorities (Land Registry, Tax Office)
• all processors are bound by a duty of confidentiality and GDPR

7. Data security

The operator implements technical and organizational measures:

• secure communication
• access control
• regular backups
• employee training

8. Contact for the responsible person

The operator has not designated a Data Protection Officer as it does not meet the legal criteria.

9. Final provisions

The principles may be updated. The current version is available from the Operator or on the Project website.

Spišská Nová Ves » 1.5.2026