GDPR
Information on the processing of personal data
Information on the processing of personal data of affected persons according to §19 and §20 of Act No. 18/2018Z.z. on the protection of personal data and the amendment of specific laws (from now on referred to as "the law") and Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of natural persons in the processing of personal data and the free movement of such data (from now on referred to as the "regulation")
This information aims to provide you with information about what personal data we process, how we treat it, for what purposes we use it, to whom we can provide it, where you can obtain information about your personal data and exercise your rights in the processing of personal data.
Identification and contact details:
The operator processing your personal data is ARPROG, joint-stock company Poprad, Hodžova 3292/3, 058 01 Poprad, Slovakia, ID number: 36 168 335,j.krassova@arprog.sk
Contact details for the person responsible for supervising the protection of personal data: dpo3@proenergy.sk
Purpose of personal data processing and legal basis of processing
The purpose of personal data processing is: reservation of guest accommodation through an electronic system.
Personal data is processed based on: §13 par. 1 letter b) Act 18/2018 Coll. on the protection of personal data and the amendment of specific laws in the framework of negotiations on pre-contractual relations and the fulfilment of contractual relations in connection with §13 par. 1 letter c) – a special regulation, which is Act no. 513/1991 Commercial Code as amended.
Legitimate interests of the operator or a third party
Personal data is not processed for the legitimate interests of the operator or a third party.
Identification of processed personal data of affected persons
Affected persons whose personal data are processed are: hotel customers.
Scope of processed personal data: name, surname, e-mail, telephone, data in the note, data on the payment amount and method of payment.
Identification of beneficiaries, categories of beneficiaries
|
Another authorized entity |
generally binding legal regulation following § 13 par. 1 letter c) Act no. 18/2018 Coll. on the protection of personal data and the amendment of specific laws |
|
Contractual partner (based on the contract) |
§ 34 of Act no. 18/2018 Coll. on the protection of personal data and the amendment of specific laws |
The operator may provide personal data to authorized entities such as institutions and organizations whose processing is permitted by a special legal regulation or to contractual partners (especially intermediaries) who contractually undertake to accept adequate guarantees of maintaining the protection of processed personal data, as follows:
With the consent of the person concerned or at his/her command, personal data may be provided to another recipient.
Transfer of personal data to a third country / international organization
Transfer to third countries or international organizations is not carried out.
Identification of the source from which the personal data was obtained
Directly from the affected person or their legal representative (via the operator's website ).
Period of storage of personal data
The operator processes personal data for the time necessary to fulfil the purpose.
Profiling
The operator does not process personal data by profiling or in a similar way based on automated individual decision-making.
Rights of the data subject
The person concerned has the right to demand from the operator access to personal data that is processed about him, the right to correct personal data, the right to delete or limit the processing of personal data, the right to object to the processing of personal data, the right to the ineffectiveness of automated individual decision-making, including profiling, the right to portability of personal data, as well as the right to submit a proposal to initiate proceedings to the supervisory authority. If the operator processes personal data based on the consent of the person concerned, the person concerned has the right to withdraw his consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of personal data processing based on consent before its withdrawal. The affected person can exercise their rights by emailing to the address: j.krassova@arprog.sk or in writing to the operator's address.
Obligation to provide personal data
The provision of personal data is a legal requirement/contractual requirement or a requirement necessary to conclude a contract. The person concerned is obliged to provide personal data, in case of failure to provide them, the operator cannot make a room reservation.
