GDPR Privacy Policy

This privacy notice describes how Airsoft Field Jablonove processes personal data through this website, our on-site services, the Jablonove Staff mobile application, and the Jablonove Airsoft player application in accordance with the EU General Data Protection Regulation (GDPR).


Controller and contact

Airsoft Field Jablonove is the data controller for this website, the Jablonove Staff mobile application, the Jablonove Airsoft player application, and our on-site services in Slovakia. For any privacy questions or to exercise your rights, contact us at [email protected].


What data we process

  • Identification and contact details (name, username, email, phone) collected through event registrations, rentals, contact forms, user accounts, and mobile app sign-in.
  • Event, rental, and credit details (selected event, package, faction or team, messages including additional players and their age, credit balance, one-time credit codes, and credit transaction history).
  • Account and authentication data (login credentials, language and session identifiers) and security logs (attempt metadata such as IP address, timestamps, and user agent).
  • Technical data and cookies (server logs, device/browser information, session cookies, language preferences) needed to run the site securely.
  • Media and content you provide (uploaded photos or files, and derived thumbnails).

Why and legal bases

  • To provide our services (events, rentals, ticket and credit management, website accounts) and communicate about them - processing is necessary for a contract or to take steps at your request before entering a contract.
  • To send operational messages such as confirmations, payment instructions, and security notices - contract necessity and our legitimate interest in running the service safely.
  • To protect the service from abuse (login protection, bot protection) and to maintain infrastructure - our legitimate interest in security and service continuity.
  • To meet legal duties such as accounting or audit and to establish or defend legal claims - legal obligation or legitimate interest.
  • We do not use your data for third-party marketing or profiling and we limit processing to what is necessary for the services you request.

Systems and third parties we use

  • Hosting and backup providers that operate our servers, databases, and email delivery.
  • Systems for authentication and account recovery, for login protection and for multilingual content.
  • Google reCAPTCHA (Google Ireland Ltd.) to block automated abuse; Google may receive device, network, and interaction data to provide this protection.
  • Google Fonts CDN and YouTube-nocookie video embeds; loading these services sends your IP address and device data to Google.
  • Facebook and Instagram links and embedded images from our pages; when you click or view social content their own privacy policies apply.

Data recipients and transfers

  • Authorized team members managing events, rentals, ticket credits, and customer support.
  • Service providers (hosting, email, thumbnail processing, payment and banking partners) under contractual confidentiality and data protection terms.
  • Google Ireland Ltd. for reCAPTCHA, Fonts, and YouTube; where data leaves the EEA, Google relies on EU Standard Contractual Clauses and related safeguards.
  • We do not sell personal data and share it only when necessary for the purposes above or when required by law.

Retention

  • Accounts, tickets or credits, rentals, and event records are kept for the duration of our relationship and for limitation or recordkeeping periods (usually up to three years after the last interaction, longer if law requires).
  • Contact messages and general inquiries are retained until resolved and for a short audit period afterward.
  • Security logs and server logs are kept for a limited rolling window to monitor abuse and system integrity.
  • Media uploads are stored until you request deletion or we remove them because they are no longer needed.

Cookies and similar technologies

  • Essential cookies such as sessionid, language, and authentication cookies keep you logged in, secure requests, and remember your language choice.
  • reCAPTCHA cookies or tokens help us filter automated traffic and are strictly necessary for security.
  • We do not use advertising or analytics cookies.

Your GDPR rights

  • Access, rectification, and deletion of your personal data.
  • Restriction or objection to processing where applicable, and the right to data portability for data you provided to us.
  • The right to withdraw consent at any time where processing is based on consent.
  • The right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.

How to exercise your rights

  • Send your request to [email protected]. To protect your data, we may ask you to verify your identity before acting on your request.

  • Request deletion of your Jablonove Airsoft player account and associated data

  • Verified account-deletion requests are completed within 30 days. Restricted disaster-recovery backups may retain residual copies for no more than 30 additional days.

  • Upcoming registrations and rentals are deleted. Past operational booking rows are de-identified: direct identity, free-text messages, ages, account links, and old payment variable symbols are removed, while applicable event, package, quantity, status, faction, language, and date facts may remain. These rows are not used to recreate the deleted account.

  • You can also contact the Office for Personal Data Protection of the Slovak Republic (Urad na ochranu osobnych udajov SR), Hranicna 12, 820 07 Bratislava 27, www.dataprotection.gov.sk, email: [email protected].


Jablonove Airsoft player application

  • The player application is available to players with website accounts. Players sign in with an email address and password over an encrypted HTTPS connection. The password is not stored by the application; access and refresh tokens are stored in the device's secure credential storage.
  • If a player enables biometric login, the application uses the device operating system to protect stored credentials. Biometric templates remain under the control of the device operating system and are not received or stored by Airsoft Field Jablonove.
  • The application displays active event information, the player's rental bookings, credit balance, variable symbol, credit transaction history, and generated one-time credit codes or QR codes used for credit operations.
  • The application can update the player's language preference. It does not request camera, microphone, photo library, contacts, or precise location access.
  • The player application does not contain advertising or third-party analytics, does not sell personal data, and does not use personal data for profiling or third-party marketing.

Jablonove Staff mobile application

  • The application is a restricted operational tool for authorized staff. Staff accounts are provisioned by an administrator; the application does not offer public account registration.
  • Staff sign in with an email address and password over an encrypted HTTPS connection. The password is not stored by the application; access and refresh tokens are stored in the device's secure credential storage.
  • If a staff member enables biometric login, the application uses the device operating system to protect stored credentials. Biometric templates remain under the control of the device operating system and are not received or stored by Airsoft Field Jablonove.
  • The application accesses active event details and processes QR or manually entered ticket codes, player identification and contact details returned for a scan, credit balances, and records of scans or credit changes. These records are used only to operate events, validate admission, manage credits, prevent misuse, and maintain an audit trail.
  • Camera access is requested only when a staff member uses QR scanning. Camera frames are processed on the device to read a code; the application does not record, upload, or store photos, video, or audio.
  • The application does not contain advertising or third-party analytics, does not sell personal data, and does not use personal data for profiling or third-party marketing.

Last updated: July 11, 2026.