These are the rules for processing personal data in HOPE DEVELOPMENT, s.r.o., the operator of BIO HOTEL & WELLNESS ZLATÝ HÝĽ**. Here's a summary of the introductory part of the document:
Operator Information:
The company HOPE DEVELOPMENT, s.r.o. is the operator of BIO HOTEL & WELLNESS ZLATÝ HÝĽ**.
Company Identification Number (IČO): 366 017 81
Registered Address: Hýľov 157, 04412, Nižný Klátov
Registered in the Commercial Register: Košice I District Court, Section: Sro, Insert No. 17529/V.
Purpose of the Rules:
These rules govern the processing of personal data of visitors to the website www.zlatyhyl.sk, including:
Customers who make a reservation for accommodation or services via the website, sign up for the newsletter, or contact the company via the contact form.
Guests staying at the hotel or visiting the premises.
HOPE DEVELOPMENT, s.r.o. acts as the data controller, meaning it determines the purpose and methods of processing personal data.
DATA PROTECTION COMMISSIONER
In accordance with §44 of the Act no. 18/2018 and Regulation (EU) 2016/679, oversight of personal data protection is carried out by the responsible person within HOPE DEVELOPMENT, s.r.o.. If you have any questions or concerns regarding personal data processing, you can contact them via email at info@zlatyhyl.sk.
THE CATEGORIES OF DATA PROCESSED
1. Data provided by customers
When interacting with the BIO HOTEL & WELLNESS ZLATÝ HÝĽ** website, personal data is processed through systems like Ellipse and email clients. The following data categories are processed:
Contact Information: The data provided through contact forms on the website or when making a reservation, such as email address, name, phone number, and payment details.
Newsletter Subscription: Information processed includes email addresses, and for customers, this can also include name, address, phone number, and payment details.
2. Data provided by accommodated guests
Upon check-in at the hotel, personal data is processed to register guests in the hotel system. This includes:
Personal Information: Name, surname, permanent address, and ID card (or other identity documents).
Special Categories of Personal Data: In the case of persons with disabilities (ZŤP), data about their health status, specifically the disability card, is processed.
3. Social network data
If you contact the hotel via social media platforms (such as Facebook, Instagram, Tiktok, or LinkedIn), the operator may gain access to public information from your social media profile, such as:
Name, profile picture, age category, gender, and other public details based on your settings.
Information like the date of birth and location.
4. Data collected via cookies
If you accept the use of cookies, the operator will collect information about your visit to the website, including the pages you viewed, the products you browsed, and other online activities.
5. Data obtained from the CCTV system
The company processes video footage from the monitored areas of the premises. This footage captures people moving in those areas but only processes basic personal data (such as facial images).
Important note: The operator does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or similar.
PURPOSE OF PROCESSING PROVIDED DATA
1. Reservations and Accommodation Registration
We process your personal data such as name, surname, and contact details for the purpose of handling and processing your reservation. Without providing this data, the operator cannot record your reservation for accommodation or services. For accommodation registration, we process your name, surname, address, ID card number, bank account number, or payment card details.
2. Discounts for Disabled Guests (ZŤP)
To provide a discount for persons with disabilities (ZŤP), we process the ZŤP card that guests present at check-in.
3. Hotel Promotion and Commercial Announcements
To send promotional announcements and newsletters, we primarily use your email address. Processing occurs based on your consent, which you grant voluntarily when registering for the newsletter or making a reservation. This consent is entirely voluntary, and even if you do not provide it, you can still fully use our website. You can unsubscribe from the newsletter at any time.
4. Targeted Advertising and User Preferences Analysis
When using cookies, we process data about your visit to our website, the services you view, and other activities. This is only possible with your consent for using cookies, which is voluntary. Based on this data, we can better customize website content or target advertisements according to your preferences. If you do not wish for cookies to be stored, you can change your browser settings.
5. Property and Security Protection
We process video footage from the camera system for the purpose of protecting property from theft or damage, as well as for protecting life and health, workplace safety, fire protection, and crime prevention.
LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
1. Contractual Relationship
We process your personal data primarily for the purpose of fulfilling the contractual relationship established when you make a reservation for accommodation or order services.
2. Legitimate Interest of the Operator
Processing personal data from the video surveillance system is based on the legitimate interest of the operator in accordance with Article 6, Paragraph 1, Letter f) of the Regulation (EU) 2016/679 and Section 13, Paragraph 1, Letter f) of the Law.
3. Consent for Processing Special Categories of Data (ZŤP)
Processing special categories of data (ZŤP card) is based on your consent.
4. Compliance with Legal Obligations and Other Legitimate Interests
In addition to fulfilling the contract, we process personal data based on legal obligations, other legitimate interests, and your consent.
ACCESS TO PERSONAL DATA
1. Authorized Personnel in the Company
Personal data is processed by authorized personnel of HOPE DEVELOPMENT, s.r.o. These individuals are bound to confidentiality, which continues even after their cooperation with the company ends.
2. Processors
The company may assign other entities (so-called processors) to process personal data. These processors process data according to the operator's instructions and for the purpose determined by the company.
3. Providing Data to State and Judicial Authorities
Personal data may be provided to state or judicial authorities if required by law. If processing requires your consent, data is provided to processors only if you have granted consent.
RETENTION PERIOD OF DATA
The operator processes personal data for the purpose of fulfilling the contract throughout the entire period of handling the reservation and during the entire stay of the guest. By law, certain data is stored for a period of 3 years.
Newsletters are sent to subscribers for as long as their consent to receive them is valid or until they unsubscribe, or until an objection to the processing of their data for this purpose is raised. However, newsletters are sent for a maximum of 5 years. After this period, the company will request a new consent.
Data collected for marketing purposes through cookies is processed by the company for the duration of the consent for cookie usage, i.e., for the period during which you allow cookies to be stored in your browser, or until an objection is raised against the processing of your data for this purpose.
Further processing of personal data beyond the aforementioned periods is carried out only if necessary to fulfill the obligations imposed by applicable legal regulations.
RIGHTS OF THE DATA SUBJECT
As a data subject whose personal data we process, you have the following rights under Act no. 18/2018 Coll. on the protection of personal data:
1. Access to Personal Data
You can request confirmation whether your personal data is being processed in our company.
2. Correction of Personal Data
If your personal data is inaccurate or incomplete, you can request corrections. Only up-to-date data will allow the operator to process your order correctly.
3. Deletion of Personal Data (Right to be Forgotten)
You may request the deletion of your personal data or its restricted processing if it is no longer necessary for the stated purposes or if the operator no longer has a legal reason to process your personal data, including in cases where you withdraw your consent to further processing. In compliance with the mentioned conditions, the operator will fully or partially delete your data.
4. Data Portability
You have the right to request the transfer of personal data that we process based on your consent to another entity. The operator will provide your personal data in a commonly used format to you or another controller according to your wishes.
5. Withdrawal of Consent
If your personal data is processed based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, via our contact address, or by submitting a written notice of withdrawal.
6. Restriction of Processing
Under certain circumstances, you are entitled to request that we stop processing your personal data. For example, this applies if you believe that the personal data we hold about you is inaccurate or if you believe that we no longer need to use your personal data.
Additionally, customers may object to the processing of their personal data in the case of receiving commercial communications or the evaluation of purchasing preferences, after which the operator will immediately cease processing personal data for these purposes.
7. Right to Lodge a Complaint
If you believe that we process your personal data unfairly or unlawfully, you can submit a complaint to the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, phone: +421 2 3231 3214, email: statnydozor@pdp.gov.sk.
Privacy Policy of Hope Development, the Operator of BIO HOTEL&WELLNESS ZLATÝ HÝĽ****
Effective from: December 13, 2022
For the company, Hotel Director
Bc. Dominika Mazarová