Chalet Chopok s.r.o.

Information on the processing of personal data

Chalet Chopok s.r.o., with its registered office at Dvořákovo nábrežie 8, Bratislava 811 02, Company ID (IČO): 36 864 773, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No.: 60542/B (the "Company"), as the controller of personal data, processes the personal data of its clients and of other persons concerned (together the "Data Subject") in connection with the pursuit of its business activities and the provision of its services. Where the Company processes the personal data of Data Subjects on behalf of another company, the Company acts in the capacity of a processor.

The purpose of this document is to provide Data Subjects with information, in particular, on the following:

  • which personal data the Company processes and for what purpose,
  • in what manner the Company processes personal data,
  • to whom the Company transfers personal data,
  • what rights the Data Subject has in relation to the personal data processed and in relation to the Company.

Identity and contact details of the controller/processor

– i.e. the person who processes the personal data of Data Subjects. When exercising the rights of Data Subjects, the Data Subject contacts the Company using the following details:

Company: Chalet Chopok s.r.o.
Registered office: Dvořákovo nábrežie 8, Bratislava 811 02
Contact: info@chaletchopok.sk
Telephone: +421 903 987 447
Web: www.chaletchopok.sk

Personal data, the purposes of processing for which the personal data are intended, and the legal basis for processing

The processing of personal data is necessary for negotiating a contractual relationship, for the performance of obligations arising from the contractual relationship, for compliance with obligations under legal regulations, and for the purpose of identifying the Data Subject.

The concept of processing personal data

The Company processes the personal data of Data Subjects. The concept of processing personal data covers any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Location of your personal data

The personal data of Data Subjects will be located exclusively within the European Union and the European Economic Area.

Categories of personal data

The Company processes the following categories of personal data:

  • identification and similar data of the Data Subject: first name, surname, title, identity document number (identity card or passport), permanent address, e-mail and telephone number, signature;
  • data for mutual communication (e.g. the content of mutual written or e-mail correspondence, internet data transfers and IP address);
  • data for the execution of payments (e.g. bank account number, data on the amount of payments made).

Legal basis for processing

The Company processes personal data for one or more purposes. Each processing of personal data has its own purpose. The purposes of processing personal data are divided as follows:

  • performance of a contract: personal data necessary for the performance of the parties' contractual obligations arising from the contractual relationship and their possible enforcement. The legal basis is the concluded contract to which the Data Subject is a party.
  • taxes and accounting: personal data necessary for the performance of the Company's obligations arising from the applicable legal regulations governing tax or fee obligations and bookkeeping. The legal basis is compliance with the applicable legal regulations.
  • legal compliance: personal data necessary for the performance of the Company's obligations arising from the applicable legal regulations. The legal basis is compliance with the applicable legal regulations.
  • performance of financial obligations: personal data necessary for the performance of obligations arising from the applicable legal regulations or contractual obligations. The legal basis is the concluded contract or compliance with the applicable legal regulations.
  • administration and communication: personal data necessary for the performance of the parties' contractual obligations arising from the contractual relationship. The legal basis is the concluded contract, compliance with the applicable legal regulations or the legitimate interest of the Company.
  • security and protection of operations: personal data necessary for the performance of the Company's obligations arising from the applicable legal regulations.
  • marketing and development purposes, cookies: personal data necessary for the enforcement of legal claims arising from the relevant legal act, the verification of facts relating to the legal capacity, legal competence, legal and ownership circumstances of the Data Subject, including the assessment of the ability to fulfil all obligations under the contract with the Company, demonstrating that the Company acts in accordance with the applicable legal regulations in the pursuit of its business activities, risk prevention and management, carrying out acts with the aim of maximising profit – conducting marketing activities, evaluating the effectiveness of the activities undertaken and improving their standard in the future, satisfaction surveys, surveys of the standard of services provided, the development of new products and services. The legal basis is the concluded contract, the legitimate interest of the Company, the consent of the Data Subject.

Recipients and categories of recipients of personal data

Personal data may be made available/transferred to third parties, in particular (categories of recipients):

  • to persons in the course of fulfilling the obligations imposed on the Company by the applicable legal regulations, or where this is necessary to protect the rights and legitimate interests of the Company,
    • courts, law enforcement authorities, tax administrators, court bailiffs;
    • the Office for Personal Data Protection, the National Bank of Slovakia or other supervisory authorities in the exercise of their statutory powers;
    • the Financial Intelligence Unit under Act No. 297/2008 Coll. on the prevention of money laundering and terrorist financing; etc.
  • to persons whom the Company has entrusted with the performance of contractual obligations, including the exercise of rights arising from contractual relationships; these persons will be bound by confidentiality, e.g.:
    • suppliers (accounting firm, auditor, bank, legal advisers, IT services company, physical security company, etc.)
    • employees, members of statutory bodies.

Retention period of personal data

Personal data will be retained for a limited period and will be erased at the moment when the purpose for which they are retained has been fulfilled. In the case of the purpose of performance of a contract, this means that they will be retained until all contractual obligations have been fully performed or until the rights arising from unfulfilled obligations become time-barred. In the case of the purpose of legal compliance, they will be retained until all statutory obligations have been fully performed or until the expiry of the limitation periods for the application of statutory sanctions. In the case of the purpose of the legitimate interest of the Company, until the retention of personal data for the specific purpose concerned ceases to be expedient. The rights of Data Subjects under the applicable legal regulations remain unaffected.

Rights of the Data Subject

Subject to the conditions laid down by legal regulations, the Data Subject has:

  • the right to request access to personal data concerning the Data Subject (i.e. in particular to request from the Company information on the purpose of processing personal data, the categories of personal data, the identification of recipients of personal data, the retention period of personal data, the right to rectification, erasure, restriction of processing, the right to lodge a motion to initiate proceedings before the Office for Personal Data Protection, the source of the personal data, the existence of automated individual decision-making including profiling)
  • the right to rectification of personal data
  • the right to erasure of personal data (right to be forgotten) (i.e. in particular to request from the Company the erasure of personal data whose purpose of processing has ceased or where consent to their processing has been duly withdrawn, where the Data Subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data, or where the Data Subject objects to the processing of personal data for direct marketing purposes, where the personal data are processed unlawfully, or where this follows from the applicable legal regulations)
  • the right to restriction of processing of personal data (i.e. in particular to contest with the Company the accuracy of personal data, unlawful processing, or to object on grounds relating to the particular situation which overrides the legitimate interests of the Company)
  • the right to data portability (i.e. in particular to request from the Company that the personal data of the Data Subject be provided to another controller, where technically feasible)
  • the right to object to the processing of personal data (i.e. in particular to object to the Company's processing of personal data on grounds relating to the particular situation which overrides the legitimate interests of the Company. The Company may no longer process the personal data unless it demonstrates compelling legitimate interests for the processing of personal data which override the rights or interests of the Data Subject, or grounds for the establishment of a legal claim. The right to object to the Company's processing of personal data in connection with direct marketing)
  • the right to withdraw consent (i.e. where the processing of personal data is based on the consent of the Data Subject, the Data Subject has the right to withdraw consent to the processing of personal data concerning him or her at any time, in the same manner in which the consent was given. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal.)
  • the right to lodge a motion to initiate proceedings before the Office for Personal Data Protection, Hraničná 12, 820 07, Bratislava 27, www.dataprotection.gov.sk (i.e. the Data Subject may lodge a motion to initiate proceedings before the Office for Personal Data Protection, the purpose of which is to establish whether the rights of Data Subjects have been infringed in the processing of their personal data.)

Updated 18 September 2020