Skip to content
TRAINLODYTravel In Melody

Privacy policy

Effective from: 26. 10. 2026. Version 1.0.

Who processes your data

The controller and website operator is Senja s.r.o.. Current identification details appear in the Operator section. For privacy questions, write to .

What we process and why

Browsing the site

The site needs some essential cookies and browser storage to work (sign-in, language, form protection, your cookie choice). The full list is on the Cookies page. Legal basis: our legitimate interest in running a working, secure site (Art. 6(1)(f) GDPR).

When you save your cookie choice, we record what you chose and when. The IP address and browser details in that record are stored only as a hash (a one-way encoded value). The record is our proof of consent (Art. 6(1)(c) and Art. 7(1) GDPR).

Visitor statistics

We count visits on our own server without cookies. We store only totals, such as page views or clicks on partner banners. We do not store IP addresses or browser details; the visitor's country is derived from the IP address in server memory only. Legal basis: legitimate interest in improving the site (Art. 6(1)(f) GDPR).

Your location

We use your location only when you press the location button in search or use the “I'm on the train” feature, and allow it in your browser. We use it to find the nearest station or recognise your train, process it in server memory only and do not store it. Legal basis: providing a feature you asked for (Art. 6(1)(f) GDPR). You can withdraw the browser permission at any time in your browser settings.

Account and My trips

If you create an account, we process your e-mail address (used to sign in) and what you save: trips, legs, trains and uploaded photos. An e-mail address is required to create an account. You must be at least 16 to create one. Legal basis: performance of the contract under our terms of use (Art. 6(1)(b) GDPR).

We store photos together with their original EXIF metadata. This can include the exact place the photo was taken (GPS), the time and the device type. If you do not want us to store the location, remove it from the photo before uploading (most phones offer this when sharing or in the camera settings).

Events submitted by organisers

If you submit an event as an organiser, we process the form data (for example name, e-mail and event contact) and the event content. Anything that is part of a published event will be public. We prepare event texts with the help of artificial intelligence (see This site is made in cooperation between people and artificial intelligence). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Content reports and messages

If you report content or write to us, we process your name, e-mail and message so we can deal with it. Legal basis: for reports, our obligation under the Digital Services Act (Art. 6(1)(c) GDPR); otherwise our legitimate interest in replying (Art. 6(1)(f) GDPR).

Google services – only with your consent

  • Google Analytics 4 – if enabled on the site, it helps us measure traffic. It loads only after you consent to analytics cookies. Google then processes data about your device and how you use the site.
  • Google Maps on event pages – until you consent, we show our own static preview and nothing is sent to Google. After consent, the map loads from Google's servers, so Google receives your IP address and may use its own cookies.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings” in the site footer.

Who receives your data

  • our hosting provider, whose servers run the site,
  • our e-mail delivery provider (for example sign-in e-mails),
  • AI service providers acting as processors (when preparing event texts),
  • Google (analytics and maps) – only with your consent,
  • public authorities where the law requires it.

Processors handle data only on our instructions under a contract. We do not sell your data.

Transfers outside the EU

Some providers, Google in particular, may process data outside the European Economic Area. Such transfers rely on a European Commission adequacy decision or on standard contractual clauses.

How long we keep data

  • account, trips and photos: until you close your account, then deleted within [to be completed],
  • cookie consent record: [to be completed],
  • organiser events and related contacts: while published, then [to be completed],
  • content reports and correspondence: [to be completed],
  • location: not kept.

Your rights

You have the right to access, correct and erase your data, to restrict processing and to data portability. You may object to processing based on legitimate interest. You can withdraw consent at any time; this does not affect processing before the withdrawal. Just write to .

If you believe we handle your data unlawfully, you can lodge a complaint with the data protection authority in the EU/EEA country where you live, work or where the alleged infringement took place, or with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk), which supervises us.

Automated decisions

We do not make decisions about you based solely on automated processing that have legal effects or similarly significant effects on you.

Changes

If we change this policy, we will publish the new version on this page with its effective date.

Operator

Name
Senja s.r.o.
Legal form
s.r.o.
Registered office
Veľká okružná 17, 010 01 Žilina, SK
company no.
56626789
tax
2122364134
Register entry
Obchodný register Okresného súdu Žilina, oddiel Sro, vložka č. 86232/L
E-mail
Phone