GDPR

1. These Terms and Conditions of Personal Data Processing (the “Terms”) apply to your personal data and privacy. Please pay due attention to them.

BASIC INFORMATION

2. The Terms and Conditions clearly contain the principles and rules of processing personal data of users of the company’s services Iveta Slebodová , with registered office at Ždiar 209, 059 55 Ždiar, 46661701 (hereinafter referred to as the “Operator”) provided through the Website penzionenrico.sk/en/ (hereinafter referred to as “services”).

3. The controller shall comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 when processing the personal data of service users. April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter “the Regulation”), Act no. 18/2018 Coll. on the Protection of Personal Data and on the Amendment of Certain Acts (hereinafter referred to as the “Act”) and other related generally binding legal regulations.

4. Personal data means, in accordance with the relevant provisions of the Regulation and the law, any data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, in particular by a generally applicable identifier, other identifier such as first name, surname, identification number, location data, or an online identifier, or based on one or more of the characteristics or traits that make up its physical identity, physiological identity, genetic identity, mental identity, mental identity, economic identity, cultural identity, or social identity.

5. The person concerned within the meaning of the regulation and the law, t. j. The natural person whose personal data is processed is every user of the Operator’s services, including you.

6. The operator in accordance with the regulation and the law is the company Iveta Slebodová ., which has defined the purpose and means of processing your personal data and processes them in its own name.

7. These Terms and Conditions of Personal Data Processing shall enter into force on 1. July 2021 and are considered to be the fulfillment of the information obligation of the Operator in relation to the persons concerned within the meaning of Art. 13 of the Regulation and § 19 of the Act.

WHAT IS THE LEGAL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA?

8. Active confirmation of consent with Terms & Conditions (by clicking on the appropriate box) and then sending a registration or otherwise marked request for the delivery or availability of a specific service:
a) you freely give the Operator consent to the processing of your personal data for the purposes specified in the Conditions in accordance with the regulation and the law,
b) you confirm that the personal data you have filled in are correct and up-to-date,
c) at the same time you confirm that if you are under 16 years of age, your legal guardian (eg parents) has given you or approved consent to the processing of your personal data.

9. The purpose of processing your personal data is the use and duration of a specific service of the Operator, which you request or to which access is requested, resp. conclusion and performance of the contract forming the legal basis for the use and duration of the requested service.

10. The provision and processing of your personal data is necessary for the use and duration of the specific service of the Operator that you request or to which you request access, as well as for concluding and fulfilling the contract forming the legal basis for using the requested service.

11. The purpose closely connected with the use of the Services means the sending of short e-mail messages about news or other important or useful information related to your service, which the Operator will be able to send to the e-mail address provided and registered by you. You can set up a subscription on the website of the service. You can freely unsubscribe from these short email messages by clicking on the link in any of these email messages.

12. A purpose closely related to the use of the Services also means the analysis and statistics related to their use, which will enable the Operator to improve and optimize its services and website.

13. The processing of your personal data is necessary for the purpose of direct marketing, including profiling, in so far as it relates to direct marketing, which in accordance with Article 47 of the Regulation also represents a legitimate interest of the Operator. This means that the Operator is entitled to process the personal data provided for the purpose of direct marketing, on the basis of which it will be able to send you email messages with commercial content. By consenting to the processing of personal data in accordance with these Terms, you also consent to the processing of your personal data for the purpose of effective marketing communication, including profiling to the extent related to that purpose, which will display the Service Website, in particular advertising that is relevant to you and meets your preferences, depending on your online activities.

14. The processing of your personal data may also be necessary for the purpose of fulfilling the Operator’s obligations arising from regulations, laws and other generally binding legal regulations (eg Act No. 431/2002 Coll. On Accounting).

15. The processing of your personal data may also be necessary for the purpose of the legitimate interest of the Operator:
a) out-of-court and judicial application, proving and enforcement of legal rights of the Operator,
b) protection against crime, reporting and proving crime and providing co-operation to law enforcement and court authorities in detecting crime and its perpetrators,
c) protection against misuse of the Operator’s services and ensuring the security of the Operator’s website and information infrastructure,
d) for the purpose of another legitimate interest of the Operator or a third party in accordance with the regulation and the law.

16. The Operator is entitled to process your personal data for a purpose other than the purpose specified in the Conditions only if you have specifically given your consent or the processing of personal data for another purpose is compatible with the purpose for which the personal data were originally obtained. . The processing of personal data for archiving or statistical purposes is considered by law to be processing compatible with the original purpose. In the case of processing for the purposes in question, the controller has adequate and effective technical and organizational measures in place to ensure in particular the minimization of personal data as well as pseudonymisation, which will not allow

WHAT IS THE SCOPE OF PERSONAL DATA PROCESSED?

17. The controller processes your personal data only to the extent necessary to achieve the purpose of their processing as follows:

• contacting via the contact form:
  • E-mail adress,
  • name and surname,
  • telephone number,
  • address,
  • IP address,
  • data from cookies;
• sending email messages:
  • E-mail adress,
  • name and surname – only if you enter them in the settings so that we can send you personalized messages,
  • IP address,
  • data from cookies;
• reservation and purchase of products and services:
  • E-mail adress,
  • name and surname,
  • telephone number,
  • address – if required for delivery,
  • date of birth – to claim a discount and if required by the nature of the products and services sold,
  • data on visiting and browsing the website,
  • IP address,
  • data from cookies;
• showing a relevant ad:
  • E-mail adress,
  • name and surname,
  • telephone number,
  • address,
  • IP address,
  • data from cookies;

HOW LONG IS PERSONAL DATA STORED?

18. The processed personal data shall be stored to the extent necessary and in a form that allows your identification at the latest as long as necessary to fulfill the purpose for which they are processed (eg fulfillment of the Operator’s obligation under general binding legislation, or legitimate interests of the Operator, etc.). Subsequently, the Operator will ensure the disposal (deletion or anonymisation) of your personal data without undue delay in accordance with the regulation and the law.

ARE THE PERSONAL DATA PROCESSED PROTECTED? WHO CAN THEY PROVIDE THEM?

19. Your personal data is safe, because their processing is carried out automatically through the Operator’s information system and through appropriate technical and organizational measures guaranteeing the security of personal data, including protection against unauthorized processing of personal data, illegal processing of personal data, accidental loss of personal data, deletion of personal data. data or damage to personal data. In this connection, the Operator is entitled to entrust the processing of your personal data on the basis of a written contract to a third party with adequate personnel, technical, organizational and professional competence who will process your personal data as an intermediary in accordance with regulation and law on behalf of the Operator.

20. The Operator is entitled to provide your personal data to the necessary extent to the following recipients:
a) persons who, on behalf of the Operator, assert and enforce the legal claims of the Operator out of court and in court, for the purpose of asserting and enforcing the legal claims of the Operator,
b) a court, a bailiff, a body active in criminal proceedings or another public authority, for the purpose of exercising and enforcing the legal claims of the Operator or fulfilling the obligations of the Operator pursuant to generally binding legal regulations,
c) persons who ensure the technical operation of its services, website and information infrastructure for the Operator, exclusively for this purpose,
d) persons who provide the Operator with the security and protection of its services, website and information infrastructure and also regularly monitor and test this security and protection, exclusively for this purpose,
e) persons who provide analytical and statistical services to the Operator for the purpose of improving and optimizing its services and website,
f) persons who provide marketing services to the Operator, only for the purpose of effective and relevant marketing communication of the Operator (for the avoidance of any doubt, we add that the category of persons will not be able to use your personal data for their own marketing or marketing activities of any other person other than Operator).

WHAT ARE YOUR RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA?

21. We hereby inform you of the rights and legally significant facts related to the protection of your personal data, which result from the relevant provisions of the Regulation and the law:
a) you have the right to request access to personal data from the Operator (in detail in Article 15 of the Regulation and § 21 of the Act),
b) you have the right to request from the Operator the correction of personal data (in detail in Article 16 of the Regulation and § 22 of the Act),
c) you have the right to request from the Operator the deletion of personal data, so-called the right to be forgotten (in detail in Article 17 of the Regulation and § 23 of the Act),
d) you have the right to request from the Operator a restriction on the processing of personal data (in detail in Article 18 of the Regulation and Section 24 of the Act),
e) you have the right to the transfer of personal data to another operator (in detail in Article 20 of the Regulation and § 26 of the Act),
f) you have the right to object to the processing of personal data with the Operator (in detail in Article 21 of the Regulation and Section 27 of the Act),
g) you have the right to file a motion to initiate proceedings on personal data protection addressed to the Office for Personal Data Protection of the Slovak Republic (in detail in § 99 to 103 of the Act),
h) you have the right to withdraw your consent to the processing of personal data at any time,
(i) the provision of personal data is a requirement which, in the case of services, is necessary for the conclusion of the contract and, in the absence of personal data, it will not be possible to conclude and perform the contract constituting the legal basis for the use and duration of the service requested.

22. We draw your special attention to the right to object to the processing of personal data, according to which you have the possibility to:
a) object to the processing of personal data in the performance of a task carried out in the public interest, in the exercise of public power or on the basis of a legitimate interest of the Operator or a third party, including profiling based on these legal bases,
b) object to the processing of personal data for the purposes of direct marketing on the basis of the legitimate interest of the Operator, including profiling, to the extent that it is related to direct marketing.

23. We also pay special attention to the fact that you have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its revocation. If you have revoked your consent to the processing of personal data and there is no other legal basis for the processing of personal data, the Operator will ensure without undue delay the destruction (deletion or anonymisation) of your personal data in accordance with regulations and law.

HOW TO APPLY RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA?

24. You can exercise your rights or ask questions regarding the processing of personal data on the basis of a request sent directly to the Operator, through one of the contacts listed below or in another way of your choice.
Operator
Postal address: Iveta Slebodová, Ždiar 209, 059 55 Ždiar
Email address: penzionenrico@gmail.com

25. By consenting to the processing of personal data in accordance with these Terms, you acknowledge that if your request is made under point 24. Conditions manifestly unfounded or disproportionate, in particular because of its repetitive nature, The Operator may, taking into account the content of the request:
(a) require a reasonable fee taking into account the administrative costs of providing the information or a reasonable fee taking into account the administrative costs of the notification or a reasonable fee taking into account the administrative costs of carrying out the requested action; or
(b) refuse to act on a request.

26. At the same time, you acknowledge that before processing the application under point 24. In the first place, the Operator must reliably verify your identity in order to prevent the abuse of your rights. Therefore, the Operator may request the provision of additional information or documents necessary to verify the identity of the person concerned (your identity), if he has reasonable doubts about the identity of the applicant. If, even in accordance with the procedure under the previous sentence, the Operator is not able to demonstrably verify the identity of the person concerned (your identity), it will inform the applicant accordingly, if possible, and refuses to act on the request.

27. If the Operator does not comply with your request, you can contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07, Bratislava 27, Slovak Republic, as a supervisory body. You can also contact the Office for Personal Data Protection directly.