01. General provisions
Personal data controller pursuant to Art. 7 of the Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is Monika Répassyová M.R. (hereinafter referred to as the "Data Controller")Monika Répassyová M.R. (hereinafter referred to as the "Controller")
Contact details of the administrator:
- Address: Tichá 406, 04941 Krásnohorské Podhradie
- E-mail: booking@treehousekrasnahorka.sk
Personal data is any information about an identified or identifiable individual. An identifiable natural person is a natural person who is identifiable, directly or indirectly, by an identifier such as name, identification number, location data, network identifier, or by one or more specific elements of that individual's identity.<span style="font-size
The controller has not appointed a specific data protection officer.
02. Sources and categories of personal data processed
The Controller processes personal data provided by clients or obtained from clients on the basis of the booking system:
- Name and surname, e-mail address, home address, phone (mobile) number, date of birth, bank account.
- The Administrator processes the above-mentioned identification and contact data for the purpose of processing the reservation.
03. Lawful basis and purpose of processing personal data
- Fulfillment of the order (reservation) between the client and the administrator according to Article 6(1)(b) GDPR.
- Compliance with the controller's legal obligation under Article 6(1)(c) GDPR.
- Interest of the controller in providing direct marketing (special offers, trade communications , newsletters) pursuant to Article 6(1)(f) of the GDPR, or sending commercial communications and operating other marketing activities.Marketing activities.
- Performance of the reservation sent by the customer and the exercise of the rights and obligations arising from the relationship between the customer and the administrator. When placing an order, personal data is required for the successful fulfillment of the order (first name, last name, address, contact details). Provision of personal data is a necessary requirement for the conclusion of product rental contract and order processing, without providing personal data it is not possible to conclude the order (reservation) and processed by the administrator.
- Compliance with legal obligations towards the Slovak Republic.
04. Data retention period
The controller shall store personal data:
- For such time as is necessary to exercise the rights and obligations arising out of the relationship between the client and the administrator, to assert claims arising out of that relationship (for a period of 15 years from the termination of the order).
- For the period of withdrawal of consent to the processing of personal data for marketing purposes, up to a maximum of 1 year, as long as the personal data are processed on the basis of consent.For the period of withdrawal of consent to the processing of personal data for marketing purposes.
- After the retention period has expired, the controller shall delete the personal data.
05. Recipients of personal data
Recipients of personal data are persons:
- Persons involved in the supply of goods, services, payments, according to the contract.
- Persons providing the operation of the reservation system and other services in connection with the operation of the reservation system.
- Persons providing marketing services.
The controller does not intend to sell personal data to a third country (a country outside the EU) or to an international organisation. Precipients of personal data in third countries are providers of postal/cloud services.
06. Processors of personal data
- The processing of personal data is carried out by the controller and possibly by other providers of software services and applications for processing, which are not currently used by the controller.
07. Customer rights
Under the terms of the GDPR, customers have:
- The right of access to your personal data under Article 15 of the GDPR.
Right to rectification of personal data pursuant to Article 16 of the GDPR and, where applicable, to restriction of processing pursuant to Article 18 of the GDPR.Right to restriction of processing pursuant to Article 18 of the GDPR.
The right to erasure of personal data under Article 17 of the GDPR.
Right to object to processing under Article 21 GDPR.
The right to data portability under Article 20 GDPR.
Right to withdraw consent to the processing of personal data, by post to the contact address or by email to the email address of the data controller set out in this Privacy Policy.
Customers have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic if they suspect that their rights to the protection of personal data have been violated.
08. Terms and conditions for the security of personal data
- The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
- The controller has taken technical measures to secure the stored dataand to store the personal data in paper form.
The controller declares that only persons authorized by him/her have access to the personal data.
09. Final provisions
- By submitting an order from the online booking form, the client confirms that he/she has read the privacy policy and that he/she fully accepts it.
- The customer agrees to these terms and conditions by checking the consent box via the online booking form. By checking the consent box, the client confirms that he/she has read the privacy policy and that he/she accepts it in full.
The Administrator is entitled to change these terms and conditions. It shall publish the new version of the Privacy Policy on its website and at the same time send the new version of the Privacy Policy to the Client at the address communicated by the Client to the Controller.
