1. Who we are (website operator)
The website rakytovce.obecdigital.sk is operated by:
Luxria s.r.o.
Company ID: 52921361
Registered office: Rakytovská cesta 6952/36, 974 05 Banská Bystrica, Slovakia
Registration: District Court Banská Bystrica, Section: Sro, File No. 38174/S
Director: Peter Kukula
E-mail for data protection questions: kukulape@gmail.com
In the following text, Luxria s.r.o. is referred to as "the controller" or "we".
The website rakytovce.obecdigital.sk serves the residents of the Rakytovce district of the city of Banská Bystrica and all those interested in the life, history, and current events in this district. It was created in cooperation with the Rakytovce Citizens' Council, but from a data protection perspective, the controller is Luxria s.r.o.
2. What personal data we process
We follow the principle of data minimisation under Art. 5(1)(c) GDPR — we process only data that is necessary for the purpose for which it is collected.
2.1 Data collected automatically when visiting the website
Each time you visit the website, the following technical data is stored in the hosting server logs:
- IP address of the visitor (anonymised after 30 days)
- Date and time of access
- Referring website (referer)
- URL visited on our website
- Browser type and version, operating system
- Amount of data transferred
Purpose: ensuring website operation, protection against attacks, traffic analysis.
Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) — security and stability of the service.
Retention period: 30 days.
2.2 Cookies
The website uses the following types of cookies:
Essential cookies
- Required for basic website functionality (language preference, session, display preferences)
- Do not store personal data that could identify a person
- Do not require consent (Art. 5(3) ePrivacy Directive — exemption for essential cookies)
- Duration: until end of session or max. 1 year
Analytical cookies (if used — see Cookie banner)
- Used to measure traffic and understand how visitors use the website
- Require explicit consent before being stored
- You can withdraw consent at any time in the cookie banner settings
- Duration: max. 13 months
Marketing cookies
The website rakytovce.obecdigital.sk does not use any marketing or advertising cookies.
Detailed information about cookies used can be found on the Cookies page and in the Cookie settings section available in the page footer.
2.3 Data you provide voluntarily
- Newsletter (if you subscribe): email address
- Contact form (if you use it): name, email, optionally phone number and message content
- Comments or event registration (after implementation): name, email
Purpose: sending newsletter, responding to your inquiry, attendance records.
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).
Retention period: until consent is withdrawn, max. 5 years from last activity.
Note: These features are currently under development. If they do not yet exist, we do not collect any such data.
3. Who we share your data with (processors)
We do not sell your personal data to any third party. However, we work with the following technical service providers:
| Processor | Service | Headquarters | Country |
|---|---|---|---|
| Vercel Inc. | Web hosting | San Francisco | USA (EU servers) |
| Supabase Inc. | Database, authentication | Wilmington | USA (EU servers — Frankfurt) |
| Open-Meteo | Weather data (public API) | Burgdorf | Switzerland |
| MeteoAlarm (EUMETNET) | Weather warnings | Brussels | Belgium |
With each processor, we have entered into Standard Contractual Clauses (SCC) pursuant to EU Commission Decision 2021/914, or we use their publicly available DPA (Data Processing Agreement). Data is primarily routed to EU/EEA servers.
4. Your rights as a data subject
Under GDPR, you have the following rights:
4.1 Right of access (Art. 15 GDPR)
You have the right to request confirmation of whether we process your personal data, and to obtain a copy.
4.2 Right to rectification (Art. 16 GDPR)
If your data is incomplete or inaccurate, you have the right to have it corrected or completed.
4.3 Right to erasure / "right to be forgotten" (Art. 17 GDPR)
You have the right to request erasure of your data if:
- the data is no longer necessary for the purposes for which it was collected
- you withdraw consent and there is no other legal basis
- the data is processed unlawfully
4.4 Right to restriction of processing (Art. 18 GDPR)
You may request temporary restriction of processing of your data.
4.5 Right to data portability (Art. 20 GDPR)
You have the right to receive your data in a structured, commonly used, machine-readable format (e.g. JSON, CSV).
4.6 Right to object (Art. 21 GDPR)
You may object to processing of your data based on our legitimate interest.
4.7 Right to withdraw consent (Art. 7(3) GDPR)
If you have given us consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
4.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovakia
Tel.: +421 2 3231 3214
E-mail: statny.dozor@pdp.gov.sk
Web: dataprotection.gov.sk
5. How to exercise your rights
You can send a request to exercise any of the above rights:
- By email: kukulape@gmail.com
- By post: LUXRIA s. r. o., Rakytovská cesta 6952/36, 974 05 Banská Bystrica, Slovakia
We will process your request without undue delay, within 30 days of receipt at the latest. In justified cases, this period may be extended by a further two months; in such case we will inform you.
Processing requests is free of charge. In the case of manifestly unfounded or excessive requests (e.g. repeated), we reserve the right to charge a reasonable fee or refuse the request.
6. Data security
We protect personal data with technical and organisational measures:
- Encryption in transit — the entire website runs on HTTPS (TLS 1.3)
- Database backups — daily, encrypted, stored in the EU
- Data access — only for authorised personnel on a need-to-know basis
- Regular updates — web stack and dependencies are kept up to date
- Security event logs — retained for 90 days
7. Minors
The website rakytovce.obecdigital.sk is not primarily intended for persons under 16 years of age. If you are under 16, please do not send us your personal data (e.g. via contact form or newsletter subscription) without parental or legal guardian consent.
If we discover that we have inadvertently collected data from a person under 16 without such consent, we will delete the data without delay.
8. Changes to this statement
We may update this statement. The last update date is indicated at the top of this document. We will inform you of significant changes either by a notice on the website or by email (if you are subscribed to our newsletter).
We recommend visiting this page occasionally to check for changes.
9. Contact
Any questions regarding the protection of your personal data:
LUXRIA s. r. o.
E-mail: kukulape@gmail.com
Director: Peter Kukula
This statement was drafted based on applicable legislation of the Slovak Republic and the EU:
- Regulation (EU) 2016/679 (GDPR)
- Act No. 18/2018 Coll. on Personal Data Protection
- Directive 2002/58/EC (ePrivacy)
- Act No. 22/2004 Coll. on Electronic Commerce