Last updated: 9 August 2026
This Privacy Policy explains how personal data relating to visitors of the Visit Little Rome website, available at visitlittlerome.com and its language versions, is processed.
1. Data Controller
The controller of the website and personal data is:
Milan Urgošík
Business address: Špačinská cesta 50, 917 01 Trnava, Slovak Republic
Business ID (IČO): 52755371
Tax ID (DIČ): 1126033953
Registered in the Trade Register of the Slovak Republic
Register maintained by: District Office Trnava
Trade Register No.: 250-44064
Email: info@visitlittlerome.com
If you have any questions regarding the processing of personal data or wish to exercise your rights, you can contact the controller using the email address above.
2. Personal Data We Process
The scope of personal data processed depends on how you use the website.
We may process in particular:
- technical data related to your visit to the website, such as your IP address, device type, operating system, web browser, requested URL, date and time of the request, and server logs,
- information about how you use the website, such as pages visited, traffic source, interactions with content, approximate geographical location and technical information about your device, where you have consented to analytics,
- information about your cookie consent preferences,
- information you voluntarily provide when contacting us by email or through a contact form, in particular your name, email address and the content of your communication.
Cookies and online identifiers, including IP addresses, may constitute personal data under applicable data protection legislation.
3. Website Operation, Security and Technical Provision
When you visit the website, certain technical information may be processed where necessary to:
- display and operate the website correctly,
- protect the website and server,
- prevent attacks, fraud and misuse,
- diagnose technical problems.
The legal basis for this processing is the legitimate interest of the controller pursuant to Article 6(1)(f) of the GDPR, consisting in ensuring the secure, stable and reliable operation of the website.
Technical logs are retained only for as long as necessary for website operation, security, troubleshooting or the investigation of security incidents.
Hosting and related technical infrastructure for the website are provided by Websupport s. r. o.
4. Website Analytics – Google Analytics
We use Google Analytics 4 to measure website traffic and improve the website.
Analytics may provide us with information such as:
- the number of visits and users,
- pages visited,
- traffic sources,
- interactions with content,
- the device and web browser used,
- the visitor’s approximate geographical location.
We use Google Analytics only on the basis of your consent pursuant to Article 6(1)(a) of the GDPR.
If you refuse analytical cookies, analytics technologies that require consent will not be activated.
We use Google Tag Manager for the technical management of analytics tags. Google Tag Manager is a technical tool used to manage scripts and tags; its use does not in itself constitute consent to analytics.
The provider of the relevant Google services for users in the European Economic Area is primarily:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Where personal data is transferred internationally, Google uses applicable legal safeguards, including adequacy decisions, the EU-U.S. Data Privacy Framework and, where appropriate, Standard Contractual Clauses.
5. Cookie Consent Preferences
We use a consent management system to manage cookies and related technologies.
When you first visit the website, you can decide whether to allow optional cookies and related technologies.
Information about your choice may be stored in order to:
- remember your preferences,
- prevent the cookie banner from appearing on every visit,
- demonstrate which consent settings were selected.
The legal basis for processing data necessary to store and demonstrate your consent preferences is compliance with the controller’s legal obligations and the controller’s legitimate interest in demonstrating compliance with privacy requirements.
Technologies that are not strictly necessary to transmit communications or provide a service expressly requested by the user are only used where the required consent has been obtained.
6. Contacting the Controller
If you contact us by email or through a contact form, we process the information you voluntarily provide.
This may include:
- your name,
- your email address,
- the name of the company or organisation you represent,
- the content of your message,
- any other information you choose to include in your communication.
We use this information to respond to your request and for subsequent communication.
Where your communication concerns a potential cooperation or contractual relationship, the legal basis may be Article 6(1)(b) of the GDPR – taking steps prior to entering into a contract or performance of a contract.
For other general communication, the legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR in communicating with visitors, partners and other persons.
General correspondence is normally retained for no longer than 12 months after the matter has been resolved, unless there is a reason to retain it for longer, such as an existing contractual relationship, accounting or tax obligations, or the establishment, exercise or defence of legal claims.
7. Affiliate Links and Partner Services
Visit Little Rome may contain affiliate links to third-party service providers, including:
- accommodation and booking platforms,
- flight and transport providers,
- tourist attractions and experience providers,
- other travel-related services.
If you make a booking or purchase after following an affiliate link, the controller may receive a commission from the relevant partner.
When you click an external affiliate link, you leave the Visit Little Rome website. Any subsequent processing of personal data may therefore be governed by the privacy policy and terms of the relevant partner.
If Visit Little Rome uses affiliate cookies, advertising pixels or similar tracking technologies directly on the website in the future, they will only be activated in accordance with applicable consent requirements and the relevant documentation will be updated accordingly.
Current partners will be added to the relevant policies or cookie list as individual services are implemented.
8. Recipients of Personal Data
Personal data may, where necessary, be made accessible to:
- the provider of hosting and technical infrastructure,
- providers of analytics and technical services,
- the provider of email services,
- providers of tools necessary for operating and securing the website,
- affiliate or commercial partners where necessary in connection with a particular service or interaction,
- public authorities where disclosure is required by law.
We do not sell personal data to third parties.
9. Transfers of Personal Data to Third Countries
Some service providers may process personal data outside the European Economic Area.
Where personal data is transferred to a third country, safeguards permitted under the GDPR are used, such as an adequacy decision or Standard Contractual Clauses.
In the case of Google services, the EU-U.S. Data Privacy Framework may also apply.
10. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
Retention periods depend on the type of processing:
- technical and security information – for as long as necessary for the operation, security and troubleshooting of the website,
- analytics data – in accordance with the settings of Google Analytics and the consent granted,
- cookie consent information – for as long as necessary to remember and demonstrate the user’s choice,
- general email correspondence – normally no longer than 12 months after the matter has been resolved,
- information relating to a contractual or commercial relationship – for the period required by applicable law or necessary for the establishment, exercise or defence of legal claims.
11. Your Rights
Depending on the circumstances, you have the right to:
- access your personal data,
- request the correction of inaccurate or incomplete personal data,
- request the erasure of your personal data,
- request restriction of processing,
- object to processing based on legitimate interests,
- data portability where the statutory conditions are met,
- withdraw your consent at any time,
- lodge a complaint with the competent supervisory authority.
You can exercise your rights by contacting:
12. Withdrawal of Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time.
You can change your consent to the use of optional cookies through the Cookie settings link available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
13. Automated Decision-Making
We do not use personal data for automated individual decision-making that would produce legal effects concerning a visitor or similarly significantly affect them.
14. Supervisory Authority
If you believe that your personal data is being processed in breach of applicable data protection legislation, you have the right to contact:
Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
Email for matters relating to supervision: statny.dozor@pdp.gov.sk
15. Changes to this Privacy Policy
We may update this Privacy Policy, particularly if we change the technologies or service providers we use, the way personal data is processed, or applicable legal requirements.
The current version will always be available on this page.