Personal Data Protection

Welcome to www.chalupky.sk. When using our website we recommend that you thoroughly read these rules of processing personal data, which we follow when processing personal data you have provided.

1. Introduction

Your privacy is important to us and therefore we try to ensure a high level of protection of your personal data during its processing as well as to maintain transparency in the processing in accordance with Regulation of the European Parliament and of the Council (EU) 2016/679 from 27 April, 2016, on protection of personal data and repealing Directive 95/45/EC (General Data Protection Regulation) (hereinafter as „GDPR“).
For the purposes of the GDPR, the controller determining the purpose and the scope of processing of the personal data provided through one of the functionalities of this website is company Dedinka pod Salatínom, s.r.o., established at Okružná 94/8, Liptovská Štiavnica, Business ID: 359 40 115 , VAT reg. no.: SK2022028910 (hereinafter as „Controller“). If you have any questions regarding processing of the personal data we obtained from you through one of the functionalities of this website, or if you want to exercise any of your rights under GDPR provided below, please contact us via written submissions addressed to the Controller’s registered office address provided above or via e-mail address info@chalupky.sk.

2. What personal data we process

A. Personal data from booking and contact forms

You can use the contact forms on our website to request more information about our services. In order to be able to provide the requested service or information to you, we need to process the following contact personal data: name, surname, mail address, e-mail address, phone number.

B. Minors

We do not process personal data of, or provide our services to, persons under the age of 18. If you are under the age of 18, you will need consent of your legal representative in order to use our services or for any other legal acts.

3. Method of processing of personal data

You personal data will be handled responsibly and in accordance with the European legislation in force. We process personal data using automated as well as manual tools. All data is stored on protected servers located in the European Union. Data is not published, transmitted or processed outside of EU countries and it is not made available or provided to third parties, with the exception of entities and processors specified under point 8 of these rules.
All data that you enter in the on-line forms are transmitted in encoded form by SSL certificates (Secure Socket Layer). Data processing is performed in particular by means of computer technology, which allows us to ensure the necessary safety, to reduce the risks of unauthorized manipulation or to prevent destruction or loss of the data. Personal data is protected as far as possible using modern technologies which correspond to the state of technological development and to the level of the risk of misuse.
Access to personal data is restricted only to our authorized and instructed personnel. We undertake to maintain technical and organizational measures which prevent misuse, damage, loss or destruction of personal data. We assure you that our employees are obliged to maintain secrecy with regard to personal data and with regard to safety measures the disclosure of which would be a threat to the safety of your personal data.
If you are interested in a personal meeting with our expert consultant or business representative, and if he/she is our authorized contracted processor, we will provide your personal data to him/her for the purposes of provision of the requested service. He/she will process your personal data only for the purposes of provision of the service or information you requested and only for the time necessary for its provision. The processor processes personal data only to this extent and in accordance with the legislation in force. At the same time your personal data is protected by conclusion of a contract containing the obligation of secrecy during the contract validity and after.

4. Duration of personal data processing

Your personal data is stored for the time necessary in order to fulfill the purposes for which the data was obtained. Personal data processed due to ordering of services will be stored in our company for 10 years from issuance of the invoice in accordance with the Income Tax Act as amended.

5. For what purposes we process personal data

If you show interest in our services, and in a personal meeting, or if you have a question regarding our services, we will process your personal data in the scope under points 2.A and 2.B on the legal basis of legitimate interests.
If you decide to use our paid services on the basis of an order, or a contract, we will store the personal data you have provided in the scope necessary for fulfillment of the contract on the legal basis of contract fulfillment, and only for the purposes of fulfillment of obligations with regard to the services provided.
For sending of marketing messages we store minimal data (email) on legal basis of your consent.
6. Your rights regarding processing of your personal data
The GDPR confers a considerable scope of rights on you which we respect and allow you to exercise in full extent. In the context of exercising your rights you are entitled in particular to:
• to request a copy of your personal data we store and a description of how we use this data
• to request a correction of your personal data we store, if you think this personal data could be inaccurate, outdated, incorrect
• to request deletion of your personal data we process, if we process such data on the basis of your consent
• to request provision of your personal data that we process using automated tools on the basis of your consent to a third party
• to request a restriction of our use of your personal data or the purpose of their processing in certain limited cases
• in certain circumstances, to object against our processing of your personal data, as we process your personal data on the basis of our legitimate interests
If you would like to get more detailed information about your rights under GDPR which you can exercise in relation to us regarding our processing of your personal data, do not hesitate to contact us in writing at the address of our registered office provided at the beginning of these rules or at e-mail address: info@chalupky.sk.
It is in our interest to try to answer any questions you have and to solve any complaints related to processing of your personal data. However, if you feel that we have not solved your complaint, please note that you have the right to present your complaint at the Personal Data Protection Authority of the Slovak Republic.

7. Liability

Our company is liable for compliance with these rules of processing and protection of personal data and it is prepared to prove this compliance to the competent entities.

8. Disclosure of data to third parties:

Your personal data processed by us are not disclosed to any third parties.