Personal Data Protection and Amendments to Certain Acts
Rules for processing the personal data of the accommodated persons, or of affected persons in accordance with Act no. 18/2018 Coll. Act on Personal Data Protection and Amendments to Certain Acts ("GDPR")
Operator: INVESTCOM s.r.o.; http://www.apartmanymlynky.sk/;
seat: Račí potok 47, 040 01 Košice
ID: 31584535 VAT ID: SK2020428718
statutory representative: Vladimír Fiľakovský, phone: +421917923276, email: info@apartmanymlynky.sk
operator: Eva Hecková, phone: 0915351166, email: info@apartmanymlynky.sk
Operation: Apartments Mlynky, Mlynky - Biele vody no. 252, 053 76 Mlynky, district Ves
(hereinafter referred to as the "Operator")
As the operator of information and camera systems, I issue the following rules:
1. The affected person is considered to be: visitor, resident, parent of a child, legal representative, visitor, caller, or website user.
2. Each affected person who moves in the premises of the Mlynka Apartments, or makes a phone call, writes an e-mail and/or browses www.apartmanymlynky.sk, makes an order via www.booking.com, www.tripadvisor.com is considered a data subject and thereby expresses his voluntary CONSENT to the Operator and contractual intermediaries with the processing of his personal data.
3. The operator processes personal data in accordance with Decree of the Ministry of Economy of the Slovak Republic No. 277/2008, effective from 01.08.2008, in accordance with Act No. 135/82 Coll. on the reporting and registration of citizens' stay as amended, and every guest who is not a citizen of the Slovak Republic (foreigner) is obliged pursuant to Act no. 48/2008 Coll. on the stay of foreigners in the valid version. Pursuant to applicable laws, the Operator has a legitimate interest in processing personal data and thus fulfilling its service to the affected persons.
4. The operator monitors public spaces or during the organization of cultural and sports events for the purpose of protecting public order and safety, detecting crime or protecting property or health marked as follows:
5. The affected persons hereby acknowledge that their personal data will be protected from abuse by the Operator, employees, authorized persons and third parties, will be kept confidential and processed in the legitimate interest, for the period specified by law as follows:
camera recording max. 14 days,
applications submitted in writing or electronically 31 days,
for the purposes of records in information systems min. 1 year,
until the end of their authorized processing period or until they are deleted.
6. The operator declares that it will not provide personal data to third parties, without a contractual relationship, for further processing, mediation, marketing purposes and does not plan to transfer them to third countries. Contractual partners, intermediaries are:
www.booking.com, Booking.com (Slovakia) s.r.o.; Mickiewiczova 9 811 07 Bratislava, ID: 47618302; https://www.booking.com/content/privacy.sk;
www.tripadvisor.com, TripAdvisor LLC, 400 1st Avenue Needham, MA 02494, USA, https://tripadvisor.mediaroom.com/SK-privacy-policy;
7. The operator plans to publish any photos or video from the event on its websites, social networks, in print news, on television and on a public bulletin board only for the purposes of general presentation. The personal data obtained are not subject to profiling or automated decision-making. The operator bears no responsibility for photo and video documentation made by other persons.
8. Rights of the person concerned:
the right to know who processes what and why;
right to restriction of processing;
the right to access your data;
the right to object;
the right to accuracy and correction of personal data;
the right to withdraw your consent to the processing of personal data at any time;
the right to erasure and the right to be forgotten;
the right to comment on automated decision-making and profiling;
the right to transfer your data;
the right to file a complaint with a supervisory authority.
9. REQUEST: The consent can be revoked by the affected person at any time in the Application submitted to the Operator, where he clearly states his name, surname, phone number, e-mail, residential address. In the written request, it must be clear who claimed the right, what is claimed and when, the applicant's signature; whereby one copy of the application/minutes is made for the person concerned. The withdrawal of consent is effective on the day of its delivery. The right to delete data may be limited by the legal obligation to retain data in accordance with the relevant laws. (see the form "Request of the person concerned")
10. COMPLAINT: Every affected person has the right to file a complaint if he believes that his request was not satisfactorily handled by the Operator. The Office informs the affected person within a reasonable period of time about the status of processing the complaint and about the result of the investigation of the complaint. The supervisory authority is an independent public authority: Office for the Protection of Personal Data (hereinafter "ÚOOÚ"), address: Hraničná 12, 820 07 Bratislava 27, Slovak Republic, phone: +421/2/32313214; e-mail: statny.dozor@pdp.gov.sk; https://dataprotection.gov.sk/uoou/. Full text of Act No. 18/2018, Coll.: https://www.slov-lex.sk/static/pdf/2018/1
