Last updated: 17 August 2026
These Privacy Policy explains how Barbora Cibulková, operating under the brand Charm & Chai, collects, uses and protects personal data of visitors to the website charmandchai.com, people interested in our services, and clients.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Slovak legislation.
1. Data Controller
The data controller responsible for your personal data is:
Barbora Cibulková
Business name: Barbora Cibulková
IČO: 56473915
Registered office: Hájska 650/44, 920 03 Hlohovec, Slovakia
Trade Register No.: 250-58998
Registered with: District Office Trnava
Email: barbora@charmandchai.com
Website: charmandchai.com
If you have any questions regarding the processing of your personal data or wish to exercise your rights, you can contact us at the email address above.
2. What Personal Data We Collect
The personal data we collect depends on how you use our website and services.
We may process the following categories of personal data:
Contact information
This may include:
- name and surname;
- email address;
- telephone number;
- and any other contact information you voluntarily provide.
Information provided through our travel planning form
If you request a complimentary travel plan or itinerary, we may collect information such as:
- intended travel dates;
- number of travellers;
- destinations you are interested in;
- interests and preferred travel style;
- preferred pace of travel;
- approximate travel budget;
- accommodation, transportation or experience preferences;
- and any other information you choose to provide in the form.
We use this information to prepare a complimentary indicative itinerary, practical travel plan and personalised recommendations.
Information provided during travel planning
If you decide to continue with our personalised travel planning services, we may process additional information necessary to understand your requirements and prepare your itinerary.
Information provided when booking a consultation
We use SimplyBook.me to manage online consultation bookings.
When booking a consultation, you may be asked to provide information such as your name, email address, telephone number, appointment details and other information necessary to arrange the consultation.
SimplyBook.me may process personal data on our behalf as a service provider in accordance with applicable data protection requirements.
3. How We Use Your Personal Data
We may use your personal data for the following purposes:
A. Responding to enquiries
If you contact us by email or through a contact form, we use your information to respond to your enquiry and communicate with you.
B. Preparing a complimentary travel plan
If you complete our travel planning form, we use the information you provide to prepare a complimentary indicative itinerary, practical travel plan and recommendations based on your interests and preferences.
C. Personalised travel planning
If you decide to use our personalised travel planning services, we may use your information to communicate with you, develop your itinerary, provide recommendations and coordinate the services you have requested.
D. Managing consultations
We use your information to schedule and manage consultations through SimplyBook.me.
E. Communication relating to your journey
If you are planning a journey with us, we may use your contact details and travel information to communicate with you regarding your itinerary, recommendations, arrangements and local support.
F. Newsletter and marketing communication
If you voluntarily subscribe to receive updates from Charm & Chai, we may use your email address to send you news, travel inspiration, information about our services and updates about upcoming journeys.
Your email address is processed on the basis of your consent. You may withdraw your consent at any time by contacting us at barbora@charmandchai.com
At present, Charm & Chai does not use a separate third-party newsletter marketing platform. Email addresses collected through our website are stored and managed through the systems used to operate our website.
If we introduce a third-party email marketing provider in the future, this Privacy Policy will be updated accordingly.
G. Website analytics
We use Google Analytics through MonsterInsights to understand how visitors use our website and to obtain statistical information such as website traffic and the use of different pages and sections.
Analytics cookies and similar technologies are used only where permitted by your consent through our cookie consent mechanism.
H. Website operation and security
We may process certain information where necessary to operate, maintain and secure our website and protect it against misuse, unauthorised access, fraud or other security threats.
4. Legal Bases for Processing
We process personal data on the basis of one or more legal grounds under Article 6 of the GDPR.
Performance of a contract or steps prior to entering into a contract
We may rely on this legal basis when, for example:
- you contact us regarding travel planning;
- you request a travel plan;
- you book a consultation;
- you request personalised travel planning;
- we communicate with you regarding a requested service.
Consent
We rely on your consent where required, including for:
- newsletters and marketing communication;
- analytics cookies;
- certain third-party services;
- other non-essential cookies and technologies.
You may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Legitimate interests
In certain circumstances, we may process personal data based on our legitimate interests, including:
- maintaining website security;
- preventing fraud and misuse;
- basic administration;
- protecting our legal rights and claims;
- maintaining and improving our services.
Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.
Legal obligations
We may process personal data where necessary to comply with legal obligations, including accounting, tax and other statutory requirements.
5. Who May Receive Your Personal Data
We do not sell your personal data.
Where necessary, personal data may be shared with trusted service providers who help us operate our website and provide our services.
These may include:
- our web hosting provider;
- email and technical service providers;
- WPForms, which we use for website forms;
- SimplyBook.me, which we use for consultation bookings;
- Google Analytics / Google, where analytics services are enabled with your consent;
- Google Maps, where applicable;
- CookieYes, which we use to manage cookie consent;
- technical and IT service providers;
- and other service providers where necessary to provide a service you have requested.
If, during travel planning, you request assistance with accommodation, transportation, local guides, activities or other travel services, we may share the information necessary to fulfil your specific request with the relevant service provider.
We only share information that is reasonably necessary for the relevant purpose.
6. International Transfers
Some technology and service providers we use may process personal data or use service providers located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection legislation, including the use of appropriate safeguards where required by the GDPR.
7. How Long We Keep Your Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
In general:
- information submitted through ordinary contact enquiries is retained for as long as reasonably necessary to respond to and manage the enquiry;
- information relating to travel planning and services is retained for the duration of the relationship and subsequently for as long as necessary to comply with legal obligations or protect legal claims;
- accounting and tax records are retained for the periods required by law;
- email addresses collected for marketing purposes are retained until you withdraw your consent or unsubscribe;
- analytics information is retained according to the retention settings of the relevant analytics service.
Retention periods may therefore vary depending on the nature and purpose of the information.
8. Your Rights
Under the GDPR, you may have the following rights in relation to your personal data:
- the right to access your personal data;
- the right to correct inaccurate or incomplete personal data;
- the right to request deletion of your personal data where the legal requirements are met;
- the right to request restriction of processing;
- the right to object to processing based on legitimate interests;
- the right to data portability where applicable;
- the right to withdraw consent where processing is based on consent;
- the right not to be subject to a decision based solely on automated processing, including profiling, where the applicable legal conditions are met.
9. How to Exercise Your Rights
You can exercise your rights by contacting us at:
Please describe the right you wish to exercise and provide sufficient information for us to identify your request.
We will respond to your request within the time period required by applicable data protection legislation.
10. Right to Lodge a Complaint
If you believe that your personal data is being processed unlawfully or that your rights under the GDPR have been violated, you have the right to lodge a complaint with a competent supervisory authority. In Slovakia, the supervisory authority is:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Further information is available from the authority’s official website.
11. Newsletter and Marketing Communication
If you voluntarily subscribe to receive updates from Charm & Chai, we may use your email address to send you:
- Charm & Chai news;
- travel inspiration;
- information about upcoming journeys;
- information about our services;
- travel-related content and recommendations.
Marketing communication is sent on the basis of your consent where consent is required.
You can unsubscribe at any time by using the unsubscribe option provided in the relevant communication or by contacting:
At present, we do not use a separate third-party newsletter marketing platform.
12. Contact and Travel Planning Forms
Information submitted through our contact forms and travel planning form is used to respond to your enquiry and provide the requested service.
The travel planning form may collect information relating to:
- your name and contact details;
- intended travel dates;
- number of travellers;
- destinations;
- interests;
- travel preferences;
- travel pace;
- approximate budget;
- accommodation preferences;
- transportation preferences;
- and other information relevant to planning your journey.
We do not use this information for unrelated marketing purposes unless you have separately provided the necessary consent.
If information needs to be shared with a third-party travel provider in order to fulfil your specific request, we will share only the information reasonably necessary for that purpose.
13. Google Maps
Our website may use Google Maps to display locations and geographical information.
Depending on how Google Maps is implemented on the website, using this service may involve communication with Google’s servers and the processing of certain technical information.
Where Google Maps involves non-essential cookies or similar technologies, the relevant content may be loaded only after the required consent has been provided through our cookie consent mechanism.
14. Instagram
Our website may contain links to Instagram or embedded Instagram content.
When interacting with embedded third-party content, your browser may communicate with the relevant service provider and certain technical information may be processed.
Where applicable, third-party content that involves non-essential cookies or tracking technologies may be subject to your cookie preferences.
15. Cookies
Our website uses cookies and similar technologies.
These may include:
- strictly necessary cookies required for the operation of the website;
- analytics cookies;
- cookies associated with third-party services;
- and other non-essential cookies where applicable.
Non-essential cookies are used only in accordance with your cookie preferences and applicable law.
We use CookieYes to manage cookie consent and your cookie preferences.
For detailed information about the cookies used on our website, their purposes, providers and retention periods, please see our Cookie Policy and the cookie settings available through our cookie banner.
16. Website Analytics
We use Google Analytics through MonsterInsights to understand how visitors use our website.
Analytics may provide us with information such as:
- number of visitors;
- pages viewed;
- approximate interaction with the website;
- traffic sources;
- technical information about visits;
- and other aggregated or statistical information.
Analytics cookies are non-essential and are used only where permitted by your consent.
Google may process information in accordance with its own privacy policies and terms.
17. Website Security
We take reasonable technical and organisational measures to protect personal data against:
- unauthorised access;
- loss;
- destruction;
- alteration;
- unauthorised disclosure;
- and other forms of unlawful processing.
However, no method of transmission or storage over the internet can be guaranteed to be completely secure.
18. Automated Decision-Making and Profiling
We do not use your personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
19. Children’s Data
Our website and services are not intended to knowingly collect personal data from children without appropriate involvement or consent of a parent or legal guardian where required by law.
If we become aware that we have inadvertently collected personal data from a child without an appropriate legal basis, we will take reasonable steps to delete that information.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example when:
- our services change;
- we introduce new technologies;
- we introduce new third-party service providers;
- or applicable legal requirements change.
The latest version will always be published on this page together with the date of the latest update.
21. Contact
If you have any questions about this Privacy Policy or the way we process personal data, please contact us:
Barbora Cibulková
Charm & Chai
IČO: 56473915
Trade Register No.: 250-58998
Registered with: District Office Trnava
Hájska 650/44
920 03 Hlohovec
Slovak Republic
Email: barbora@charmandchai.com
Website: charmandchai.com
Last updated: 17 August 2026