Avokado Parking
Park & Fly Parking
Bratislava Airport

PRIVACY POLICY
Avokado Parking
Ivanská cesta 28, Bratislava

1. Who processes your personal data

Controller (personal data controller):

• PAAS s. r. o.
• Primaciálne námestie 1, 814 99 Bratislava
• Company ID: 35 738 880

For the Avokado Parking project (parking near Bratislava Airport), the controller processes the personal data of customers who book parking with us or contact us.

• Phone: 02/ 22 11 11 66
• E-mail (reservations and privacy-related questions): rezervacia@avokadoparking.sk
• Website: https://avokadoparking.sk/

The controller has not appointed a Data Protection Officer (DPO). If you have any questions regarding privacy protection, you may contact us at the e-mail address above.

2. What personal data we process

We process in particular the following categories of personal data:

a) Data provided when booking parking (online / offline)

• First and last name
• E-mail
• Phone number
• License plate number / vehicle registration number
• Reservation data (arrival date and time, departure date and time, selected tariff, reservation number, etc.)
• Payment information (information on whether payment was made / not made, amount, variable symbol and other accounting data)
• We do not see or store payment card numbers – these data are processed by the payment gateway provider GoPay.

b) Communication and contact forms

• Data that you provide to us by e-mail, phone or via the website (name, contact details, message content).

c) Camera system in the parking lot

• Image recordings of persons and vehicles in the parking lot and its immediate surroundings, including license plates.

d) Marketing via newsletter

• E-mail and name (if you subscribe to the newsletter or marketing communication).
• Information on whether you are our customer (whether you have already parked with us).

e) Website data, cookies and analytics

• IP address, device and browser type, approximate location, browser language, website movement, clicks and interactions (e.g. Google Analytics 4, Google Ads, Meta (Facebook/Instagram), Microsoft Clarity and similar).
• Information about which campaigns you clicked on and whether you completed a reservation.

3. For what purpose and on what legal basis we process personal data

a) Parking reservation and provision of services

• Purpose: creation and management of reservations, enabling entry to and exit from the parking lot, communication, handling complaints.
• Legal basis:
  • performance of a contract (Art. 6(1)(b) GDPR – reservation and parking),
  • compliance with legal obligations (accounting, taxes – Art. 6(1)(c) GDPR).

b) Operation of the parking system and barrier

• Purpose: technical connection of the reservation with the barrier system, control of authorized entry, recording of entries and exits.
• Legal basis:
  • performance of a contract,
  • the legitimate interest of the controller in the proper operation of the parking lot and the protection of property (Art. 6(1)(f) GDPR).

c) Camera system

• Purpose: protection of property, safety of persons, handling damage, insurance events and incidents.
• Legal basis: the legitimate interest of the controller (Art. 6(1)(f) GDPR).

d) Communication and handling requests

• Purpose: answering questions, handling complaints or requests.
• Legal basis: legitimate interest (effective communication with customers) and/or performance of contractual obligations.

e) Marketing, newsletter and direct communication with customers

• Purpose: sending information about operational changes, news, discounts and promotions of Avokado Parking.
• Legal basis:
  • consent – if you subscribe to the newsletter (Art. 6(1)(a) GDPR),
  • legitimate interest – marketing toward existing customers (Art. 6(1)(f) GDPR); you may unsubscribe from marketing at any time.

f) Web analytics and online advertising

• Purpose: visitor statistics, measuring campaign performance, improving the website, targeting advertising (Google Ads, Meta, GA4, Clarity and others).
• Legal basis: consent given through the cookie banner (analytical and marketing cookies) and necessary technical cookies based on legitimate interest.

4. To whom your data may be disclosed

We disclose your personal data only to the extent necessary and subject to contractual and technical safeguards. Typical recipients are:

• ParkFlow – provider of the online reservation system; processes reservation data (name, contact details, reservation details).
• CrossPark – provider of the barrier system and parking technology; processes data necessary for entry/exit and parking records.
• GoPay – payment gateway provider; processes payment data (payment authorization; we do not store or see card numbers).
• Hosting and IT service providers.
• Accounting company and tax advisors.
• E-mailing / newsletter provider (e.g. Mailchimp, Klaviyo or a similar tool).
• Providers of analytics and advertising services: Google, Meta Platforms (Facebook/Instagram), Microsoft (Clarity), and possibly other comparable partners.
• Insurance companies, legal representatives, debt collection agencies – when exercising or defending legal claims.
• Public authorities (police, courts, the Data Protection Office) – if required by law.

Recipients may be located outside the EU/EEA (e.g. Google, Meta, Mailchimp). In such cases, we ensure the transfer of personal data in accordance with GDPR (e.g. by using standard contractual clauses).

5. How long we retain your data

We retain personal data only for as long as necessary for the given purpose or for the period required by law:

• Reservation and invoicing data: usually 10 years from the end of the period in which the service was provided (in accordance with accounting and tax regulations).
• Customer communication: usually up to 3 years after completion, unless legal claims are being exercised or a dispute is ongoing.
• Camera recordings: usually 7–30 days; in the event of an incident, they may be excluded from deletion and retained longer during case handling.
• Marketing newsletter:
  • on the basis of consent – until consent is withdrawn, at the latest after 5 years from the last activity,
  • for direct marketing based on legitimate interest – until unsubscribed or until a reasonable period expires (usually up to 5 years from the last reservation).
• Data from analytical tools: according to the settings of the specific tool (typically 14–26 months in Google Analytics and similar tools).

6. Camera system

The Avokado Parking parking lot at Ivanská cesta 28, 821 04 Bratislava is monitored by a camera system:

• Purpose: protection of property, safety of persons, prevention and documentation of damage and incidents.
• Legal basis: the legitimate interest of the controller.
• Scope: image recordings in the parking lot and its immediate surroundings, including vehicles and license plates.
• Retention period: usually 7–30 days; longer only in the event of handling damage, an insurance event or another incident.
• Information about the monitoring is displayed at the entrance to the parking lot.

7. Your rights as a data subject

In connection with the processing of personal data, you have the following rights:

• Right of access – you may obtain confirmation as to whether we process your personal data and, if so, obtain a copy and information about the processing.
• Right to rectification – if the data are inaccurate or incomplete, you have the right to request correction or completion.
• Right to erasure (“right to be forgotten”) – under certain conditions, you may request the deletion of your data.
• Right to restriction of processing – in certain situations, you may request that we retain the data and temporarily refrain from processing them.
• Right to data portability – for data processed on the basis of consent or a contract, you may request their transfer (if technically feasible).
• Right to object – especially against processing based on legitimate interest and against direct marketing.
• Right to withdraw consent – if we process data on the basis of consent, you may withdraw it at any time.
• Right to lodge a complaint with a supervisory authority.

Supervisory authority:

• Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27
• Website: www.dataprotection.gov.sk

You may exercise your rights by e-mail at rezervacia@avokadoparking.sk or by post to the controller’s address.

8. Security of personal data

We apply appropriate technical and organizational measures to protect personal data, in particular:

• encrypted website connection (HTTPS),
• access rights only for authorized persons,
• contractual safeguards with processors (ParkFlow, CrossPark, GoPay, IT suppliers, etc.),
• regular system updates and access control.

9. Cookies, analytics and online advertising

On the website https://avokadoparking.sk/, we use cookies and similar technologies:

• Necessary cookies – required for the functioning of the website and reservations.
• Analytical cookies – used to measure traffic and user behavior (e.g. Google Analytics 4, Microsoft Clarity).
• Marketing cookies – used for ad personalization and campaign measurement (e.g. Google Ads, Meta Pixel).

The use of analytical and marketing cookies depends on your settings in the cookie banner. You may delete or block cookies at any time in your browser.

10. Final provisions

• This information on the processing of personal data applies to Avokado Parking services provided through the website https://avokadoparking.sk/ and related systems (ParkFlow, CrossPark).
• The current version is always published at: https://avokadoparking.sk/privacy-policy (or another relevant subpage).
• This version is valid from: 12 January 2026.