Privacy Policy

1. Who we are (controller)

The controller is Dip & Dream s.r.o., registered at Medená 110/23, company registration number (IČO) 52729800.

Privacy contact: info@dipanddream.com.

2. What personal data we collect

• Name
• Email address
• Phone number (optional)
• Selected trip, number of places, and the text of your message or note
• Technical data strictly needed to run the site (e.g. security and sign-in cookies)

3. Why we collect it

• To answer your question or message
• To handle your trip request and agree the details with you
• To enter into and perform a travel contract
• To meet accounting and tax obligations (deposit and balance invoices)
• To keep the website running and secure

4. Legal basis

• Pre-contractual steps and performance of a contract (Art. 6(1)(b) GDPR) — trip requests and bookings
• Legitimate interests (Art. 6(1)(f) GDPR) — answering general enquiries and site security
• Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax records
• Consent (Art. 6(1)(a) GDPR) — only if we later introduce a newsletter or optional cookies

5. How long we keep it

We keep personal data only for as long as needed to fulfil the purpose for which it was collected, or for as long as required by law. We mainly use the following indicative periods:

• Contact forms and unrealised enquiries — messages from the contact form and enquiries that did not lead to a trip are usually kept for 24 months, unless they need to be kept longer because of a legal claim or another legitimate purpose.
• Unrealised bookings — usually kept for 24 months, unless a contract, accounting document or other reason for longer retention has arisen.
• Contracts and documentation for completed trips — if a booking led to a contract or a completed trip, we keep the related documentation for as long as needed to meet legal, accounting and tax obligations and to protect legal claims.
• Accounting documents — invoices, accounting books and other accounting records are kept in line with the applicable law. Under the Slovak Accounting Act, certain accounting records are kept for ten years following the year to which they relate, so invoices and other accounting documents cannot be automatically deleted after 24 months.
• Marketing data — kept for the duration of the marketing relationship or until consent is withdrawn, or for another reasonable period under the relevant legal basis. After consent is withdrawn, we may keep the minimum data needed to record that the person does not wish to receive further marketing.
• Legal claims — if we need data to establish, exercise or defend legal claims, we may keep it until the relevant proceedings are finally concluded and then for as long as required by applicable law.

6. Who we share it with

We do not sell your data. We share it only where it is needed to deliver the service:

• The hosting and database provider of this website (processor)
• Local partners and guides at the destination — only what is needed to run your specific trip
• Our accountant and public authorities where required by law

7. International transfers

If a trip takes place outside the European Economic Area, we may need to pass the minimum necessary data (e.g. your name) to a local partner in that country so the trip can run. We do not otherwise transfer data outside the EEA.

8. Your rights

Send requests to info@dipanddream.com. We reply within the GDPR time limits.

• Right of access and to a copy of your data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests

9. Withdrawing consent

Where processing is based on your consent (e.g. optional cookies or a future newsletter), you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal. Cookie choices can be changed via 'Cookie settings' in the footer.

10. Complaints

You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk), or with the supervisory authority in your country of residence.

11. Contact

Dip & Dream s.r.o., Medená 110/23, Bratislava. Email: info@dipanddream.com