Notice on the processing of personal data for guests of the company
GOLF INTERNATIONAL s.r.o.
Prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) and with Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts.
The purpose of this document is to provide you, as the data subject, about whom the company
GOLF INTERNATIONAL s.r.o processes personal data, with information pursuant to the Regulation, in particular
Data about us as the processor and to give you contact information for the responsible person
List or range of recipients and intermediaries to whom your personal data may be provided
Information on the scope of data we process about you
The scope of purposes for which we may use your personal data and the legal basis for processing
Information on your rights and the manner in which you can exercise them
Part 1 – Contact details of the controller
GOLF INTERNATIONAL s.r.o.
Tatranská 754, Veľká Lomnica, 059 52
IČO: 36454761
DIČ: 2020017890
IČ DPH: SK 2020017890
In insert no. 11101/P registered in the Commercial Register of the District Court Prešov, Section Sro,
Statutory body: Ing. Sylvia Hrušková, managing director
Bank account: Tatra Banka, a.s.
IBAN: SK14 1100 0000 0026 2638 0233
Part 2 – Contact details of the responsible person
GOLF INTERNATIONAL s.r.o. has appointed a responsible person /data protection officer/, whose task is to supervise compliance with the rules on the protection of personal data pursuant to the Regulation. If you need to obtain general information and request to exercise your rights pursuant to the Regulation, you can do so at international@golfinter.sk , 052 466 1111.
Contact person /data protection officer/: Ing. Ján Chmelnický
Part 3 – Legal basis and purpose of processing personal data
GOLF INTERNATIONAL s.r.o. provides its services on a contractual basis but also on the basis of an order via email, telephone call or direct sales on site and its activities are regulated by a number of legal regulations that require the collection and processing of personal data. However, there are situations in which the processing of personal data is a legitimate interest of GOLF INTERNATIONAL s.r.o., or in which we request your consent to their processing.
The purpose of the processing is:
Providing hotel services
Marketing communication
Providing other services related to the purpose of the business and trade license
The legal basis for the processing of your personal data is generally:
1/ processing is necessary for the performance of a contract to which the data subject is a party or for measures to be taken prior to the conclusion of a contract at the request of the data subject.
Processing of personal data for the performance of a contract usually includes a large number of activities
Ordering a hotel service and determining local tax for a specific person
Ordering a hotel service by a legal entity
Ordering a hotel service by a travel agency or tour operator
Ordering a service related to the business of GOLF INTERNATIONAL s.r.o.
Contract based on an order placed with the above examples
Invoicing based on the above examples
Handling complaints and claims
Employee of GOLF INTERNATIONAL s.r.o.
2) fulfillment of a legal obligation
In cases where data are processed for the purpose of fulfilling the company’s legal obligation, the consent of the data subjects is not required. The data subject in this case may be not only a guest, but also an employee.
In such cases, the company is entitled to obtain and further process your personal data to the extent and for the purposes stipulated by special regulations related to the purpose of providing hotel services and other services of GOLF INTERNATIONAL s.r.o. In many cases, the legal regulation also determines the minimum period for which the company is obliged to process the data and the related purposes for which the data must be processed or directly lists the processing activities that must be performed. If the data subject refuses to provide personal data, the service provided cannot be concluded.
Act No. 431/2002 Coll. on Accounting, as amended
Act No. 595/2003 Coll. on Income Tax as amended
In accordance with the law, the company monitors the Hotel premises using video or audio recording with a marking of the monitoring area, while the recorded data can be used for the purposes of detecting crimes, identifying their perpetrators and searching for them, especially for the purposes of protection against criminal activity. The company may provide the video and audio recording to public authorities at their request. If the recorded data is not used for these purposes, the company will destroy it immediately after 7 days.
3/ processing for the purpose of legitimate interests pursued by the company
A typical example of data processing for the purpose of legitimate interests is processing related to:
Internal
and administrative processes
Image recordings
For the purpose of direct marketing in the event that we have obtained your data when providing products or services
When processing personal data for the purpose of legitimate interests, the company must assess in the manner set out in the Regulation whether the legitimate reasons on the part of the operator outweigh the legitimate reasons of the data subject.
You have the right to object to the processing of personal data for the purpose of the operator’s legitimate interest.
4/ processing for archiving purposes and for statistical purposes
In certain situations, the company may decide, even after the original purpose of processing has been fulfilled, to continue to process some personal data for statistical purposes. In such a case, the company will take measures to protect the rights of the data subject, in particular to ensure that the data are processed separately, are not used for other purposes, are anonymized, if possible, during processing and the outputs from them are anonymized statistical data that will no longer have the character of personal data.
5/ processing for the establishment, exercise or defence of legal claims
Cases where data is processed on the basis of consent which is later withdrawn and the data is necessary for the establishment, exercise or defence of legal claims.
6/ consent of the data subject
In cases where the legal basis is your consent, the company will not make the provision of its services conditional on your consent. Consent must therefore be freely given and revocable. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Section 3.2 Scope of processing personal data
The company usually processes your data to the following extent:
Identification data / name, surname, maiden name, permanent address, birth number, date of birth, nationality, type and number of identity document, address of place of business, business purpose, official register designation, registration number
Contact data / contact telephone number, fax number, e-mail address, temporary residence address
Camera recordings / in particular of the premises in which employees carry out payment transactions with guests
The company obtains this data directly from you
Section 4 – Provision of your personal data to other persons
The company processes your personal data mainly through its employees, who are bound by a duty of confidentiality and may process your personal data only to the extent and in a manner that is necessary for the performance of their work duties.
However, in order to achieve the processing purposes set out above, it may be necessary for the Company to provide your personal data to other recipients. A recipient, within the meaning of the Regulation, is a natural or legal person, public authority, agency or other entity to which the personal data are provided, regardless of whether it is a third party.
The legal basis for providing your personal data to recipients may be a legal obligation, your consent, a written instruction, necessity for the performance of a contract and the legitimate interest of the Company or a third party.
Depending on the circumstances of your relationship with the Company, the recipients of your personal data may be:
Companies to which we have assigned receivables
Law firms and audit firms
Court experts
Insurance companies
Government authorities
Intermediaries
The Company may use third parties to provide services, which may include processing personal data on behalf of the Company and for the purpose and in the manner specified by the Company.
Travel agencies
Travel agencies
Event companies
Part 5 – Transfer of personal data to a third country
Your personal data is processed by the company within the Slovak Republic, maximum within the EU, as it may use other travel agencies and travel agencies.
Part 6 – Processing period of personal data
Your personal data is processed by manual and electronic means in a manner that ensures their security, integrity and availability.
The period for which personal data is processed and stored depends on the purpose of the processing and is determined by the company, as the controller, or by legal regulations. Legal regulations stipulate the minimum periods for which the company is obliged to store the data:
In cases where the company as the controller itself determines the period for processing personal data, this period is determined so that it is appropriate to the purpose for which the data is processed.
Legal basis for processing
way, but at the same time the company has an obligation to protect your data from unauthorized access and modification. The company must therefore verify your identity so that you and the company are sure that the information will not reach an unauthorized person or that your rights will not be abused. For this reason, the company recommends that you exercise your rights by submitting a request to our email address /in this case, the company may request that you verify your identity, or submit the request directly to the Hotel International/ or in person at the Hotel International.
If your identity is not verified, the company reserves the right not to act on such a request.
If the data subject’s requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the company may either:
Request a reasonable fee taking into account administrative costs of 10 euros/request
Refuse to act on the request
If you exercise your right to rectification, erasure or restriction of processing, the bank shall inform each recipient to whom the personal data have been disclosed that such rights have been exercised, unless this proves impossible or involves disproportionate effort.
Section 7 – Right to access data
You have the right to obtain from us as the controller confirmation as to whether personal data concerning you are being processed and, if so, access to such personal data and the following information:
Purposes of processing
Categories of personal data concerned
Recipients or categories of recipients
Intended retention period of personal data
Existence of the right to request rectification, erasure, restriction of processing, objection
On your request, we will provide you with a copy of the personal data being processed.
However, the right to obtain a copy of personal data must not adversely affect the rights and freedoms of others, in which case the interests of others may be the protection of the personal data of another person.
If we process a large amount of information in relation to your person, you may request that you specify which information or processing activities the request concerns.
If you submit your request by electronic means, the information will be provided in a commonly used electronic format, unless you request otherwise.
Right to rectification
The company aims to process accurate and complete personal data. However, if you are aware that this is not the case, you have the right to have the company correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.
Right to erasure
As a data subject, you also have the right to obtain from the company without undue delay
Erasing of personal data concerning you, and the company is obliged to erase such personal data without undue delay if one of the following reasons applies:
The personal data are no longer necessary for the purposes
You withdraw your consent on the basis of which the processing is carried out and there is no other legal basis for the processing
You object to automated processing
The personal data have been processed unlawfully
This right may not apply if the conditions are met, for example if the processing is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing
In cases provided for by the Regulation, you have the right to request that the company restrict the processing of your personal data in the manner provided for by the Regulation
Right to portability
In cases where the processing of your data is carried out by automated means and is based on consent or a contract, you have the right to receive the personal data concerning you that you have provided to the bank in a structured, commonly used and machine-readable format and you have the right to transmit these data to another controller, directly, if technically feasible.
Right to object
You have the right to object at any time to the processing of personal data that is carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. In these cases, the company will assess whether the legitimate interests of the bank outweigh the reasons you have stated in your objection.
If your personal data are processed for the purposes of direct marketing, including profiling, due to the legitimate interest of the bank, you have the right to object at any time to the processing of your personal data; if you have objected, your personal data may no longer be processed for the purposes of direct marketing.
Automated individual decision-making, including profiling
Profiling is the automated processing of your personal data, which consists of using these personal data to evaluate certain personal aspects of you, in particular to analyze or predict aspects related to your performance at work, financial situation, health, personal preferences, interests, reliability, behavior, location
or movement.
Automated decision-making based on profiling is a decision made by a computer program on the basis of the result of profiling. Where such automated decision-making based on profiling produces legal effects concerning you or similarly significantly affects you, the Regulation attaches to it a specific right, namely the right to request that that decision not apply to you.
Section 8 – Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the Regulation.
These conditions are valid with effect from 25.05.2018