Processing of personal data in accordance with the Regulation of the European Parliament and the Council of the EU
pursuant to Articles 13 to 22 of Regulation (EU) No 182/2011 of the European Parliament and of the Council 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “General Data Protection Regulation” or the “GDPR – General Data Protection Regulation”) and the provisions of § 19 et seq. Act no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).
According to Article 13 of the General Data Protection Regulation, resp. provisions of § 19 of the Personal Data Protection Act, the operator of the website: https://holidayinn-zilina.sk/ (hereinafter also the “operator”) is obliged in cases where they obtain personal data concerning the data subject, which he provides to the data subject. the following information:
I. Contact details of the operator
Name: HI Kongres Hotel Trnava s.r.o.
Address: Športová 2, 010 01 Žilina
ID: 47 504 714
VAT number: 2023916499
VAT number: SK2023916499
Contact: info@holidayinn-trnava.sk
Contact person regarding GDPR: zo@eurotrading.sk
“We hereby inform you that the supervision of the processing of personal data in our company is provided by the company EuroTRADING s.r.o., and in accordance with § 44 of Act no. 18/20128 Z.z. and Article 37 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, provides us with a responsible person which you can contact at zo@eurotrading.sk. You can read more information here: www.eurotrading.sk/zo“
II. Purpose of the processing of personal data of the data subject
The personal data of the data subject shall be processed by the operator for the following purpose:
Contacting
Sending marketing offers
Non-binding reservation of services
III. Scope of processing of personal data of the data subject
For the above purpose, the controller knowingly processes the following personal data from the data subject:
Name
Last name
E-mail address
Telephone number
Personal data which the controller unknowingly processes from the data subject:
IP address
Other processed data (reservation guarantee):
Date of arrival
Number of nights
Company (in case of a company document):
Credit Card number as a guarantee of stay
IV. Retention period of the personal data of the data subject
The personal data of the data subject shall be processed, collected, archived and securely stored for as long as is necessary for the purposes for which the personal data were processed or collected and the legal reason for their possible archiving or until the consent to the processing of personal data of the data subject expires. Upon the data subject’s request to delete the data, all personal data will be irreversibly deleted, and the related orders (if any) will be anonymised.
V. Method of obtaining, recording and securing the personal data of the data subject
We most often obtain the personal data of the person concerned directly from them, for example by filling in the contact form. In this case, the collection of personal data is voluntary and does not constitute a contractual or legal obligation. The website operator is obliged to record all user requests in connection with the download, correction and deletion of personal data of the person concerned. When securing the personal data of the data subject, the controller has modern technical and security mechanisms at its disposal, ensuring the protection of the processed personal data against unauthorized access or transfer, against their loss or destruction, or other possible misuse. The controller does not transfer or intend to transfer the personal data of the data subject to a third country or international organization.
VI. The data subject’s rights regarding the processing of his or her personal data
The General Data Protection Regulation and the Personal Data Protection Act set out the general conditions for the exercise of individual rights of the data subject. However, this does not automatically mean that the operator will be satisfied with them when exercising individual rights, as in a specific case exceptions or. some rights are subject to specific conditions, which may not be met in every case. The operator will always deal with the application for a specific law and examine it in terms of legislation and applicable exceptions.
i. With the consent of the data subject, the operator may also process other personal data of the data subject for a purpose other than that specified in point II., Resp. personal data other than those which are necessary to achieve a specific purpose within the meaning of point III. If the processing of personal data is subject to the consent of the data subject, the data subject has the right to withdraw his or her consent to the processing of personal data at any time. The data subject may or may not give the controller consent to the processing of personal data – failure to give consent has no negative impact on the data subject. Revocation of the data subject’s consent to the processing of personal data concerning him or her shall not affect the lawfulness of the processing of personal data based on consent prior to his or her withdrawal. The data subject may withdraw the consent to the processing of personal data in the same way as he or she has given his or her consent.
ii. The data subject has the right to ask the controller for information on whether his or her personal data are being processed. The data subject has the right to request access to personal data concerning the controller. On the basis of this request, the controller of the data subject shall issue a certificate with information on the processing of his personal data. The operator is obliged to provide the data subject with his personal data, which he processes. The controller may charge a reasonable fee corresponding to the administrative costs for the repeated provision of personal data requested by the data subject. The operator is obliged to provide personal data to the data subject in the manner required by him.
iii. The data subject has the right to have his or her personal data processed correct, up-to-date and complete. If the personal data of the data subject are out of date, the data subject has the right to request the operator to correct or supplement them. The data subject has the right to have the controller correct incorrect personal data concerning him without undue delay. With regard to the purpose of the processing of personal data, the data subject has the right to supplement incomplete personal data.
iv. The data subject has the right to object to the processing of his or her personal data as well as the right to request the controller to delete personal data that are being processed unlawfully beyond the purpose for which they were provided or if the data subject withdraws his or her consent.
v. The data subject has the right to object to the processing of his or her personal data carried out on the basis of the public interest or on the basis of the legitimate interests of the controller or a third party, including profiling. The controller may not further process personal data unless it demonstrates the necessary legitimate interests for the processing of personal data which prevail over the rights or interests of the data subject or the grounds for a legal claim.
vi. The data subject has the right to object to the processing of personal data concerning him or her for the purpose of direct marketing, including profiling, to the extent that it relates to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the controller may not further process personal data for direct marketing purposes.
vii. The data subject has the right not to be subject to a decision which is based solely on the automated processing of personal data, including profiling, which concerns or similarly significantly affects him or her.
viii. The data subject has the right to have the controller delete personal data concerning him without undue delay. The data subject has the right to request the controller to restrict the processing of personal data if the data subject objects to the accuracy of the personal data during the period allowing the controller to verify the accuracy of the personal data, the processing is illegal and the data subject objects to the deletion of personal data. the data subject no longer needs personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or the data subject objects to the processing of personal data on grounds of public interest or legitimate interests of the controller or a third party, until it is verified that the legitimate reasons on the part of the operator outweigh the legitimate reasons of the person concerned.
ix. If the processing of personal data is restricted in addition to the storage, the controller may process personal data only with the consent of the data subject or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The controller is obliged to inform the data subject whose personal data processing will be restricted before the restriction of personal data processing is lifted.
x. The affected person has the right to request the operator to provide his personal data in electronic form, which will allow the transfer of personal data of the person to another company, respectively. to a third party. The data subject shall have the right to obtain personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transfer such personal data to another controller if technically possible and if the personal data is processed by the controller. the person concerned or on the basis of a contractual relationship.
xi. The data subject has the right to file a personal data protection procedure, the purpose of which is to find out whether the right of natural persons has been violated in the processing of their personal data or the law on personal data protection or a special regulation has been violated, and in case of deficiencies. it is reasonable and expedient to impose remedial measures or a fine for violation of this Act or a special regulation in the field of personal data protection. The proceedings shall be initiated on the motion of the person concerned or a person who claims to be directly affected by their rights under this Act. The requirements of the proposal of the affected person or a person who claims to be directly affected by their rights established by this Act as well as the proceedings on personal data protection itself are regulated in the provisions of § 100 of Act no. 18/2018 Z.z. on the protection of personal data.
xii. The information provided by the operator on the basis of the applicable law of the data subject shall be provided free of charge. If the request of the person concerned is manifestly unfounded or disproportionate, in particular because of his recurring nature, the operator may charge a reasonable fee taking into account the administrative costs of providing the information or refuse to act on the request.
The data subject may address his or her request for the data subject’s above-mentioned rights concerning the processing of his or her personal data in writing by post or e-mail, with the controller dealing with the data subject’s request and informing the data subject of the result in the same way as an application has been made.
VII. Supervisory institution
Office for Personal Data Protection of the Slovak Republic
Hraničná 12,
820 07, Bratislava 27,
Slovak Republic
IČO: 36064220
Email: statny.dozor@pdp.gov.sk
