Privacy policy

The controller of personal data is RESSE s. r. o., Company ID (IČO) 55 720 510, with its registered office at Zemianske Podhradie 51, 913 07 Zemianske Podhradie, Slovak Republic. Please send questions and requests concerning personal data to golava@golava.eu.

This policy applies to the website golava.eu, the portal platform.golava.eu and the login service auth.golava.eu.

We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data. We collect only what we genuinely need to provide the service.

Overview of the data, purposes, legal bases and retention periods:

We need the account data to conclude and perform the contract. Without it, we cannot create an account for you.

We do not sell your data. For advertising we use only Google Ads advertising cookies, and only with your consent. We do not carry out automated decision-making or profiling that would produce legal effects concerning you. The predictions concern matches, not you.

We do not give your name or e-mail address to the partner whose code you redeemed; the partner receives only the aggregated data needed to calculate the commission.

We keep database backups for 14 days. Deleted data therefore disappears from the backups no later than 14 days after deletion.

We run the service on our own servers in Slovakia and in the EU: two sites and a load balancer in a data centre in the EU. The data centre operator provides us with premises and connectivity; it does not work with your data.

Processors that process data on our behalf, and other recipients:

• Microsoft (Microsoft 365) – sending verification and service e-mails. Should data be transferred outside the EU, the transfer is protected by the European Commission’s standard contractual clauses or, where applicable, by the EU-U.S. Data Privacy Framework.
• Stripe Payments Europe, Ltd. (Ireland) – processing of payments, subscriptions and invoices. For payments and fraud prevention, Stripe is also an independent controller under its own privacy policy (stripe.com/privacy). The transfer of data to the USA is protected by the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Google Ireland Limited (Ireland) – Google Ads advertising cookies, only with your consent. For these, Google is also an independent controller under its own privacy policy (policies.google.com/privacy). The transfer of data to the USA is protected by the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Public authorities – only where the law requires us to.

We obtain sports data from the API-Sports service. We do not send it any of your personal data.

We always use strictly necessary cookies, without which login and language selection would not work. Under the Slovak Electronic Communications Act we do not need your consent for them.

We use Google Ads advertising cookies only if you consent to them in the banner on the page. With them we measure whether our Google ads work (for example, whether a sign-up followed a click on an ad), and Google can show you Golava ads on other websites. Without consent the Google code is not loaded at all. You can withdraw or change your consent at any time via “Cookie settings” in the page footer or in My account; withdrawal does not affect processing before it. We do not use analytics cookies or other tracking tools.

Cookies we use:

The portal uses browser storage (localStorage) to remember your recent searches and whether you have collapsed the filter panel. This data stays only in your browser and we do not send it to the server. You can delete it by clearing the site data in your browser.

The Stripe payment page and customer portal use their own cookies in accordance with Stripe’s policy.

You can block or delete cookies in your browser. Without them, however, you cannot log in to the portal.

Under the GDPR, you have the right:

• to access your data and obtain a copy of it,
• to rectification of inaccurate data,
• to erasure of data (the “right to be forgotten”),
• to restriction of processing,
• to portability of the data you have provided to us,
• to object to processing based on legitimate interest,
• to lodge a complaint with a supervisory authority.

Send your request to golava@golava.eu, ideally from the e-mail address linked to your account. We will reply without undue delay and within one month at the latest; in complex cases we may extend this period by a further two months, in which case we will inform you. Handling your request is free of charge.

You can close your account yourself in My account → Delete account, or write to us. If you have a paid subscription, we keep the account until the end of the paid period and then delete it. We delete the data, except for data we are required to retain by law.

You may lodge a complaint with Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27 (dataprotection.gov.sk (opens in a new window)), or with the supervisory authority in the EU state where you live or work.

We protect data with technical and organisational measures: encrypted connections (HTTPS), passwords stored only as hashes, an encrypted session cookie and server access restricted to authorised persons.

If a personal data breach occurred that would pose a high risk to you, we would inform you without undue delay.

The service is only for persons over 18 years of age. If we find that an account belongs to a younger person, we will close it and delete the data.

If the way we work with data changes, we will update this policy. We will inform you of material changes by e-mail in advance.

This policy is valid from 19 October 2026. The rules for subscriptions are described in the Terms and conditions.