Valid from 25.05.2018
This privacy statement describes how we collect and use information, which may include personal data, that you provide when you visit us in person, by post or through our website. This statement also defines how we treat your information and how you can access and modify it.
The Operator
Premium Star Hotels a.s., Zochova 3, 811 03 Bratislava, ID No.: 47 432 039, riaditel@sliezskydom.sk, +421 908 788 115
Contact person
+421 907 741 897, marketing@sliezskydom.sk, Marketing & Sales manager
+421 905 843 671, hotelmanager@sliezskydom.sk, Hotel Manager
Concept of Personal Data Processing
Processing of personal data means any operation or set of operations which the Controller, the Processor or an authorised third party systematically carries out with the personal data of the Data Subject; this includes, in particular, the collection of personal data, storage on information carriers, disclosure, alteration or modification, retrieval, use, transmission, dissemination, disclosure, storage, exchange or combination, blocking and destruction of the personal data of the Clients.
Personal data processing principles
In processing the Personal Data of Data Subjects, the Operator shall, to the greatest extent possible, respect and honour the highest standards of personal data protection, in particular observing the following principles:
- personal data are processed per the relevant legislation (in particular per the General Data Protection Regulation No. 2018/18 Coll. and the EU Data Protection Regulation GDPR) in a fair and transparent manner;
- when processing personal data, the Operator takes care to protect their rights and fully respects them;
- personal data are always processed in a clear and comprehensible manner for the stated purpose by the stated means and in the stated manner;
- only those personal data are collected whose processing corresponds to the stated purposes (is proportionate, relevant and necessary for the fulfilment of those purposes);
- they are retained only for as long as is required in relation to the purposes for which they are processed;
Types of personal data collected
You can always choose what personal data you want to provide to us. However, if you decide that you do not wish to provide specific data, we will accept this, but the quality of the information we provide to you may be affected. This does not apply if a particular type of personal data needs to be processed to comply with a legal requirement.
The personal data we collect includes: first name, last name, telephone number, and e-mail address.
Automatically collected personal data and third parties
To improve the quality of care for you, the website uses so-called cookies. Cookies are small text files containing specific data that the Operator uses to recognise the computer of the Data Subject when they communicate with the Operator.
Cookies are stored on the Data Subject's hard drive via an Internet browser. The storage of selected cookies is only ever carried out based on the Data Subject's consent, with the proviso that the storage of cookies may be refused at any later time within the Internet browser's settings.
These service providers are bound by a confidentiality agreement also applicable within the EU and cannot use your personal data for their own or any other purposes.
Method of collection of personal data
E-mail communication
Subscription to NewsLetters
E-Shop registration
Legal bases and purposes for processing personal data
On legal grounds:
1. Compliance with legal requirements:
- In some cases, the personal data provided may be used in the preparation of pre-contractual relationships or to enforce the terms of a contract(s) (e.g. gift agreement, cooperation agreement, etc.) or
- to comply with the requirements of law enforcement authorities as required by law.
2. Legitimate Interests:
- Such as providing appropriate website content, e-mails and newsletters to improve and promote our products, services and website content, administrative purposes.
Where we use your personal data to pursue our legitimate interests, we will always put your rights and interests above our rights and interests.
Where required by applicable law, we will ask for your consent. You may withdraw your consent at any time by sending an e-mail to the Responsible Person.
We use your other personal data for the following purposes:
- for the purpose of sending campaign newsletters
- for the purpose of sending you news about our activities
- for the purpose of sending you answers to your questions received, for example, via the contact form on the website in question
- for the purpose of improving your experience when using our website. We use personal data for surveys and analyses that may be carried out by a third party on our behalf. We may share or disclose the results of such research to third parties in an anonymous and aggregated form. We also use your personal information for analytical purposes and to improve our services, our users' experience, and the functionality and quality of our online services. If we use automated procedures to process personal data that legally affect or significantly affect you, we will put in place appropriate measures to protect your rights and freedoms
- for the purpose of displaying relevant advertising based on an analysis of your behaviour on our website.
International transfer of personal data
We process your personal data through MailChimp, a service that manages and sends electronic mail to your e-mail address. This service is operated by The Rocket Science Group, LLC, located at 675 Ponce de Leon Avenue NE, Suite 5000, Atlanta, Georgia 30308, United States of America, which is on the list of countries that guarantee an adequate level of protection of personal data according to the European Commission.
Data retention
Where your personal data is processed for the purposes of the performance of a contract, the Operator is legally obliged to process it for the duration of the contractual relationship, generally for five years, unless the applicable legislation provides for a more extended period.
In other cases, we will retain your personal data until consent is withdrawn, for two years, or as long as necessary to provide services to you, comply with relevant legislation, and resolve disputes with either party.
Your rights
We want you to be in control of the use of your data. The following options are available to you:
Right of access to personal data: you have the right to request confirmation as to whether your personal data is actually being processed, and if it is, you have the right to access that personal data and the information set out. In this case, the Operator will provide the Data Subject with a copy of the personal data being processed.
Right to erasure ("right to be forgotten"): You have the right to have your personal data erased by the Operator without undue delay if one of the grounds provided for by law is indicated. In particular, if the client withdraws said consent to processing personal data. However, in some instances, the Operator is neither obliged nor entitled to comply with this request, in particular where the processing of personal data would be necessary to comply with a legal obligation.
Right to restriction of processing: you have the right to have the Operator restrict the processing of your personal data if one of the grounds provided for by law is indicated, for example, because of the inaccuracy of the personal data processed or the unlawfulness of its processing.
Right to data transfer: if you have provided the Operator with your personal data, the processing of such personal data is based on your consent or is carried out for the purpose of performance of a contract and is carried out by automated means, you have the right to obtain such personal data in a structured, commonly used and machine-readable format and to transfer it to another operator. You may also request that the Operator transmits this personal data directly to another operator.
Right to rectification: you have the right to have inaccurate personal data processed about you corrected by the Operator without undue delay. You also have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to object and withdraw consent to the processing of personal data: if we use your personal data based on your consent, you have the right to withdraw that consent at any time in line with applicable law.
Right to lodge a complaint: if you believe that the processing of your personal data violates the relevant legislation, in particular the Regulation, you may lodge a complaint with the Office for Personal Data Protection at https://www.dataprotection.gov.sk/ or Hraničná 12 820 07 Bratislava 27.
Questions and complaints
If you have any questions or concerns about the processing of your personal data, or if you wish to exercise any of your rights under this Notice, you may contact the Responsible Person listed above. You may also contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, with questions or complaints.
Changes to this notice
Should there be any changes that affect you (e.g. if we wish to process your personal data for purposes other than those set out above), we will inform you before putting them into effect.