Košice Region Tourism, Hlavná 48, Košice 04001, CRN: 42319269
as operator, provides this notification of the person concerned for the purpose of observing justice and transparency towards the persons concerned
on the processing of personal data pursuant to Articles 13 and 14. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Section 19 of the National Council of the SLovak Republic Law Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment to Certain Law Acts
under the title of
PRINCIPLES OF PERSONAL DATA PROTECTION
The purpose of processing personal data in the Registry of Accounting and Tax Documents:
As part of the activity, personal data is processed during the processing of accounting documents and the agenda associated with its processing.
Range of persons concerned: Natural persons – clients, employees.
List of personal data: Name, surname, title, address of permanent residence, address of temporary residence, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of a natural person.
Legal basis for personal data processing: Law Act No. 431/2002 Coll. on Accounting, as amended, Law Act No. 222/2004 Coll. on Value Added Tax, as amended, Law Act No. 40/1964 Coll. Civil Code, as amended, Law Act No. 152/1994 Coll. on the Social-Welfare Fund and on amendments to Law Act No. 286/1992 Coll. on Income Taxes, as amended, Law Act No. 311/2001 Coll. Labour Code as amended.
Recipient categories: Social Insurance Agency, health insurance company, revenue authority and entities to which a special regulation endows the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies and intermediaries: Lau&Sam, Cimborkova 13, 04001 Košice, 50056743.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
Accounting documents for 10 years
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all personal data provided by you are a necessary legal requirement for fulfilling the purpose of their processing.
The purpose of processing personal data in the Register of Incoming and Outgoing mail and in the Registry Administration:
As part of the activity, personal data is processed when registering incoming and outgoing mail and actions related to registry management.
Range of persons concerned: Natural persons – addressees, employees.
List of personal data: The purpose of processing personal data in the Register of Incoming and Outgoing mail and in the Registry Administration:
As part of the activity, personal data is processed when registering incoming and outgoing mail and actions related to registry management.
Range of persons concerned: Natural persons – addressees, employees.
List of personal data: Name, surname, title, address, organization name, job title, e-mail address, subject and content of mail.
Legal basis for personal data processing: Law Act No. 395/2002 Coll. on Archives and Registries and on supplementing some of the law acts as amended.
Recipient categories: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
Ordinary correspondence 3 years
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all the personal data provided by you is a necessary legal requirement for fulfilling the purpose of their processing.
Legal basis for personal data processing: Law Act No. 395/2002 Coll. on Archives and Registries and on supplementing some of the law acts as amended.
Recipient categories: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
Ordinary correspondence 3 years
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all the personal data provided by you is a necessary legal requirement for fulfilling the purpose of their processing.
The purpose of processing personal data in the Register of Contracts:
As part of the activity, personal data is processed, which is necessary for the performance of a contract to which the person concerned is a party, or for the implementation of measures prior to the conclusion of the contract based on the request of the person concerned
Range of persons concerned: Natural persons – contracting party
List of personal data: Name, surname, title, permanent/temporary residence, account number of a natural person, name of the bank, ID card number, data related to the subject matter of the contract.
Legal basis for processing personal data: Section 13 par. 1 subpar b) Law Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment of Certain Law Acts.
Recipient categories: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
Contracts for 10 years
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all the personal data provided by you is a necessary contractual requirement for fulfilling the purpose of their processing.
Purpose of personal data processing – Contact Form:
As part of the activity, personal data in the Client Register is processed for the purpose of sending an answer to the question asked
Range of persons concerned: Natural persons – clients
List of personal data: Name, surname, email, address, telephone number
Legal basis for personal data processing: Consent of the person concerned
Recipient categories: entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
|
Contact Form |
a maximum of 6 months (in case of fulfilment of legal obligations or legal claims of the operator) |
Automated decision-making, including profiling, is not carried out.
The person concerned shall have the right to withdraw consent to the processing of personal data concerning him/her at any time. The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned may withdraw the consent in the same way as he/she gave the consent.
The purpose of processing personal data in the E-SHOP:
As part of the activity, personal data is processed, which is necessary for concluding a purchase contract and subsequent payment, delivery of goods or services and possible provision of other related services (especially in connection with legal regulations governing consumer protection)
Range of persons concerned: Natural persons – Customers of the e-shop.
List of personal data: Title, first name, last name, residential address, or delivery address of the goods, e-mail, phone, order content, personal data necessary to make an online payment.
Legal basis for processing personal data: Section 13 par. 1 subpar. b) Law Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment to Certain Law Acts.
Categories of recipients: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies and intermediaries: WebSupport p. r. o., Karadžičova 7608/12, 821 08 Bratislava, 36421928
The transfer of personal data to third countries is not carried out.
Periods for deletion of personal data: 10 years
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all personal data provided by you is a necessary contractual requirement for fulfilling the purpose of their processing.
The purpose of processing personal data in Marketing:
As part of the activity, personal data is processed in the members’ records for the purpose of sending marketing offers, newsletters, information on products and news
Range of persons concerned: Natural persons
List of personal data:
Legal basis for personal data processing: Consent of the person concerned
The transfer of personal data to third countries is not carried out.
Periods for deletion of personal data: 10 years
Automated decision-making, including profiling, is not carried out.
The person concerned shall have the right to withdraw consent to the processing of personal data concerning him/her at any time. The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned may withdraw the consent in the same way as he/she gave the consent.
Purpose of personal data processing – Photos:
As part of the activity, photos are published on the website and on social networks for the purpose of promotion and presentation of the operator.
Circle of persons concerned: Employees and participants of events
List of personal data: Photo
Legal basis for personal data processing: Consent of the person concerned
Categories of recipients: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data: Photos for the duration of consent
Automated decision-making, including profiling, is not carried out.
The person concerned shall have the right to withdraw consent to the processing of personal data concerning him/her at any time. The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned may withdraw the consent in the same way as he/she gave the consent.
The purpose of processing personal data in the Register of Job Seekers:
As part of the activity, personal data is processed when registering job seekers
Group of persons concerned: Natural persons – job seekers
List of personal data: Name, surname, title, permanent residence, temporary residence, date of birth, phone number, education, experience, e-mail address, other data in the scope of a resume, motivation letter, and job application
Legal basis for personal data processing: Consent of the person concerned
Recipient categories: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
|
Resumes |
1 year |
Automated decision-making, including profiling, is not carried out.
The person concerned shall have the right to withdraw consent to the processing of personal data concerning him/her at any time. The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent before its withdrawal; before giving consent, the person concerned must be informed of this fact. The person concerned may withdraw the consent in the same way as he/she gave the consent.
The purpose of processing personal data in the camera information system:
As part of the activities, personal data is processed for the purpose of protecting public order and security, detecting crime, protecting health and property.
Range of persons concerned: Persons located in the area monitored by the camera system
List of personal data:
Legal basis for personal data processing: Legitimate interest of the operator.
Recipient categories: Courts, law enforcement bodies – processing is necessary to fulfil the legal obligation of the operator, pursuant to Law Act No. 301/2005 Coll. Code of Criminal Procedure as amended, Act No. 162/2015 Coll. Administrative Court Procedure as amended by Law Act No. 88/2017 Coll., Law Act No. 125/2016 Coll., of the Law Act on Certain Measures Related to the Adoption of the Civil Contention Code, the Civil Non-Contention Code and the Administrative Court Code and on Amendments and Supplements to Certain Law Acts, Authorised State Authority – processing is necessary to fulfil the legal obligation of the operator in accordance with the General regulations on data protection.
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
|
Camera recording |
72 hours |
Automated decision-making, including profiling, is not carried out.
The main legitimate interest is in the protection of property, financial and other interests of the operator, as well as the protection of the property, life and health of the persons concerned.
The purpose of personal data processing – Information Law Act:
As part of the activity, personal data is processed during the registration of natural persons who requested the disclosure of information.
Range of the persons concerned: Natural persons who requested access
List of personal data: Title, first name, last name, residence, telephone number, e-mail, pursuant to Section 20 of Law Act No. 211/2000 Coll. on Free Access to Information
Legal basis for personal data processing: Law Act No. 211/2000 Coll. on Free Access to Information.
Recipient categories: Entities to which a special regulation entrusts the authority to decide on the rights and obligations of natural persons: Courts, law enforcement bodies
The transfer of personal data to third countries is not carried out.
Deadlines for deleting personal data:
|
Applications |
5 years |
Automated decision-making, including profiling, is not carried out.
Due to compliance with the principle of minimisation, all personal data provided by you is a necessary legal requirement for fulfilling the purpose of their processing.
Persons concerned, whose personal data is processed for specifically defined purposes, may exercise the following rights:
The right to request access to your personal data – The right to correct personal data – The right to delete personal data – The right to limit the processing of personal data – The right to object to the processing of personal data – The right to transfer your personal data – The right to file a complaint with a supervisory authority, i.e. Office for the Protection of Personal Data of the Slovak Republic
The rights of the person concerned are specified in more detail in Articles 15 to 21 of the Regulation. The person concerned exercises the said rights in accordance with the Regulation and other relevant legal regulations. The person concerned may exercise their rights against the operator through a written request or by electronic means. In the event that the person concerned requests the provision of information orally, the information may be provided in this way, provided that the data subject has proved their identity.
Košice Region Tourism has adopted all appropriate personnel, organisational, and technical measures for the maximum protection of your personal data in order to reduce the risk of their misuse as much as possible. In accordance with our obligation arising from Article 34 of the Regulation, we inform you as the persons concerned that if a situation arises that we, as operator, violate the protection of your personal data in a way that is likely to lead to a high risk for the rights and freedoms of natural persons, we will notify you of this fact without undue delay.
Legal regulations and related methods of processing your personal data may change. If we decide to update this policy, we will post the changes on our website and notify you of the changes. In cases where there is to be a major change to these principles, or in cases where the law requires us to do so, we will inform you in advance. We ask you to read these policies carefully and in the next communication with us, or regularly check these policies while using our website.
If you have any questions regarding the processing of your personal data, including the exercise of the above-mentioned rights, you can contact our Person on Charge provided by EuroTRADING s.r.o. (www.eurotrading.sk), by email at zo@eurotrading.sk. We will properly check all your suggestions and complaints and send you a statement.
If you are not satisfied with our answer, or if you believe that we process your personal data unfairly or illegally, you can file a complaint with the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12 , 820 07 Bratislava 27; phone No.: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.
