Consent for processing of personal data
OpenResi processes your personal data in accordance with the GDPR (EU Regulation 2016/679) and Act No. 18/2018 Z. z. on personal data protection.
To use OpenResi, you must grant one mandatory consent and you may optionally grant one optional consent.
Two types of consent
1. Consent for data processing (mandatory)
| Property | Value |
|---|---|
| Code | data_processing |
| Slovak label | "Spracovanie osobných údajov" |
| Mandatory? | Yes — without it you cannot use OpenResi |
What data is processed:
- First name and surname
- Email address
- Phone number (if you entered one)
- Ownership share of the unit
- Voting records and minutes
- In-app communication (announcements, comments, RSVP)
Purpose of processing: Managing HOA records in accordance with Act No. 182/1993 Z. z. on ownership of flats and non-residential premises — voting, maintaining the list of owners, minutes, billing.
Legal basis:
- Fulfilling the HOA's legal obligation (Art. 6(1)(c) GDPR)
- Performing contractual obligations between the HOA and the owners (Art. 6(1)(b) GDPR)
2. Consent for communication (optional)
| Property | Value |
|---|---|
| Code | communication |
| Slovak label | "Operatívna e-mailová komunikácia" |
| Mandatory? | No — you may withdraw at any time |
What messages it covers:
- Non-binding news and tips about using OpenResi
- Information about new features in the app
- Invitations to training sessions for chairmen
It does not cover transactional emails (vote confirmation, activation invitation, password reset) — those are independent of this consent.
How do I see the current state of my consents
In your profile (the "Consents" section) you can see:
- The state of each consent — granted / not granted
- The date it was granted
- The version of the privacy policy you agreed to
- A link to the "Privacy policy" in full
How do I grant a consent
At first sign-in you must grant the data_processing consent — otherwise you cannot enter the application. You may skip the optional communication consent and grant it later in your profile.
In your profile:
- Open the "Consents" section
- Next to the relevant consent, click "Grant consent"
- OpenResi records:
- Your IP address
- User-Agent (browser type)
- Timestamp
- Policy version
This record serves as an audit log in case of inspection by the Office for Personal Data Protection.
How do I withdraw a consent
In your profile, next to the relevant consent click "Withdraw consent". OpenResi will display a confirmation dialog warning you what will happen.
Consequences of withdrawal
| Consent | What happens |
|---|---|
data_processing | Your account will be deactivated and you will be signed out. You will not be able to sign in until you grant the consent again. The data is not erased — it is retained for the period required by law (typically 10 years for minutes). |
communication | You will stop receiving operational emails. Your account remains active, all OpenResi features keep working. Transactional emails (voting, …) continue to be delivered. |
Withdrawing consent is not the same as a request to erase data. After withdrawal, your data is archived — in particular voting records and minutes must be retained by law.
If you are requesting full erasure, see the "GDPR requests" section below.
Your rights under the GDPR
As a data subject, you have the following rights under the GDPR:
| Right | What you can request |
|---|---|
| Access | A copy of all personal data that OpenResi processes about you |
| Rectification | Correction of inaccurate or out-of-date data |
| Erasure | Erasure of data (with restrictions for records retained by law) |
| Restriction of processing | Pausing of processing while a dispute is being resolved |
| Portability | Data in a format you can transfer elsewhere |
| Objection | Raising an objection against the processing |
| Withdrawal of consent | Withdraw a granted consent at any time (described above) |
GDPR requests
To exercise any of these rights:
- Send an email to
support@open-resi.appwith the subject "GDPR request" - Specify which right you are exercising
- OpenResi will process the request within 30 days at the latest
If you disagree with the response, you have the right to address the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).
Who is the controller and who is the processor
| Role | Entity |
|---|---|
| Data controller | The HOA (Spoločenstvo vlastníkov bytov) in which you are an owner — has primary legal responsibility for the processing of data in the building |
| Data processor | OpenResi — provides the technical solution and processes data on behalf of the HOA |
In practice: the first point of contact for questions is the HOA chairman, who decides how data in the building is processed. OpenResi is the technical partner.
Privacy policy
The full text of the policy is available at:
https://open-resi.app/privacy-policy
When the policy is updated, you will be asked in the application to grant a new consent for the new version.