Personal Data Protection Information Obligation
of the Controller Vega plus s.r.o. with its registered office at Donovaly 105, 976 39 Donovaly, identification number (IČO): 45 922 501, entered into the Business Register of the District Court Banská Bystrica, insert no.: 33785/S, Section: Sro (the “Controller"). Dear guests Pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) and under Act no. 18/2018 Coll. on Personal Data Protection and on amendments to certain acts (“Personal Data Protection Act”), we hereby comply with the information obligation related to the processing of your personal data. We will hold your data safely in compliance with adopted measures for protecting personal data and only for a time necessary to accomplish the purpose of processing. Your personal data will be accessed exclusively by persons authorized by the Controller to process personal data in accordance with instructions from the Controller in compliance with measures adopted by the Controller.
Who is a Data Subject?
With regard to processing of personal data by the Controller, you are the Data Subject, i.e. the person whom the personal data that are processed concern.
Why do we process your personal data?
Personal data processing is necessary in connection with the services we offer. If we were not provided with your personal data, we would not be able to provide these services to you because as the Controller, we are required to process your data by special law for the purpose of our legitimate interest. We limit the processing of personal data to a minimum that is necessary for us to achieve the purpose of processing.
For what purpose and what personal data are processed?
• Processing of your personal data is necessary in order that an agreement to which you are a party as the Data Subject is performed or measures are implemented upon your request prior to execution of the agreement (an Agreement on Provision of Lodging and Services).
• Processing of your personal data is necessary for us to fulfil our statutory obligation under Act no. 253/1998 Coll. on the Reporting of Residence of Slovak Citizens and on the Register of the Slovak Republic Inhabitants and in line with Act no. 404/2011 Coll. on the Residence of Aliens and on amendments and supplements to certain acts.
• Processing of your personal data is necessary for the purpose of the Controller’s legitimate interest, e.g. parking a motor vehicle, issuing an invoice, ensuring services.
• Processing of your personal data obtained from a camera footage is necessary for the purpose of the Controller’s legitimate interest (for protecting your life, health and property and the Controller’s property).
• Processing of your personal data is necessary for the purpose of advertising, for us to be able to inform you about our current special offers.
Who are recipients and processors of your personal data?
For the purpose of fulfilling statutory obligations and of further processing, personal data recipients are a processor, state administration bodies and public authorities, courts, law enforcement authorities, distrainers, attorneys at law. For the purpose of complying with your request, your personal data will be provided to third parties (e.g. for the purpose of ensuring transport, making a reservation in a restaurant, renting sports equipment, and for other commercial purposes) within a scope necessary to fulfil the purpose.
Will your personal data be processed outside the European Union?
Your personal data will not be transferred to third countries or international organisations.
Will your personal data be used in automated individual decision-making?
Your personal data will not be used in automated individual decision-making and profiling.
For how long will we be storing your personal data?
We process your personal data for a necessary time required by law, for a time necessary to fulfil our contractual obligations, for a time necessary to accomplish the purpose of processing and for a time for which your consent is granted.
What rights do you have in connection with the processing of your personal data?
You may exercise your rights directly at the Controller’s e-mail address: email@example.com. Please, enter “OOU” (in Slovak “Ochrana osobných údajov”, which means Personal Data Protection), into a subject line.
Right to information, right of access – Every person whose personal data are processed may request us to provide him or her with a copy of his or her personal data that we hold and with the information whether his or her data are processed, and if they are, the person has a right of access to his or her personal data. Such person may also request the information on a purpose for which his or her personal data are processed, what personal data are processed, an entity who has been provided with his or her personal data and a length of a time for which his or her personal data are to be stored.
Right to withhold your consent – If we process your personal data by your consent, you have a right to withhold your consent any time. You may withhold your consent by clicking on “Unsubscribe” if a newsletter is sent directly to your e-mail, or electronically at the e-mail address firstname.lastname@example.org,, in writing by sending a Withdrawal of Consent Notice or in person. Legitimacy of personal data processing, based on which we processed the data about you, will not be affected by the withdrawal of consent.
Right to rectification – If we process personal data that are out-of-date or incomplete, you have a right to request us to correct them.
Right to erasure – In connection with the processing of your personal data, you have a right to request erasure thereof except the case where you have a liability to our company in the form of an unpaid invoice or you have been provided with a service and your personal data must be held by us for a statutory period, or if they are needed for the purpose of processing.
Right to limitation of processing – We will limit the processing of your personal data if you indicate that your personal data are incorrect, and if processing is not legitimate and you submit an objection to erasure, you may request that use thereof is limited instead, and if we no longer need your personal data for the purpose of processing but you need them to prove and assert your legal claims, and if you object to a legitimate interest in processing, we well limit the processing of your personal data until the legitimate interest is verified.
Right to portability – If we process your personal data by your consent you have granted to us, you have a right to be provided with such data in a structured machine–readable format. You have a right to have your personal data transferred directly from us to another controller, where technically feasible.
Right to object – In case that you consider that we process your personal data in contradiction to your privacy or legislation, you may request for explanation and raise an objection to the processing of personal data.
Right to lodge a complaint with a supervisory authority – If you consider that we process your personal data incorrectly, you may contact us anytime at the e-mail address email@example.com or in writing at Hotel Encián, Donovaly 105, 976 37 Donovaly.
You have also a right to lodge a complaint over the processing of your personal data with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, e-mail: firstname.lastname@example.org
Donovaly, 25 May 2018