Personal Data Protection under GDPR


These Personal Data Protection under GDPR govern the legal relations between the Bratislava Tourist Board (hereinafter

referred to as “BTB”) and the holder of the Bratislava CARD (hereinafter referred to as the “Cardholder”).


    1. Information Regarding the Personal Data Protection under GDPR

      Provider: Bratislavská organizácia cestovného ruchu (Bratislava Tourist Board - BTB), registered office at

      Primaciálne námestie 1, 814 99 Bratislava I, Company Registration No.: 42 259 088 Contact: bratislavacard@visitbratislava.com

      Purpose of processing:

      1. performance of the contract (as far as data is concerned: name, surname, email address, expected date of arrival, presumed place of collection of the BC)

      2. statistics (in terms of age, country) Legal basis of processing:

      1. processing of the personal data to the extent of name, surname, e-mail address, expected date of arrival, presumed place of collection of the card is necessary for performance of the contract

      2. processing of the personal data to the extent of age category, the country of origin is carried out based on the legitimate interest of the provider - statistical evaluation of the visit rate of the destination

      Preservation period: 1 year Person concerned has:

      1. the right to request access to the personal data relating to them from the operator;

      2. the right to correction of the personal data (correction of incorrect data and completion of incomplete data);

      3. the right to deletion of the personal data and the right to restrict the processing of personal data;

      4. the right to object to the processing of personal data;

      5. the right to transfer of the personal data;

      6. the right to file a petition to initiate proceedings on personal data protection at the Office for Personal Data Protection of the Slovak Republic.


      The provision of personal data in the extent of name, surname, email address, expected date of arrival, presumed place of collection of the card is a requirement that is mandatory for the conclusion of the contract. It is not possible to conclude the contract without providing personal data (purchase the BC).


      The provision of personal data as the age category and country of origin is mandatory.