This document describes the method and purpose of processing personal data of the operator ConsuLLting s. r. o., Na Sihoti 1164, 026 01 Dolny Kubin, Company Registration Number: 53 440 412 (hereinafter referred to as “Operator”) and also provides any other legally required information, including information on the rights of the person concerned and how to exercise them.

Act No. 18/2018 Coll. on personal data protection and amending and supplementing certain Acts and Regulation (EU) 2016/679 on personal data protection (hereinafter referred to as “Regulation”) constitutes legislation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and protects fundamental rights and freedoms of natural persons, in particular in relation to the right to the protection of personal data.

According to Article 4 (1) of the Regulation, “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”).

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Article 4(2) of the Regulation).

According to Article 12 et seq. of the Regulation, the data subject must also be provided with relevant information on the processing activities of the operator and the rights of the data subject.

“Validity” due to the fact that updating of information on the processing of personal data contained in this policy may be required in the future, the Operator reserves the right to update this policy at any time. This version of the statement was released on 20 July 2022.

ON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA ?

Processing is lawful only if and only to the extent that at least one of the following conditions is met:

the data subject has consented to the processing of his or her personal data for one or more specific purposes,
processing is necessary for the performance of a contract to which the data subject is a party or in order to take pre-contractual measures at the request of the data subject,
processing is necessary to comply with a legal obligation,
processing is necessary for the purposes of the legitimate interests pursued by the operator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

WHAT IF YOU DO NOT PROVIDE PERSONAL DATA?

In the case of processing your personal data within:
when providing personal data that is a legal or contractual requirement, the data subject is obliged to provide such personal data. Without providing personal data, order processing is not possible.
you provide us with any personal data voluntarily and you are obliged to consider the extent to which you provide such personal data. However, without providing some personal data, we cannot respond to your suggestion or request.

WE COLLECT YOUR PERSONAL DATA

You will provide us with your personal data most often:
we obtain your data primarily directly from you, for example from communicating with you via the contact form on our website,
if you are in the position of our customer or interested in our services,
indirectly public information from your social media profiles (Facebook, Skype, LinkedIn, Instagram) etc.
If you are our customer, we most often collect your personal data directly from you. In this case, the provision of your personal data is voluntary, with the exception of those data that are necessary for invoicing the services that we provide.

WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA, WHAT PERSONAL DATA DO WE PROCESS, FOR WHAT PERIOD DO WE STORE YOUR PERSONAL DATA ?

The operator processes your personal data in the following manner/for the following purposes:
ACCOUNTING AND BUSINESS AGENDA
The purpose is to fulfill the legal obligations of the operator arising from special regulations (e.g. Accounting Act, Value Added Tax Act, Income Tax Act).
Legal basis (including its provision to third parties): legal obligation
Retention period: 10 years.
CONTACT FORM ON OUR WEBSITE
The main purpose of processing personal data is to make a price offer at the request of the customer.
Legal basis: is the processing of personal data necessary for the performance of a contract (e.g. a purchase contract under Article 6 (1)(b) general Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and you are a contracting party.
Retention period: 1 month.
RESERVATION SYSTEM
The purpose of processing personal data is accommodation reservation,
Legal basis: under Article 6 (1) (b) general Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Act No. 253/1998 Coll. on the reporting of the citizens residency and on the registry of inhabitants of the Slovak Republic
Retention period: will be deleted after the stay
REGISTRATION OF RIGHTS OF DATA SUBJECTS
The purpose of the processing as a legal basis is the fulfillment of a legal obligation of the company.
Legal basis: the processing of personal data is permitted Art. 6 (1) (c), in accordance with Art. 15 to 22 and 34 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Retention period: 5 years after termination or termination of the obligation.
HANDLING COMPLAINTS
The purpose of the processing as a legal basis is the fulfillment of a legal obligation of the company.
Legal basis: Article 6 (1) (c) and (e) General Data Protection Regulation, Act No. 9/2010 Coll. on complaints as amended
Retention period: 5 years after termination or termination of the obligation.
HANDLING CUSTOMER COMPLAINTS
The purpose of the processing as a legal basis is the fulfillment of a legal obligation of the company.
Legal basis: Act No. 250/2007 Coll. on consumer protection as amended, Act No. 372/1990 Coll. on misdemeanours as amended, Act No. 18/2018 Coll. on personal data protection as amended.
Retention period: 5 years after termination or termination of the obligation.
LITIGATION
The purpose of the processing as well as the legitimate interest is to prove, exercise and defend the company’s legal claims.
Legal basis: legitimate interest of the operator in the fulfilment of legal claims
Retention period: until the final end of the case

WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA ?

Categories of recipients: state and public administration bodies, administrator of the company’s website, auditor, lawyer, intermediaries (accounting agenda), companies performing administration and support of information technology, information service providers in justified cases courts and law enforcement agencies.
COMPETITIONS ON SOCIAL NETWORKS
Any natural person with an address for delivery in the Slovak Republic over 18 years of age, registered on the social network Instagram, Facebook that has an active account throughout the competition and meets the established rules of the competition can become a participant in the competition (hereinafter “participant” or “contestant”). The organizer inserts the status with the conditions for participation in the competition. The winners of the competition will be announced in the comment section below the competition status. The winner will also be contacted via message and asked to send their contact details via private message or e – mail-in order to deliver the prize or to make agreements with a company representative to take the prize. If the winner does not send their contact details, the prize will be forfeited to the organizer. By participating in the competition, the contestant voluntarily grants the organizer (the operator in accordance with the Personal Data Protection Act) consent to the processing of his/her personal data, which he/she provided to the organizer during the duration of the competition, as well as in relation to possible handing out the prize, for the purpose of entering the competition, winner announcement and delivery of the prize. The competitor has the right to request from the operator access to personal data relating to the data subject, the right to rectification of personal data, the right to erasure of personal data and the right to restriction of processing of personal data, the right to object to processing of personal data, as well as the right to portability of personal data. The operator stores the personal data of the winner to the extent and for the period necessary to deliver the prize, but not longer than 2 months. This consent to the processing of personal data is voluntary. The withdrawal of consent during the duration of the competition is effective at the moment of its delivery to the organizer and results in the exclusion of the competitor from the competition.
Disclosure of personal data Personal data will not be disclosed.
AUTOMATED INDIVIDUAL DECISION-MAKING
Personal data will not be used for automated individual decision-making, including profiling.
Transfer of personal data outside the EUROPEAN UNION The transfer of personal data to a third country or international organization does not take place.
CONFIDENTIALITY We would like to assure you that our employees and co-workers who will process your personal data are obliged to maintain confidentiality about personal data. This confidentiality continues even after the end of the contractual relationship with us.

1. SECURITY OF PERSONAL DATA
Your personal data is safe with us. In order to prevent unauthorized access and misuse of your personal data, we have implemented appropriate measures on both technical and organizational level. We care very much about the protection of your personal data. Therefore, we not only regularly check their security, but also continuously improve their protection. We try to use security measures that provide sufficient security with respect to the current state of technologies. The security measures taken are then updated regularly.
1. DATA SUBJECTS
They are, in particular, employees, clients, any natural person whose personal data are processed.
rights of the person concerned Withdraw consent – in cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically to the stated email address, in writing or in person at the operator’s registered office. The withdrawal of consent does not affect the lawfulness of the processing of personal data that we have processed on its basis about you. Regardless of this, you have the right to object to the processing of personal data at any time. Right of access – you have the right to receive a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written form, unless you request another way to provide it. If you have requested to provide this information by electronic means, it will be provided to you electronically, if technically feasible. Right to rectification – we take reasonable steps to ensure that the information we hold about you is accurate, complete and up-to-date. If you believe that the data we hold is inaccurate, incomplete or out-of-date, please do not hesitate to ask us to modify, update or complete this information. Right to erasure (the right to be forgotten) – you have the right to ask us to delete your personal data, for example, if the personal data we have collected about you is no longer necessary to fulfill the original purpose of processing. However, your right must be assessed in the light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means that we will not be able to comply with your request. Right to restriction of processing – under certain circumstances, you have the right to restrict the processing of your personal data. For example, when you think that the personal data we hold about you may be inaccurate or when you think that we no longer need to use your personal data. Right to portability of personal data – under certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to a third party of your choice. However, the right to portability applies only to personal data that we have obtained from you on the basis of consent or under a contract to which you are one of the contracting parties. Right to object – you have the right to object to data processing that is based on our legitimate interests. If we do not have a compelling legitimate reason for the processing and you object, we will no longer process your personal data. Right to initiate the proceedings on personal data protection – if you think that your personal data is being processed unfairly or unlawfully, you can file a complaint with the Supervisory Authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; phone number: +421 /2/ 3231 3214; mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. In the case of submission of the file in electronic form, it is necessary that it meets the requirements of 19 (1) of Act No. 71/1967 Coll. on administrative proceedings (administrative fee).
INFORMATION AND EXERCISE OF THE RIGHTS OF THE DATA SUBJECT In order to exercise your rights, you can contact the operator at any time as follows:
Address: ConsuLLting s.r.o., Na Sihoti 1164, 026 01 Dolny Kubin
E-mail: info@apartmanvstrani.sk
Phone number: +421 911 143 774
We will respond to your request free of charge within 30 days. In case of complexity or a large number of requests, we reserve the right to extend this period by another 60 days. If this happens, we will inform you about it and the reasons. In the event of a repeated request, we reserve the right to charge a reasonable administrative fee to cover the costs associated with the provision of this service.
CONCLUSION
If you have questions about data protection, you can contact us at any time by calling us or using the contact form. In addition to the contact form, you can contact us via e-mail or post at the operator’s company address. In the event of exercising any of the rights of the data subject under the legislation governing the protection of personal data, if it is not possible to verify the identity of the applicant from your application, or if we have reasonable doubts about the identity of the person submitting the application, we reserve the right to request that person to provide additional information necessary to confirm the identity of the person filing the application.