Protection of personal data

Your personal data is processed in accordance with all generally binding legal regulations in force in the Slovak Republic, in particular, but not exclusively, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on Personal Data Protection as amended (hereinafter referred to as the "Personal Data Protection Act").

In these rules, you will find details about what personal data our company processes, for what purpose, why we need your consent to process personal data. You will also find here information about us, a summary of your rights and how to contact us and the procedure if you want to find out more information about the processing of personal data or if you want to exercise your rights arising from the GDPR.

The operator is:

Property operator: 

DAMIAN JASNA HOTEL RESORT & RESIDENCES s.r.o. 

Pribinova 25
811 09 Bratislava - Old Town district

Bank connection: Tatrabanka, a.s., SWIFT: TATRSKBX

IBAN: SK79 1100 0000 0029 4014 0571 

VAT number: SK 2121855637

VAT number: 2121855637

ID: 54998 778

Registration: OR SR Municipal Court Bratislava III, section Sro, Insert number: 165338/B

Statutory body: Ing. arch. Pavol Jakubec, company manager

Andrej Kollár, company manager They act jointly or by Radim Beneš's power of attorney, e-mail: osobne.udaje@damianjasna.sk

As of November 29, 2023, the external supplier of accounting services is:

ADVANCES PLUS s. r. or. Líšcie udolie 12 84104 Bratislava. ID: 50547232, VAT ID: SK2120375796.

For the purposes of personal data protection, the person concerned is considered to be:

• any natural person who uses the services offered by our company,

• any natural person who is an authorized representative of a customer of our company who uses the services offered by our company (in any legal relationship with the customer),

• any natural person who visits our company's website,

• any natural person who visits our company's stores in the territory of the Slovak Republic.

We use the personal data you provide us exclusively to provide you with quality services and also to improve our service offer for you.

Purpose of personal data processing:

-         purchase and sale of goods via the Internet, including its delivery to the client

-         client records

- records of incoming and outgoing mail (letters, suggestions, complaints and others) in paper or electronic form

- reservations, sale and use of services by clients in the operator's facilities and control of their use

-          processing of accounting documents and the agenda associated with its processing

-          provision of discounts, bonuses, loyalty programs

 Personal data storage period and legal basis for personal data processing:

We process personal data depending on whether you are our client, or just want to become one, or are a participant in a loyalty program. The processing of personal data is necessary for the fulfillment of the transport contract, i.e. for the use of our services. We only keep your personal data for as long as necessary. If you are our current or former client, we store your personal data for the duration of the transport contract, or participation in the loyalty program, later for the period of fulfillment of legal obligations (e.g. the obligation to archive accounting documents is in accordance with Act No. 431/2002 Coll. on accounting for 10 years). If you are a member of the loyalty program, we store your personal data according to the previous sentence or until you withdraw your consent. The processing of your data is necessary for the performance of the transport contract to which you are a party or for us to take measures based on your order/reservation before concluding the transport contract. In relation to the loyalty program, the legal basis is your consent.

Scope of processing:

We process client data, which is necessary for the execution of orders, i.e. for the conclusion of a contract and the provision of a loyalty program. This is the following personal data: title, first name, last name, place of residence, temporary residence, delivery address, e-mail, telephone number, date of birth, social security number, IP address, cookies, bank account details, signature, reservation period.

Cookies:

To customize the content of our websitewww.damianjasna.sk. We use cookies for your preferences. Cookies are small data files that our website sends to your computer or mobile device, where they are stored. If you do not agree to the use of cookies, set the rules for the use of cookies in your browser. If you disable the use of cookies, the functionality of the website may be limited.

Source personal data:the originator of personal data is the clients themselves. Personal data do not come from publicly accessible sources. Personal data is processed for the above-mentioned purposes, mainly through communication with clients, written correspondence, by telephone or electronically.

Information on whether automated decision-making takes place, including profiling:the provided personal information does not go through an automated decision-making process and on the basis of the provided personal data there is no profiling within the meaning of Art. 22 GDPR.

Rights of the data subject:

In accordance with the GDPR, we would like to inform you about the rights related to the processing of your personal data.

1. the right to access personal data

According to Art. 15 GDPR, you have the right to obtain confirmation from us as to whether your personal data concerning you is being processed by our company, and if so, you have the right to obtain access to this personal data. According to no. 15 par. 3 GDPR, we will provide you with a copy of the personal data that is being processed. We may charge a reasonable administrative fee for any additional copies you request. If you submit a request by electronic means, the information will be provided in a commonly used electronic form, unless you request otherwise.

At the same time, you have the right to obtain information about the processing of your personal data to the following extent:

a) processing purposes,

b) categories of affected personal data,

c) recipients or categories of recipients to whom personal data have been or will be provided, especially recipients in third countries or international organizations,

d) if possible, the expected period of storage of personal data or, if this is not possible, the criteria for its determination,

e) the existence of the right to request from the operator the correction of personal data relating to the person concerned or their deletion or restriction of processing, or the right to object to such processing,

f) the right to file a complaint with the supervisory authority,

g) if the personal data were not obtained from the data subject, any available information regarding their source,

h) the existence of automated decision-making, including the profiling referred to in Article 22 paragraph 1 and 4 and in these cases at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing for the person concerned,

i) if personal data is transferred to a third country or an international organization, the data subject has the right to be informed of adequate guarantees according to Article 46 regarding the transfer.

2. right to repair

According to Art. 16 GDPR, you have the right to request that we correct incorrect personal data concerning you without undue delay. With regard to the purposes of processing, you have the right to supplement incomplete personal data, including by providing a supplementary statement.

3. right to erasure (right to be “forgotten”)

In accordance with Art. 17 GDPR, you have the right to request the company DAMIAN JASNA HOTEL RESORT AND RESIDENCES, s.r.o. to delete personal data concerning you without undue delay and we are obliged to delete personal data without undue delay if any of the following reasons are met:

a) personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;

b) you revoke the consent on the basis of which your personal data is processed, according to Article 6 par. 1 letter a) or Article 9 par. 2 letters a) GDPR, and if there is no other legal basis for processing;

c) you object to the processing according to Article 21 par. 1 GDPR and there are no valid reasons for the processing or you object to the processing according to Article 21 para. 2 GDPR,

d) personal data were processed illegally;

e) personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which we are subject;

f) personal data were obtained in connection with the offer of information society services according to Article 8, paragraph 1 GDPR.

With reference to Art. 17 par. 3 GDPR deletion of personal data is not possible if the processing is necessary:

a) to exercise the right to freedom of expression and information;

b) to fulfill a legal obligation that requires processing according to Union law or the law of a Member State to which we are subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,

c) for reasons of public interest in the field of public health in accordance with Article 9 par. 2 letters h) and i), as well as Article 9 par. 3,

d) for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89, paragraph 1, if it is likely that the right referred to in paragraph 1 will make it impossible or seriously difficult to achieve the goals of such processing, or

e) to demonstrate, exercise or defend legal claims.

4. the right to limit processing

According to Article 18 of the GDPR, you have the right to ask us to restrict the processing of your personal data in one of the following cases:

a) you challenge the correctness of your personal data during the period allowing DAMIAN JASNA HOTEL RESORT AND RESIDENCES, s.r.o. verify the correctness of personal data,

b) the processing of your personal data is illegal and you object to the deletion of personal data and instead request a restriction of their use,

c) the company MBM Tatry s.r.o. no longer needs your personal data for processing purposes, but needs them to demonstrate, exercise or defend your legal claims,

d) you object to the processing according to Article 21 par. 1 GDPR, until it is verified whether there are legitimate reasons on the part of DAMIAN JASNA HOTEL RESORT AND RESIDENCES, s.r.o. outweigh your legitimate reasons.

If, on the basis of the above, the processing of your personal data is restricted, such personal data, with the exception of storage, is processed only with your consent or to prove, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

If the processing of personal data is restricted in accordance with no. 18 GDPR, we are obliged to inform you before the restriction of processing is lifted.

5. the right to data portability

According to Art. 20 GDPR, you have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another operator without us preventing you from doing so in any way, if:

a) the processing is based on your consent according to article 6 par. 1 letter a) GDPR or Article 9 par. 2 letters a) GDPR, or on the contract according to Article 6 par. 1 letter b) GDPR, a

b) the processing is carried out by automated means.

6. the right to withdraw consent to the processing of personal data

Since we also obtain and process your personal data based on your consent, you have the right to revoke your consent to the processing of personal data obtained based on your consent at any time (Article 7, paragraph 3 GDPR). Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

If you revoke your consent to the processing of personal data, the contractual relationship between you and DAMIAN JASNA HOTEL RESORT AND RESIDENCES, s.r.o. will be terminated. due to the fact that without consent to the processing of personal data, we cannot continue to provide you with our services.

Despite the revocation of consent to the processing of personal data, their deletion can only occur if none of the exceptions listed in Art. 17 par. 3 GDPR.

The processing of personal data is NECESSARY to perform the service. Without processing personal data, we will not be able to provide you with services.

7. the right to object

According to Article 21 GDPR, you have the right to object at any time for reasons related to your specific situation against the processing of personal data concerning you, which is carried out on the basis of Article 6 para. 1 letter e) or f) GDPR, including objection to profiling based on the said provisions. The company DAMIAN JASNA HOTEL RESORT AND RESIDENCES, s.r.o. may not further process personal data, unless it demonstrates necessary legitimate reasons for processing that outweigh your interests, rights and freedoms, or reasons for proving, exercising or defending legal claims.

If personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing.

If you object to the processing of your personal data for direct marketing purposes, the personal data may no longer be processed for such purposes.

8. the right to file a complaint with the supervisory authority

According to Art. 77 of the GDPR, you have the right to file a complaint with a supervisory authority, especially in the Member State of your habitual residence, place of work or in the place of the alleged violation, if you believe that the processing of personal data concerning you is in violation of the GDPR.

In Slovakia, the competent authority is:

Office for the Protection of Personal Data

Hraničná 12

820 07, Bratislava 27

Slovak republic

tel.:+421232313214

e-mail:statny.dozor@pdp.gov.sk

website: http://www.dataprotection.gov.sk/.

 

The provision of personal data is a contractual requirement, i.e. a requirement that is necessary to conclude a contract.

The processing of personal data is NECESSARY to perform the service. Without processing personal data, we will not be able to provide you with services.