PRIVACY POLICY

Last Updated: June 8, 2026

At BHM parks, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, how long we retain it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Personal Data We Collect

When you contact us through our website contact form, we may collect the following information:

• Full name
• Email address
• Company name
• Phone number
• Subject of your inquiry
• Message content and any information you voluntarily provide

2. Purpose and Legal Basis of Processing

We process your personal data solely for the purpose of responding to your inquiry, communicating with you, and providing information about our services and projects.

The legal basis for processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR, namely the management of communications with prospective business partners, customers, and visitors to our website.

3. Analytics, Marketing, and Consent Management (Cookies)

Our website uses cookies and similar tracking technologies to analyze traffic, improve user experience, and deliver personalized advertisements through Google Analytics 4 (GA4), Google Tag Manager, and Google Ads. The legal basis for processing this tracking data is your explicit, active consent pursuant to Article 6(1)(a) of the GDPR. We do not load any analytics or marketing cookies unless you voluntarily grant consent via our cookie banner.

Consent to the Use of Cookies (CookieFirst)

To obtain your valid consent for the use and storage of cookies in your browser and to properly document this, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. The legal basis for running this consent technology is Article 6(1)(c) of the GDPR (compliance with a legal obligation).

Data Processing Agreement

We have concluded a formal Data Processing Agreement (DPA) with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in strict compliance with the GDPR.

Server Log Files

Our website and CookieFirst automatically collect and store information in server log files, which your browser automatically transmits. The following data is processed:

• Your consent status or the withdrawal of consent
• Your anonymised IP address
• Information about your browser and device
• The date and time you visited our website
• The webpage URL where you saved or updated your consent preferences
• The approximate location of the user who saved their consent preference
• A universally unique identifier (UUID) of the website visitor who clicked the cookie banner

You have the right to withdraw or modify your consent at any time. To manage your tracking choices or view our complete, real-time list of active cookies and their expiration periods, please refer to the interactive CookieFirst widget below or click "Cookie Settings" in our website footer.

4. Google reCAPTCHA

To protect our contact forms against spam, abuse, and automated submissions, we use Google reCAPTCHA v3.

reCAPTCHA analyzes various information to determine whether a visitor is a human user. This may include IP address, browser information, device information, mouse movements, page interactions, and other technical data.

The use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service:

• Google Privacy Policy
• Google Terms of Service

5. Data Retention

Personal data submitted through our contact form is retained only for as long as necessary to handle your inquiry and maintain related business communications.

Unless a business relationship is established or a longer retention period is required by law, inquiry-related data is generally retained for up to three (3) years following the last communication and then securely deleted.

6. Your Rights Under GDPR

Under the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interest
• Request data portability where applicable
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at: bhmparks@bhmgroup.eu

We will respond to valid requests within the time limits required by applicable law.

7. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovakia
https://dataprotection.gov.sk

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

Communications between your device and our website are protected using SSL/TLS encryption, and access to personal data is limited to authorized personnel only.