General Data Protection Regulation Hotel Aviator Bratislava letisko

The operator TRINITY SERVICES s.r.o., ID number: 35 929 464, with its registered office at Roľnícka 10, 831 07 Bratislava and its registered office at Ivanska cesta 69, 821 04 Bratislava, accesses your personal data responsibly and therefore in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/ 679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR Regulation") and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws (hereinafter referred to as "the Law"), makes other necessary information available to you as the affected person (natural person whose personal data is processed). In case of any questions related to the protection of personal data, you can contact us by phone at tel. number: +421 2 44250312 or by e-mail: reservation@aviatorhotel.sk, or directly at the address: TRINITY SERVICES s.r.o., ID: 35 929 464, with registered office at Roľnícka 10, 831 07 Bratislava and operations with registered office at Ivanska cesta 69, 821 04 Bratislava. The operator declares that he has taken appropriate technical and organizational measures to ensure the protection of the rights of the affected persons and has drawn up security documentation that declares the legal processing of personal data. The operator also declares that it has entrusted the Responsible Persons (DPO/ZO) with ensuring the protection of the rights of the affected persons. The operator declares that he has taken appropriate technical and organizational measures to ensure the protection of the rights of the persons concerned and has had security documentation drawn up that declares the legal processing of personal data. The operator also declares that he has entrusted the performance of the Responsible Person (DPO/ZO) with ensuring the protection of the rights of the affected persons. Individual information can be obtained by the person concerned by phone at tel. number: +421 948 296 548, by e-mail: reservation@aviatorhotel.sk. Mandatory information is also available for inspection directly at the Operator's headquarters. Processing activities of the Operator One of the principles of personal data processing is the principle of purpose limitation. Pursuant to this principle, personal data may only be obtained for a specifically determined, explicitly stated and authorized purpose and may not be further processed in a manner that is incompatible with this purpose. The processing of personal data should be closely linked to the purpose of the processing of personal data, especially with regard to the list or scope of processed personal data, which should be necessary for the purpose to be achieved by processing the given personal data. It is not correct for the list or scope of personal data to be artificially or additionally expanded with respect to the purpose. If the purpose and list or scope of personal data is determined by law, it must be respected, if the list or scope of processed personal data is determined by the operator, he should take care not to expand it unnecessarily, beyond the scope of the purpose.The Act on Personal Data Protection stipulates the operator's obligation to provide the data subject with information about the purpose of personal data processing for which his/her personal data is intended, even if the personal data is not obtained directly from the data subject. It is necessary that this information be provided to the person concerned no later than when obtaining his personal data, or in sufficient time in advance, clearly and comprehensibly and in such a way that he can really familiarize himself with and understand this information. The purpose of processing your personal data is to provide you with full-value accommodation services. The personal data that we process for this purpose are necessary to fulfill the accommodation contract and also to take measures before concluding the contract. We also have certain obligations arising from the relevant legal regulations. Below you can find information that refers to a specific processing activity with your personal data

RECORDS OF ACCOMMODATED GUESTS

The purpose of personal data processing - records of natural persons staying at the hotel. Categories of processed personal data – name, surname, title, residence, identity document number, signature, card number, its validity and the name of the card holder. Special categories of processed personal data – special categories of personal data are not processed. Categories of affected persons - applicants for accommodation. Provision of personal data to third parties – courts, law enforcement agencies, foreign police, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation. Cross-border transfer of personal data - does not take place. Information about the existence of automated decision-making, including profiling - is not carried out. Periods for erasure of personal data  Correspondence – 3 years.  Accommodation - 5 years. Legal basis for personal data processing - Art. 6 par. 1 letter b) and) Regulations of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data, Act no. 253/1998 Coll. on reporting the residence of citizens of the Slovak Republic and the register of residents of the Slovak Republic, Act no. 40/1964 Coll. Civil Code, Act no. 48/2008 Coll. on the residence of foreigners and on the amendment and supplementation of certain laws, Act no. 582/2004 Coll. on local taxes and the local fee for municipal waste and small construction waste, as amended. The provision of personal data is necessary for concluding an accommodation contract. If you do not provide your personal data, we will not be able to provide you with our accommodation services.

RESERVATION SYSTEM

The purpose of personal data processing - reservations, sale and use of services by clients in the operator's facilities and control of their use. Categories of processed personal data – name, surname, title, residence, e-mail address, telephone number, date and time of reservation. Special categories of processed personal data – special categories of personal data are not processed. Categories of affected persons - reservation applicants. Provision of personal data to third parties – courts, law enforcement authorities, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation. Cross-border transfer of personal data – does not take place. Information about the existence of automated decision-making, including profiling - is not carried out. Periods for erasure of personal data  Correspondence – 3 years. Legal basis for personal data processing - Art. 6 par. 1 letter b) Regulations of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data. The provision of personal data is necessary for the conclusion of the accommodation contract. If you do not provide your personal data, we will not be able to provide you with our accommodation services.

RECORDS OF CLAIMS

The purpose of personal data processing - registration of complaints. Categories of processed personal data – name, surname, title, residence, telephone number, e-mail, number of the claimed product, date and time of the claim. Special categories of processed personal data – special categories of personal data are not processed. Categories of affected persons - consumers who advertise goods. Provision of personal data to third parties – courts, law enforcement authorities, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation. Cross-border transfer of personal data – does not take place. Information about the existence of automated decision-making, including profiling - is not carried out. Periods for erasure of personal data  Correspondence – 3 years.  Complaints about goods and services - 5 years. Legal basis for personal data processing - Art. 6 par. 1 letter b) and) Regulations of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data, Act no. 250/2007 Coll. on consumer protection and on the amendment of Act of the Slovak National Council no. 372/1990 Coll. on offenses as amended, Act no. 40/1964 Coll. Civil Code

MARKETING

The purpose of personal data processing - sales support - marketing offers, newsletter, information about products and news. Categories of processed personal data – name, surname, place of residence, e-mail, telephone number, date of birth, social security number. Special categories of processed personal data – special categories of personal data are not processed. Categories of affected persons - clients and customers. Provision of personal data to third parties – courts, law enforcement authorities, other authorized entity in accordance with the Personal Data Protection Act or another special legal regulation. Cross-border transfer of personal data - does not take place. Information about the existence of automated decision-making, including profiling - is not carried out. Deadlines for deletion of personal data  Contracts – 10 years.  Correspondence – 3 years. Legal basis for personal data processing - Art. 6 par. 1 letter a) Regulations of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data. In addition to the above-mentioned processing activities, we keep records of suppliers and customers in the provision of services and goods, records of your inquiries and complaints in connection with the exercise of your rights as data subjects, make photographs and video presentations and record incoming and outgoing communications (postal and electronic). If you were to apply for a job in our hotel, we will record your personal data in a special register. In this context, you will be specifically informed in the process of selecting a suitable candidate. Intermediaries, recipients and third parties In connection with the processing of personal data of accommodated guests and for the purpose of making reservations in the premises of our hotel (hotel rooms, lounge, common room, etc.), we would like to inform you that we do not provide your personal data to any other entity. For these purposes, only we, as the operator, process your personal data. Rights of the data subject Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) ( hereinafter referred to as the "GDPR Regulation") and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws (hereinafter referred to as the "Act"), the following rights are guaranteed to you as an affected person: a) the right of the affected person to access personal data, the content of which is: - the right to obtain from the Operator a confirmation as to whether personal data relating to the Affected Person are processed; - in the event that the Personal Data of the Affected Person is processed, the right to obtain access to the processed personal data and the right to obtain the following information: - information on the purposes of the processing; - information on categories of affected personal data; - information about recipients or categories of recipients to whom personal data has been or will be provided,especially in the case of recipients in third countries or international organizations; - if possible, information on the expected period of storage of personal data or, if this is not possible, information on the criteria for its determination; - information on the existence of the right to request from the Operator the correction of personal data concerning the Affected Person or their deletion or restriction of processing and on the existence of the right to object to such processing; - information on the right to file a complaint with the supervisory authority; - if the personal data were not obtained from the Data Subject, any available information regarding their source; - information on the existence of automated decision-making, including the profiling referred to in Article 22, paragraph 1. and 4. Regulations and in these cases at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the Data Subject; - the right to be informed about adequate guarantees according to Article 46 of the Regulation, regarding the transfer of personal data, if personal data are transferred to a third country or an international organization; - the right to provide a copy of the personal data that is being processed, subject to the condition that the right to provide a copy of the processed personal data must not have adverse consequences on the rights and freedoms of others; The Data Subject's right of access to personal data essentially means that the Data Subject has the right to obtain confirmation from us as to whether personal data relating to him or her is being processed and, if so, the right to access that personal data . At the request of the Data Subject, we will provide a copy of the personal data being processed. We may charge a reasonable administrative fee for any additional copies requested by the Data Subject. If the Data Subject submitted the request by electronic means, the information will be provided in a commonly used electronic form, unless the Data Subject has requested another method. The information must be provided immediately, within 1 month at the latest. We have the right to extend the processing time of the request by another 2 months if the request is complex or frequent. However, he must notify the affected person within 1 month of the reason for the extension of the processing time. If the request is unreasonable or too frequent, we have the right to charge a fee commensurate with the cost or refuse the request. We must explain the reason for the refusal and the right of the person concerned to file a complaint with the supervisory authority. b) the right of the Affected Person to correct personal data, the content of which is: (i) the right for the Operator to correct incorrect personal data concerning the Affected Person without undue delay; (ii) the right to supplement incomplete personal data of the Affected Person, including by providing an additional statement of the Affected Person; The Data Subject's right to correct personal data means that you can ask us at any time to correct or supplement your personal data if it is inaccurate or incomplete.The affected person has the right to supplement incomplete personal data, including by providing a supplementary statement c) the affected person's right to delete personal data (the so-called "right to be forgotten"), which includes: - the right to obtain from the Operator the deletion of personal data without undue delay data relating to the Data Subject, if any of the following reasons are met: - personal data are no longer necessary for the purposes for which they were obtained or otherwise processed; - The affected person revokes the consent on the basis of which the processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data; - The affected person objects to the processing of personal data according to Article 21, paragraph 1. Regulations and there are no valid reasons for the processing of personal data or the affected person objects to the processing of personal data according to Article 21, paragraph 2. Regulations; - personal data were processed illegally; - personal data must be deleted in order to fulfill a legal obligation under the law of the European Union or the law of a member state to which the Operator is subject; - personal data was obtained in connection with the offer of information society services according to Article 8, paragraph 1. Regulations; (ii) the right for the Operator who has disclosed the Personal Data of the Data Subject to take reasonable measures, including technical measures, taking into account the available technology and the costs of implementing the measures, to inform other operators who process personal data that the Data Subject requests them to deleted all references to such personal data, its copy or replicas; at the same time, the right to delete personal data with the content of rights according to Article 17 par. 1. and 2. Regulations [that is, with the content of rights according to (i) and (ii) of this letter. c) point J. of this document] will not arise if the processing of personal data is necessary: ​​1. to exercise the right to freedom of expression and information; 2. to fulfill a legal obligation that requires processing according to the law of the European Union or the law of a member state to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator; 3. for reasons of public interest in the field of public health in accordance with Article 9 par. 2. letter h) ai) Regulations, as well as Article 9 par. 3. Regulations; 4. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89, paragraph 1. Regulations, as long as it is likely that the right referred to in Article 17 paragraph 1. Regulations will make it impossible or seriously difficult to achieve the goals of such processing of personal data; or 5. to demonstrate, exercise or defend legal claims; The Data Subject's right to delete personal data therefore means that we must delete your personal data unless (i) they are not necessary for the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful,(iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are required to do so by law.  the right of the Data Subject to limit the processing of personal data, which includes:  the right for the Operator to limit the processing of personal data in one of the following cases: - the Data Subject contests the accuracy of the personal data, during the period allowing the Operator to verify the accuracy personal data; - the processing of personal data is against the law and the Data Subject objects to the deletion of personal data and requests instead the limitation of their use; - The operator no longer needs personal data for the purposes of processing, but the Data Subject needs them to prove, exercise or defend legal claims; - The person concerned objected to the processing according to Article 21 par. 1. Regulations, until it is verified whether the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the Affected Person;  the right to, in the event that the processing of personal data is limited according to subsection  of this letter. d) point J. of this document, such limited personal data, with the exception of storage, were only processed with the consent of the affected person or to prove, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European of the Union or a Member State;  the right to be informed in advance about the cancellation of the limitation of personal data processing; The Data Subject's right to restrict the processing of personal data means that unless we resolve any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that we can only store and not further process the data subject's personal data. e) the right of the Data Subject to fulfill the notification obligation towards the recipients, the content of which is: (i) the right for the Operator to notify each recipient to whom personal data has been provided, of any correction or deletion of personal data or restriction of processing carried out pursuant to Article 16, Article 17 par. . 1. and Article 18 of the Regulation, unless it proves to be impossible or requires disproportionate effort; (ii) the right for the Operator to inform the Data Subject about these recipients, if the Data Subject requests it; The Right of the Affected Person to fulfill the notification obligation towards the recipients means the obligation of the Operator to notify every recipient to whom he has provided the Personal Data of the Affected Person of any correction and deletion of personal data or restriction of their processing. The Operator does not have this obligation only if such notification is impossible for objective reasons or requires disproportionate effort. f) the Data Subject's right to portability of personal data, the content of which is: (i) the right to obtain personal data relating to the Data Subject and provided to the Operator in a structured,in a commonly used and machine-readable format and the right to transfer this data to another operator without the Operator preventing it, if: - the processing is based on the consent of the Data Subject pursuant to Article 6 par. 1. letter g) Regulation or Article 9 par. 2. letter a) Regulations, or on the contract according to article 6 par. 1. letter b) Regulations, and at the same time - the processing is carried out by automated means, and at the same time - the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without the Operator preventing it, will not have adverse consequences on the rights and freedoms of others; (ii) the right to transfer personal data directly from one operator to another operator, as long as it is technically possible; The right to data portability means that you have the right to receive from us your personal data that you have previously provided to us in a structured, commonly used and machine-readable format and you have the right to request that we transfer your personal data to another operator subject to compliance with legal conditions; exercising this right does not affect your right to erasure of personal data. However, the right to portability only applies to personal data that we have obtained from you on the basis of a contract to which you are a party h) the Data Subject's right to object, which includes: (i) the right to object at any time for reasons related to the Data Subject's specific situation to processing of personal data that concerns her, which is carried out on the basis of Article 6 par. 1. letter e) or f) of the Regulation, including objecting to profiling based on these provisions of the Regulation; (ii) [in the case of exercising the right to object at any time for reasons related to the specific situation of the Data Subject against the processing of personal data concerning him, which is carried out on the basis of Article 6 par. 1. letter e) or f) of the Regulation, including objection to profiling based on these provisions of the Regulation] the right that the Operator does not further process the Personal Data of the Data Subject, unless it proves the necessary legitimate reasons for processing that outweigh the interests, rights and freedoms of the Data Subject, or reasons for establishing, exercising or defending legal claims; (iii) the right to object at any time to the processing of personal data concerning the Data Subject for the purposes of direct marketing, including profiling to the extent that it is related to direct marketing; it also applies that if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes; (iv) (in connection with the use of information society services) the right to exercise the right to object to the processing of personal data by automated means using technical specifications; (v) the right to object, for reasons related to the specific situation of the Affected Person, to the processing of personal data concerning the Affected Person,if personal data is processed for the purposes of scientific or historical research or for statistical purposes according to Article 89, paragraph 1. Regulations, but with the exception of cases where the processing is necessary for the performance of the task for reasons of public interest; The Data Subject's right to object therefore means that as a Data Subject you can object to the processing of your personal data, which we process for the purposes of direct marketing or from authorized reasons. When processing personal data for marketing purposes, we will stop immediately after receiving an objection. h) the Data Subject's right related to automated individual decision-making, the content of which is: (i) the right not to be subject to a decision that is based exclusively on the automated processing of personal data, including profiling, and which has legal effects that are relate to or similarly significantly affect it, with the exception of cases according to Article 22 paragraph 2. Regulations [that is, with the exception of cases where the decision is: (a) necessary for the conclusion or performance of the contract between the Data Subject and the Operator, (b) permitted by the law of the European Union or the law of the Member State to which the Operator is subject and which also establish appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Affected Person or (c) based on the express consent of the Affected Person]. The Data Subject's right related to automated individual decision-making means that you, as a Data Subject, have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which has legal effects concerning you or similar to you significantly affect. In cases where such processing is necessary for the conclusion or performance of a contract or is based on the express consent of the Data Subject, the operator shall take appropriate measures to protect the rights and freedoms and legitimate interests of the Data Subject, in particular, take minimal measures, such as the right to human intervention by the operator, the right the person concerned to express his opinion and the rights of the person concerned to challenge the decision. g) The right of the affected person to submit a proposal for the initiation of proceedings in accordance with the provisions of § 100 of the Personal Data Protection Act, the content of which is: (i) the right of the affected person who believes that his personal data is being processed without authorization or that his personal data has been misused data, submit a proposal to initiate personal data protection proceedings at the Office for Personal Data Protection of the Slovak Republic (hereinafter referred to as "the Office"). (ii) The motion to initiate proceedings can be submitted in writing, in person orally in the minutes, by electronic means, while it must be signed with a guaranteed electronic signature, telegraphically or by fax, which, however, must be added to the minutes in writing or orally within 3 days at the latest. (iii) In accordance with the provisions of § 100 par. 3 of the Personal Data Protection Act contain: - name, surname, address of permanent residence and signature of the petitioner, - indication ofagainst whom the proposal is directed; name or name and surname, seat or permanent residence, or legal form and identification number, - the subject of the proposal with an indication of which rights, according to the claimant's claim, were violated during the processing of personal data, - evidence to support the claims stated in the proposal, - a copy of the document proving the application rights according to § 28, if such a right could be exercised, or stating reasons worthy of special attention. (iv) The Office will then decide on the petitioner's proposal within 60 days from the date of initiation of the proceedings. In justified cases, the Office can extend this period appropriately, but by no more than 6 months. The Office informs the participants of the proceedings in writing about the extension of the deadline. (v) You can find a sample proposal for the initiation of personal data protection proceedings on the website of the Office (https://dataprotection.gov.sk/uoou/sk/content/konanie-oochrane-osobnych-udajov). In the event that you believe that your rights as a data subject have been violated, you can directly contact the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic. Office for the Protection of Personal Data of the Slovak Republic Hraničná 12 820 07, Bratislava 27 Slovak Republic IČO: 36 064 220 Filing office: Monday - Thursday: 8:00 a.m. - 3:00 p.m. Friday: 8:00 a.m. - 2:00 p.m. Telephone consultations in the field of personal data protection : Tuesday and Thursday from 8:00 a.m. to 12:00 p.m. +421 2 323 132 20 Office Chairman's Secretariat +421 2 323 132 11 Office Secretariat +421 2 323 132 14 Fax: +421 2 323 132 34 Speaker: mobile: 0910 985 794 e-mail: hovorca@pdp.gov.sk E-mail: a) in general: statny.dozor@pdp.gov.sk b) for providing information according to Act no. 211/2000 Coll.: info@pdp.gov.sk c) website: webmaster@pdp.gov.sk d) for submitting requests for the provision of information pursuant to Act no. 211/2000 Coll. about free access to information, use the online form. e) email address through which the Office will provide you with advice in the field of personal data protection. It is intended for children, youth, students, teachers, parents who suspect that their personal data has been misused: ochrana@pdp.gov.skyou can also directly contact the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic. Office for the Protection of Personal Data of the Slovak Republic Hraničná 12 820 07, Bratislava 27 Slovak Republic IČO: 36 064 220 Filing office: Monday - Thursday: 8:00 a.m. - 3:00 p.m. Friday: 8:00 a.m. - 2:00 p.m. Telephone consultations in the field of personal data protection : Tuesday and Thursday from 8:00 a.m. to 12:00 p.m. +421 2 323 132 20 Office Chairman's Secretariat +421 2 323 132 11 Office Secretariat +421 2 323 132 14 Fax: +421 2 323 132 34 Speaker: mobile: 0910 985 794 e-mail: hovorca@pdp.gov.sk E-mail: a) in general: statny.dozor@pdp.gov.sk b) for providing information according to Act no. 211/2000 Coll.: info@pdp.gov.sk c) website: webmaster@pdp.gov.sk d) for submitting requests for the provision of information pursuant to Act no. 211/2000 Coll. about free access to information, use the online form. e) email address through which the Office will provide you with advice in the field of personal data protection. It is intended for children, youth, students, teachers, parents who suspect that their personal data has been misused: ochrana@pdp.gov.skyou can also directly contact the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic. Office for the Protection of Personal Data of the Slovak Republic Hraničná 12 820 07, Bratislava 27 Slovak Republic IČO: 36 064 220 Filing office: Monday - Thursday: 8:00 a.m. - 3:00 p.m. Friday: 8:00 a.m. - 2:00 p.m. Telephone consultations in the field of personal data protection : Tuesday and Thursday from 8:00 a.m. to 12:00 p.m. +421 2 323 132 20 Office Chairman's Secretariat +421 2 323 132 11 Office Secretariat +421 2 323 132 14 Fax: +421 2 323 132 34 Speaker: mobile: 0910 985 794 e-mail: hovorca@pdp.gov.sk E-mail: a) in general: statny.dozor@pdp.gov.sk b) for providing information according to Act no. 211/2000 Coll.: info@pdp.gov.sk c) website: webmaster@pdp.gov.sk d) for submitting requests for the provision of information pursuant to Act no. 211/2000 Coll. about free access to information, use the online form. e) email address through which the Office will provide you with advice in the field of personal data protection. It is intended for children, youth, students, teachers, parents who suspect that their personal data has been misused: ochrana@pdp.gov.sk

CAMERA INFORMATION SYSTEM

Since personal data is processed in connection with the use of the camera system, we would like to inform you as the person concerned about your rights and the conditions for processing your personal data. At the same time, we would like to assure you that the protection of your personal data is important for our municipality and for this purpose we have established security measures in accordance with the GDPR. Pursuant to Art. 32 of the General Data Protection Regulation, the Operator has taken appropriate technical and organizational measures, taking into account the latest knowledge, the costs of implementing measures and the nature, scope, context and purposes of processing, as well as risks of varying probability and severity for the rights and freedoms of natural persons in order to ensure a level of security appropriate to this risk. Persons authorized to access the recording device are entrusted with the processing of personal data, observe the confidentiality of personal data with which they come into contact and are regularly trained in the field of personal data protection. Unauthorized persons do not have access to the recording device. The operator of the camera information system is: TRINITY SERVICES s.r.o., ID number: 35 929 464, with headquarters at Roľnícka 10, 831 07 Bratislava and operations with headquarters at Ivanska cesta 69, 821 04. Contact details of the responsible person: tel. +421 2 44250312 or by e-mail: reservation@aviatorhotel.sk, or directly at the address: TRINITY SERVICES sro, ID: 35 929 464, with registered office at Roľnícka 10, 831 07 Bratislava and business with registered office at Ivanska cesta 69, 821 04 Bratislava. Purpose of processing personal data: protection of property against theft or damage Legal basis for processing personal data: Art. 6 par. 1 letter f) of the general regulation on data protection necessary for the purposes of the legitimate interests pursued by the operator - specifically the protection of property against theft or damage. Cameras that capture both outdoor and indoor space. Each entrance to the monitored area is marked with a pictogram and the indication that the given area is monitored by a camera system. Category of beneficiaries:  Beneficiary in a third country or international organization: none  Beneficiary in an EU and EEA member state: none  Public authority that processes OU on the basis of law: law enforcement authorities and courts. Data transfer: no data transfer takes place. Retention period: If the created record is not used for the purposes of criminal proceedings or misdemeanor proceedings, the record is automatically disposed of in the information system within 72 hours from the day following the day on which the record was created. The operator does not perform automated decision-making, including the profiling referred to in Art. 22 par. 1 to 4 GDPR. Instruction on the rights of the data subject: The operator to you as a data subject in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data,which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR Regulation") and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws (hereinafter referred to as the "Law") of the law, which are defined above.

Share with friends

Share at Facebook Zdieľajte na Twitteri Pošlite link známemu