This page explains what personal data we process in connection with the Rochus Mine (Baňa Rochus) and this website, why, for how long and what your rights are. We follow Regulation (EU) 2016/679 (GDPR) and the Slovak Act No. 18/2018 Coll. on personal data protection. In case of doubt, the Slovak version prevails.
1. Controller
BBF elektro s.r.o., Radlinského 17/B, Spišská Nová Ves, Slovakia, company ID (IČO) 36 177 245.
Contact for personal data matters: banarochus@banarochus.sk.
We have not appointed a data protection officer, as it is not required for our activities.
2. What data we process and why
Tour bookings (e-mail to rezervacia@banarochus.sk): name, e-mail, phone if provided, name of the group, school or organisation, number of people, date and the content of your message. We need them to arrange the tour - legal basis: performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR). Invoice data is processed to meet legal obligations (Art. 6(1)(c) GDPR).
Questions, media and cooperation (e-mail to banarochus@banarochus.sk): the data you send us, so that we can reply - legitimate interest in communicating with the public (Art. 6(1)(f) GDPR).
Historical photos, documents and objects you donate or lend to us: your contact details and, where applicable, data about people in the photos or documents. We use them to preserve mining history, in exhibitions, information materials and on the website. We credit the donor or author by name only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Photos and videos from tours and events: we may take photos at events and publish them on the website and social media (legitimate interest, Art. 6(1)(f) GDPR). If you do not want to appear in them, tell the guide or write to us and we will remove the photo. Portraits and pictures of children are published only with consent.
Visiting the website: the hosting server automatically logs technical data (IP address, time of access, visited address, browser type) for security and operation of the website (legitimate interest). We do not use them to track visitors.
3. Cookies and browser storage
The website does not use analytics, advertising or tracking cookies, so no cookie consent is needed. We only store technical data in your browser for convenience, which never leaves your device:
- whether you have seen the intro animation, which announcements you have read and whether you closed the announcement bar,
- the
googtranscookie - only if you choose the English version (see below), - WordPress login cookies - for website administrators only.
4. Who receives the data
- our web hosting and e-mail provider (processor within the EU),
- Google - only if you click the EN switch: the page text and your IP address are sent to Google Translate for machine translation. Until you choose EN, the website sends nothing to Google. Google may process data in the USA under the EU-US Data Privacy Framework,
- YouTube - only if an article contains an embedded video and you play it,
- our accountant and public authorities - where required by law.
Links to Facebook and Instagram are plain links - the website contains no tracking code from them. We do not sell personal data or use it for advertising.
5. How long we keep data
- bookings and e-mail communication: while being handled and at most 3 years after the last contact,
- invoices and accounting records: 10 years (Slovak Accounting Act No. 431/2002 Coll.),
- data on donated materials: while we use the material or until you withdraw consent,
- event photos: while we consider them current, or until you object,
- hosting logs: short-term, according to the provider's settings.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interest (Art. 21) and to withdraw consent at any time. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
To exercise your rights, write to banarochus@banarochus.sk. We will reply within one month.
7. Children
School and group tours are arranged with their organisers (teachers, group leaders). We do not need or request personal data of children for bookings.
8. Changes
We may update this policy, for example when new services are added. The current version is always available on this page.
Effective from 20 októbra 2026.