Privacy Policy (GDPR)

These Privacy Policy explain how Soul Balance Resort processes and protects the personal data of visitors to the website https://www.soulbalance.sk in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data Controller
Soul Balance Resort
Habaraduwa, Sri Lanka
Email: info@soulbalance.sk
Phone: +94 903 224 315
Website: https://www.soulbalance.sk

2. Personal Data We Process
We process only the data you provide voluntarily, primarily through:

  • Contact forms

  • Email communication

  • Reservations of stays / retreats

  • Cookies (see separate Cookie Policy)

Specifically, this includes:

  • Name and surname

  • Email address

  • Phone number

  • Message content

  • Technical data (IP address, device type, browser – anonymized)

3. Purpose of Personal Data Processing
We process your personal data for the following purposes:

  • Responding to inquiries and messages

  • Communication regarding stays, retreats, and services

  • Processing reservations

  • Fulfilling legal obligations

  • Ensuring proper functioning of the website

  • Marketing communication (only with consent)

4. Legal Basis for Processing
We process personal data based on:

  • Consent of the data subject

  • Performance of a contract or pre-contractual obligations

  • Legitimate interest of the controller

  • Compliance with legal obligations

5. Data Retention Period
Personal data are stored only for as long as necessary to fulfill the purpose for which they were collected:

  • Contact details: up to 3 years

  • Reservation-related data: according to legal retention periods

  • Marketing data: until consent is withdrawn

6. Recipients of Personal Data
Personal data may be shared with the following categories of recipients:

  • Web hosting and IT service providers

  • Analytics and mapping service providers (e.g., Google)

  • Accountants, legal advisors (if necessary)

We do not sell data to third parties.

7. Transfer of Data to Third Countries
As the controller is based outside the EU (Sri Lanka), personal data may be transferred outside the EU. Such transfers are protected by appropriate safeguards in accordance with GDPR.

8. Your Rights
You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Erasure (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

You can exercise your rights by emailing: info@soulbalance.sk

9. Complaint to Supervisory Authority
If you believe your personal data are being processed in violation of legal regulations, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
https://www.dataprotection.gov.sk

10. Data Security
We have implemented appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.

11. Final Provisions
These Privacy Policy are effective as of December 14, 2025. We reserve the right to update them in case of changes in legislation or the way personal data are processed.