THAI RELAXBook

Privacy policy

Draft – to be reviewed by a lawyer before publication. This translation is for convenience; the Slovak version is binding.

1. Controller

Nalataporn Surawan, S.H. Vajanského 3, Nové Zámky, Slovakia, company ID 50 532 430 (premises: THAI RELAX, J. Kráľa 19, 940 01 Nové Zámky)
Phone: +421 948 400 097

2. In short

  • Cookies are only set with your consent (Google Ads, section 8).
  • Fonts and photos are served from our own server, not from third parties.
  • You book online through our booking system, or by phone.

3. Hosting and server log files

The website runs on a server in Germany operated on our behalf by Zabaiherz (processor under Art. 28 GDPR). When you visit, the web server automatically records your IP address, date and time, the page requested, the amount of data transferred, the referrer and your browser identification. This is technically necessary to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Log files are deleted automatically after 14 days at the latest.

4. Prices, opening hours and current notices

When you open the site, it loads our current prices and opening hours and checks whether we have published a current notice (e.g. changed opening hours). This information comes from our booking system, operated on our behalf by Zabaiherz (Art. 28 GDPR). Your IP address and technical request data are transmitted to its server (Art. 6(1)(f) GDPR). So that a notice does not reappear on every page, your browser storage (sessionStorage / localStorage) records that you have seen it; no cookies are set for this.

5. Online booking

For online bookings we process the data you enter (name, phone number, email address, chosen massage, appointment and any notes) to perform the contract (Art. 6(1)(b) GDPR). The booking system is operated on our behalf by Zabaiherz (processor under Art. 28 GDPR). You receive a confirmation email with a link to cancel the appointment.

So you do not have to enter your details again next time, the booking form stores first name, last name, phone number and email address in your browser's local storage after a successful booking (zabaiherz.booking.customer); you can delete this copy at any time in your browser settings. After booking you may voluntarily rate how easy it was.

If the booking form says so, we send you one email after your visit asking for a review, with a link to book again (Art. 6(1)(f) GDPR). You can object at any time via the unsubscribe link or informally by email or phone.

6. Payment

If you pay online, Stripe Payments Europe, Ltd. (Dublin, Ireland) processes the payment data directly; we never receive full card details. Stripe loads its own scripts in the booking window and may offer Google Pay, Apple Pay or Link depending on your device (Art. 6(1)(b) GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses. More: stripe.com/privacy.

7. Contact by phone or email

We use your details only to handle your enquiry or appointment (Art. 6(1)(b) GDPR) and delete them once they are no longer needed and no statutory retention obligations apply.

8. Google Ads conversion measurement (consent only)

With your consent (Art. 6(1)(a) GDPR, § 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications) we use Google Ads by Google Ireland Limited (Dublin, Ireland) to measure whether an ad led to a booking. The Google script is only loaded after "Accept"; it sets cookies (e.g. _gcl_*) and transmits usage data, possibly to the USA. Without consent nothing is loaded from Google. Your choice is kept in your browser's local storage (zbh_consent).

Withdrawal: at any time via "Withdraw cookie consent" in the footer of every page; the Google Ads cookies are then deleted.

9. Google Maps

We do not embed a map. The "Get directions" link opens Google Maps in a new window; only then does Google's privacy policy apply.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, to object to processing based on Art. 6(1)(f) GDPR and to withdraw consent. Please use the contact details above. You may also lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

11. Encryption

This website is served over HTTPS only.