Useful links
HOTEL KAMÉLIA
Tajovského 1991/1, Žilina
Booking:
+421 948 235 725
rezervacie@penzionkamelia.sk
written in accordance with Articles 13 and 14 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”) and in accordance with §19 et seq. of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts (hereinafter referred to as the “Privacy Act”)
We value your privacy and the protection of your personal data is one of our most important priorities. These privacy policies (hereinafter referred to as the “Privacy Policies”) contain information about what personal data we collect from you in the course of our activities, how we use it and how we protect it.
We use the personal data you provide to us exclusively to provide you with quality services. When providing our services, we always take your privacy into account and we approach the protection of your personal data with respect and responsibility. We recommend that you read these Policies carefully and familiarize yourself with all your rights before entering into a legal relationship with us.
Controller: Penzión Kamélia, s.r.o.
Registered office: Tajovského 1, 010 01 Žilina
IČO: 47 621 028
Registration: Commercial Register OS Žilina, Section: Sro, File No. 61787/L
Represented by: Marián Valica, company manager
Office address of the controller: Tajovského 1, 010 01 Žilina
Controller contact person: Marián Valica, company manager
Contact: e-mail: info@penzionkamelia.sk, tel.: +421 908 599 620
WEB: https://www.penzionkamelia.sk/
Responsible person: Not appointed.
(hereinafter referred to as the “controller” or “we”) hereby inform you, as data subjects, about the method and scope of processing your personal data, including the scope of your rights related to the processing of your personal data. The Operator is engaged in the provision of restaurant and accommodation services. A detailed description of the services is published on the Operator’s website: https://www.penzionkemelia.sk.
I. The Operator is a natural or legal person who is responsible for the protection and processing of personal data. In accordance with Article 4, point 7. of the Regulation and §5, letter o) of the OOU Act, we are the controller of your personal data.
II. The processor is anyone who processes personal data on behalf of the operator. Our processors are the entities listed in Article V. of these Rules.
III. The Personal Data Protection Rules (hereinafter referred to as the “Rules”) govern the legal relationships between the Operator and its clients, potential clients and users of the Operator’s website, the Operator and its suppliers, the Operator and its intermediaries when processing their personal data in accordance with the OOU Act and the Regulation.
IV. For the purposes of these Rules, the data subject (hereinafter also referred to as the “data subject”, “client” or “you”) means any natural person whose personal data is processed. The data subjects include in particular:
When providing our services and/or concluding a contract, we need to obtain personal data from the Client, Potential Client or their representative, which will be used to provide these services and to communicate with the Client or Potential Client. We ensure the protection of all personal data that the Potential Client or Client has provided to us in any form, in accordance with the OOU Act. We take particular care to prevent personal data breaches, particularly by adopting appropriate security measures to eliminate accidental or unlawful against the destruction, loss, alteration or unauthorized disclosure of transmitted, stored personal data or otherwise processed personal data, or unauthorized access to them. For this purpose, we have adopted appropriate technical, organizational and personnel measures appropriate to the type of processing. All personal data of the client or potential client is stored on a secure server and in locked rooms and we make every effort to protect them. When processing personal data of the client, potential client, client representative and member of the statutory body acting on behalf of the legal entity that is our client, we comply in particular with the principle of legality, the principle of purpose limitation, the principle of personal data minimization, the principle of accuracy, the principle of storage minimization, the principle of integrity and confidentiality and the principle of responsibility.
In accordance with the Regulation and the OOU Act, as an operator, we process personal data that you provide to us in connection with the performance of our activities. We process only such personal data so that we can provide you with our services, individual products, to comply with our legal obligations, and also to protect our legitimate interests. We collect personal data about our clients, including potential clients who are interested in our services or who have given us their consent so that we can address them with an offer of products and services, personal data that you provide to us in connection with the purchase of goods or the use of services (e.g. when creating an order for goods electronically, by telephone, purchasing goods and entering your personal data as part of issuing an invoice by the Operator, or when making a complaint about goods via a complaint form).This mainly concerns personal data:
The operator processes this personal data only in accordance with the purposes set out below, to the extent and for the period necessary to fulfil these specified purposes, otherwise only for the period of mandatory archiving in accordance with the special regulations of the Slovak legal order.
I. Processing of personal data in connection with the purchase of goods by telephone order, electronically or in a brick-and-mortar store
II. Processing of personal data in connection with handling suggestions, inquiries and complaints
III. Processing of personal data via a camera system in the brick-and-mortar store and the operator’s production facilities
IV. Processing of personal data for marketing and advertising purposes
A) Sending business news, newsletters and offers WITHOUT a prior legal relationship with the data subject – We also use your personal data to inform you about our service offerings, news and discount promotions via a newsletter sent by e-mail or in another form.
B) Sending business news, newsletters and offers AFTER the legal relationship with the data subject has been established – We use your personal data to stay in touch with you and regularly inform you about news.
V. Processing of personal data in connection with the exercise of the rights of data subjects
VI. Processing of personal data in connection with the legitimate interests of the operator
We use your personal data for the purpose of our internal legitimate interests, whereby we process personal data on the legal basis pursuant to Art. 6 (1) (f) of the Regulation or Art. 13 (1) (f) of the OOU Act, except in cases where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, in particular if the data subject is a child.
VII. Processing of personal data in connection with the fulfillment of the legal obligations of the operator, in particular: providing cooperation to state authorities and public authorities in carrying out inspections, the purpose of the registry and archiving of documents, carrying out activities to fulfill obligations arising from special regulations, fulfilling obligations arising from relevant tax and accounting regulations.
VIII. Processing of personal data in connection with the completion and submission of the contact form published on the operator’s website and the implementation of feedback by the Operator
The operator undertakes to provide the data subject with information about another purpose and other relevant information pursuant to the OOU Act before further processing of personal data, if he intends to further process personal data for a purpose other than that for which they were obtained. The operator is entitled, subject to the fulfillment of other conditions, to process personal data to the extent defined in accordance with the specific legal basis and for other purposes defined further in this document.
I. The Operator processes your personal data in case of interest in our services, or their purchase electronically or at the facility for the duration of the contractual relationship, further for the period strictly necessary to ensure mutual rights and obligations arising from the contract and further for a period of 2 years from the date of expiry of the warranty period for the goods for the purposes of the Operator’s legitimate interests (see above). Issued tax documents are, in accordance with Section 70 of Act No. 222/2004 Coll., on Value Added Tax, as amended, archived for a period of 10 years from their issuance. Due to the need to prove the legal reason for issuing tax documents, orders are also archived for a period of 10 years from the date of sending the order to the customer.
II. After the end of the ordered service/contract, personal data will continue to be processed solely for the purpose of protecting the Operator and your rights and interests, for the period necessary to ensure their performance. This period is primarily determinedaccording to the limitation periods set by law (Civil Code) or by contract. Our activity is also subject to special sectoral regulation (distribution of services), which stipulates that certain types of documents related to the activities of the Operator must be kept for a period specified by law so that it can demonstrate the fulfillment of its obligations and professional care (usually 10 years). The period of retention of personal data results mainly from Act 395/2002 Coll. on archives and registries, from Act No. 40/1964 Coll. of the Civil Code and the relevant accounting and tax regulations.
III. In the event that the client, potential client, client representative or member of the statutory body of a legal entity that is a client grants us consent to the processing of personal data as further specified in this document, we will retain the said data for the period specified in the consent to the processing of personal data. If you withdraw your consent, this does not affect the processing of your personal data carried out by the Controller on the basis of other legal titles, in accordance with these Rules.
IV. If the purpose for processing personal data is terminated or your consent to processing personal data is withdrawn, we proceed to the destruction of your personal data, unless it is possible to process your personal data on another legal basis. When handling personal data, we apply the principle of minimization, which means that as soon as the period during which we are obliged to store personal data has expired, we destroy your personal data from our databases and information systems. Within our organization, we have set strict internal rules for the storage of personal data, which ensure that we do not keep information longer than we are authorized or obliged to.
I. Personal data may be processed by entities other than the Operator and its employees for the purposes set out above. The Operator carefully selects external partners who may process your personal data as processors and entrusts personal data only to those entities that provide sufficient guarantees to ensure appropriate technical and organizational security measures to prevent, in particular, accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise processed.
The entities that may have access to your personal data are, or may be in the future:
II. As the Operator, we are obliged to transfer some of your personal data based on generally binding applicable legal regulations to the recipients listed below in cases where such an obligation arises from the law, or it is necessary to determine, exercise or defend the rights and legitimate interests of us or third parties. These recipients have the status of independent controllers.
The recipients of your personal data may be:
III. As the Controller, we are authorized to entrust the processing of your personal data to intermediaries who are authorized to process personal data on our behalf and are obliged to follow our instructions. In accordance with the Regulation, your specific consent is not required for such an assignment. Such an intermediary is any person who has concluded a specific contract with us for the processing of personal data.
Our intermediaries are:
IV. Some service providers with whom we cooperate operate online media channels (websites, social networking sites), and on our behalf provide relevant online advertisements for our products and services through these online media channels. You can, for example, see advertisements for our products and services if you visit a certain page on social networks. Such service providers include, for example, Facebook, Google, Adobe.
The data subject acknowledges that the circle of recipients, intermediaries may change during the processing of personal data. As a controller, we are not obliged to inform the data subject about the narrowing of the circle of recipients or intermediaries specified in this article.
We obtain your personal data directly from you in the course of our activities, when concluding and during the term of the contract and in the performance of this contract or through other persons, provided that these persons have your consent.
We do not intend to transfer your personal data to a third country or to an international organization.
We do not use aed processing of your personal data or profiling of personal data in the course of our activities.
The proper processing of your personal data is important to us and its protection is a matter of course. When processing personal data, you can exercise the following rights:
Information on the processing of your personal data
The content of the information, which is mainly stated in these Rules, is mainly the identification and contact details of the controller, the purposes and legal bases for the processing of your personal data, the categories of processed personal data, the legitimate interests of the controller, the categories of recipients of your personal data as well as our intermediaries, information on the transfer of personal data to third countries, the period of retention of personal data, authorized controllers, a calculation of your rights, the possibility of contacting the Personal Data Protection Office, the source of the processed personal data, information on whether and how aed decision-making and profiling take place, information on the right to withdraw your consent at any time, information on whether the provision of personal data is a legal requirement or a contractual requirement or a requirement that is necessary for the conclusion of a contract, and whether the data subject is obliged to provide personal data, as well as the possible consequences of failure to provide personal data, before further processing. processing of personal data, information about another purpose and other relevant information, if the controller intends to further process the personal data for a purpose other than that for which they were obtained.
Right to access your personal data
You have the right to confirmation as to whether or not your personal data are being processed and, if so, you have the right to access information about the purposes of their processing, the categories of personal data concerned, the recipients or categories of recipients, the period of storage of personal data, information about your rights, the right to file a complaint with the Personal Data Protection Office, information about the source of personal data, information about whether aed decision-making and profiling are taking place, information and guarantees in the event of the transfer of personal data to a third country or an international organization. You have the right to be provided with copies of the processed personal data. You can send your request electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request by e-mail upon request. In case you request specific personal data, we will require you to have the request officially verified according to this point.
Right to correct your personal data
Are we processing your outdated or inaccurate personal data? Have you changed your address for example? Please inform us and we will correct your personal data. You can send the request electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request upon request bysend by e-mail.
Right to erasure of your personal data (right to be forgotten)
In some cases stipulated by law, we are obliged to delete your personal data at your request. However, each such request is subject to an individual assessment of whether the conditions are met, because for example, we may have an obligation or a legitimate interest, if it outweighs your interests, we have the right to retain the personal data. You can send the request electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request by e-mail upon request.
Right to restrict the processing of your personal data
If you wish us to process your personal data exclusively for the most necessary legal reasons or to block your personal data, you can send a request to restrict the processing of your personal data electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request by e-mail upon request.
Right to data portability of your personal data
If you wish us to provide your personal data to another controller, another company, we will transfer your personal data in an appropriate format, if there are no legal or other significant obstacles preventing us from doing so, to the entity designated by you, if technically possible and if
You can send your request electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules together with an officially certified signature on the request in question. We request a verified signature on the application in question in order to prevent unauthorized provision of your personal data to other entities.
Right to object to the processing of your personal data for marketing purposes and aed individual decision-making
If you find out or even believe that we are processing personal data in violation of the protection of your private and personal life or in violation of legal regulations, please contact us and ask us for an explanation or to eliminate the unsatisfactory situation. You can also raise an objection directly against aed decision-making or processing of your personal data for marketing or advertising purposes, if such processing is carried out without your consent for the purpose of the legitimate interest of the operator. You can send the request electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request by e-mail upon request.
You have the right not to be subject to a decision based solely on aed processing of your personal data, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision
Right to withdraw your consent to the processing of personal data
In the event that the processing of your personal data is based on your specific consent, e.g. granting consent to the processing of personal data concerning health, or marketing consent (see Article III. legal basis for processing personal data for individual purposes), you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing personal data based on consent before its withdrawal. You can send a request to withdraw consent electronically to our e-mail address or in paper form to the address specified in Article I. of these Rules. We can send you a sample of such a request by e-mail upon request.
Right to file a complaint or suggestion with the Personal Data Protection Office
You can at any time contact the supervisory authority with your suggestion or complaint regarding the processing of personal data, namely the Personal Data Protection Office of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Company ID: 36 064 220, tel. No.: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/.
In order to process your request and for the purpose of clearly identifying the applicant as the data subject, we are entitled to request additional information.
The client or potential client is obliged to provide only complete