info@cabindevin.sk
SKENDE

Privacy Policy and Cookie Information

Privacy Policy and Cookie Information

I. Controller

1.1. The identity and contact details of the Controller are as follows:

  • Trade Name: Lomnická, s.r.o.
  • Registered Office: Dvořákovo nábrežie 10, Bratislava 811 02, Slovak Republic
  • Registered in the Commercial Register: District Court Bratislava, Section: Sro, File No.: 26658/B
  • Company ID: 35 837 403
  • VAT ID: SK2020226043
  • Email: info@cabindevin.sk
  • Telephone: +421903791759

1.2. The Controller hereby, in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Regulation”), Act No. 18/2018 Coll. on the Protection of Personal Data, and Act No. 452/2021 Coll. on Electronic Communications, provides the Data Subject with the following information and instructions.

II. References

2.1. These privacy policy and cookie information provisions form an integral part of the rental conditions for the property “Cabin Devín”.

2.2. Pursuant to Section 3(1)(n) of Act No. 102/2014 Coll., the Controller informs that there are no specific codes of conduct to which it has committed.

III. Personal Data Protection and Use of Cookies

3.1. The operator of the website provides the following clarification regarding the function of cookies, scripts, and pixels:

  • Cookies: Text files containing a small amount of information downloaded to your device when visiting the website. They store information about your preferences (e.g., login name, language).
  • Scripts: Program code ensuring the interactive functionality of the website.
  • Pixels: Invisible elements used to monitor website traffic.

3.1.1. Cookies are categorized as follows:

  • Technical or Functional Cookies: Ensure the proper functioning of the website (used without consent).
  • Statistical Cookies: Collect statistics on website usage (with consent).
  • Marketing/Advertising Cookies: Create advertising profiles (with consent).
  • Performance Cookies: Gather information on website usage without identifying the user.

3.2. How to Control Cookies:

  • Cookies can be managed or deleted at your discretion on aboutcookies.org. Most browsers allow blocking the storage of cookies.

3.3. The Controller’s website uses the following cookies:

  • Technical Cookies: For ensuring website functionality. Duration: 2 years.
  • Statistical Cookies: Google Analytics (Google Analytics Privacy) for traffic analysis. Duration: 2 years. Data is accessed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Marketing Cookies: Facebook Pixel for advertising purposes. Duration: 2 years. Data is accessed by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  • Cookies from the Booking System Provider: HORECA GROUP s.r.o., Francisciho 20/B, 058 01 Poprad, Company ID: 47912618, VAT ID: 2024148357, Tax ID: SK2024148357, IBAN: SK45 8330 0000 0025 0068 1593 (HORECA GROUP) for reservation management. Duration: 2 years.

IV. Processed Personal Data

4.1. The Controller processes the following personal data:

  • Name, surname
  • Contact details (email, telephone)
  • Address (for billing and/or key delivery)
  • Payment details
  • Identification documents (for foreign guests or as required by law)
  • Special requests (e.g., dietary requirements, accessibility)
  • Data from cookies and IP addresses

V. Contact Details of the Data Protection Officer

5.1. The Controller has appointed a Data Protection Officer. Contact:

  • Email: info@cabindevin.sk
  • Telephone: +421903791759

VI. Purposes of Personal Data Processing and Retention Period

6.1. The purposes of personal data processing are:

  • Processing of reservations and rental orders for the property.
  • Processing of payments for the rental.
  • Communication with guests regarding reservations and stay.
  • Providing access to the property and ensuring service quality.
  • Fulfilling legal obligations (e.g., tax and security regulations).
  • Marketing activities, if the Data Subject has given consent.

6.2. Personal data are retained only for the necessary period to fulfill the contract and for archiving purposes in accordance with legal retention periods (e.g., 5-7 years for tax purposes). With consent for marketing, data are processed until the consent is withdrawn, for a maximum of 10 years.

VII. Legal Basis for Processing

7.1. Processing based on consent begins only after it has been granted.

7.2. Processing for the purpose of concluding and fulfilling the rental contract is necessary without consent; otherwise, performance cannot be ensured.

VIII. Recipients of Personal Data

8.1. Recipients of personal data may include:

  • Employees and collaborators of the Controller.
  • Service providers, including:
  • HORECA GROUP s.r.o., Francisciho 20/B, 058 01 Poprad, Company ID: 47912618, VAT ID: 2024148357, Tax ID: SK2024148357, IBAN: SK45 8330 0000 0025 0068 1593 – provider of the booking system.
  • Payment gateways and accounting services.
  • Cleaning or maintenance services.
  • Public authorities, if required by law (e.g., tax authorities, security agencies).
  • Marketing partners, if consent has been given (e.g., Google Ireland Limited, Meta Platforms Ireland Limited).

IX. Transfer of Data to Third Countries

9.1. Personal data are not transferred to third countries outside the EU, except for data processed by Google Analytics and Facebook Pixel, where appropriate safeguards are implemented in accordance with the Regulation.

X. Rights of the Data Subject

10.1. The Data Subject has the following rights under the Regulation, including:

  • Right to Access (Article 15): Obtain information about processed data and a copy thereof.
  • Right to Rectification (Article 16): Correct inaccurate or complete incomplete data.
  • Right to Erasure (“Right to be Forgotten,” Article 17): Deletion of data if no longer necessary or if consent is withdrawn.
  • Right to Restriction of Processing (Article 18): Restriction of processing in certain cases (e.g., when data accuracy is contested).
  • Right to Data Portability (Article 20): Receive data in a structured format or transfer it to another controller.
  • Right to Object (Article 21): Objection to processing (e.g., for marketing purposes).
  • Right Not to be Subject to Automated Decision-Making (Article 22): Right not to be subject to decisions based solely on automated processing.

XI. Right to Withdraw Consent

11.1. The Data Subject may withdraw consent to the processing of data at any time, either in writing to the Controller’s address or by email to info@cabindevin.sk.

XII. Right to Lodge a Complaint

12.1. The Data Subject has the right to lodge a complaint with the supervisory authority if they believe that the processing of data is in breach of the Regulation.

12.2. Supervisory Authority: Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Telephone: +421 2 3231 3214, Email: statny.dozor@pdp.gov.sk.

XIII. Automated Decision-Making and Profiling

13.1. This does not apply, except for targeted advertising via Google Analytics and Facebook Pixel, where consent is required.

XIV. Data Security

14.1. We have implemented appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

XV. Final Provisions

15.1. These provisions form an integral part of the rental conditions for the property “Cabin Devín”.

15.2. These provisions shall take effect on 23 May 2025.