Protection of personal data

Information that the operator is required to provide to the data subject

according to Article 13 and following of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation")
intended for customers of the operator and other data subjects.

1. Operator and Contact Information:

Business Name:      MV staving, a.s.
Address:                  Hviezdoslavova 2, 971 01 Prievidza
Company ID (IČO):  36298972
Phone:                      0907 295 789
Email:                        riaditel@hotel-remata.sk

2. Purpose of Data Processing and Legal Basis for Processing:

The operator processes the personal data of its customers, clients, and contractual partners—suppliers of goods and services—because it is necessary for establishing a contractual relationship in the operator's activities. The operator processes personal data without the consent of customers for the purpose of fulfilling its obligations arising from the contract, including pre-contractual relationships, providing warranty and post-warranty repairs and services, collecting receivables, and communicating with customers. Without providing this data, the operator cannot properly fulfill the contract, and therefore it will not be possible to enter into a contract with the partner.
           

3. Recipients:

The operator provides personal data to processors whom it has authorized in writing to process personal data, for example, for the purpose of delivering goods and services, repairs, warranty and post-warranty service, and providers of information systems and cloud platforms. The operator may also provide personal data to public authorities, companies engaged in debt collection, and other entities for the purpose of asserting its legal claims.
 

4. Retention Period for Personal Data:

The operator processes the personal data of data subjects for the duration necessary to fulfill obligations arising from the contractual relationship and for the purpose for which they are processed, but no longer than ten years from the fulfillment of the purpose (contract, repairs, complaints, warranty and post-warranty service, debt collection). After this period, the data will be destroyed. The operator will ensure the immediate deletion of personal data once the purpose of processing has been fulfilled and the retention period has expired.
 

5. Rights of Data Subjects:

The data subject has the following rights concerning the processing of their personal data by the operator. They can exercise these rights in person, by sending a written request by mail to the operator's address, or electronically to the operator's email address.

• the data subject contests the accuracy of the personal data, during the period of verifying its accuracy,
• the processing is unlawful and the data subject objects to the erasure of personal data and requests instead the restriction of its use,
• the operator no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise, or defense of legal claims,
• the data subject has objected to the processing of their personal data on grounds relating to their particular situation against the processing of their personal data necessary for the purposes of legitimate interests pursued by the operator or a third party, pending verification of whether the legitimate grounds of the operator override those of the data subject.

e) Right to receive personal data concerning them which they provided to the operator, and the right to transmit those data to another operator, if the processing is carried out by automated means based on a contract or consent and is technically feasible.
f) Right to object to the processing of their personal data by the operator, those processed on the grounds of legitimate interests of the operator. If the operator does not demonstrate that there are compelling legitimate grounds for the processing which override the rights and freedoms of the data subject, the operator will cease such processing without undue delay.
g) Right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data by the operator is in violation of data protection laws. The supervisory authority is the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava 27, telephone: +421232313214, email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.
h) Right not to be subject to a decision based solely on automated processing of personal data which produces legal effects concerning them or similarly significantly affects them. The operator declares that it does not perform automated decision-making with legal effects for data subjects without human assessment.
i) If personal data has not been obtained from the data subject, they have the right to obtain information on the source of their personal data, or whether the data comes from publicly accessible sources.

The operator will respond to requests regarding the processing of personal data without undue delay and within one month of receipt. In special cases, this period may be extended by an additional two months, with the data subject being informed of the reasons for the extension within one month of receipt of the request. When processing the request, the operator is obliged to verify the identity of the requester in an appropriate manner. The data subject will be informed of the identity verification procedure in response to their request. Information is provided free of charge. However, if the requests from data subjects are manifestly unfounded or excessive, the operator may charge a reasonable administrative fee for processing them.