GDPR and Compliance

Declaration on the processing of personal data

(accommodation services)

In accordance with the Regulation[1] and the Personal Data Protection Act[2], the operator FAMILIA SMOKOVEC s.r.o., with registered office at Vajnorská 100/A, 831 04 Bratislava, ID no: 36 792 152 (hereinafter referred to as the "Controller"), processes your personal data for the purpose of providing accommodationservices, management and maintenance of the apartments and fulfilment of related obligations. Our aim is to protect your personal data effectively and to provide you with transparent information.

We only process your personal data on the basis of legal conditions (legal basis - authorisation to process personal data).data), which is based on the Regulation, the Personal Data Protection Act or other special regulations (e.g. the Citizens' Residence Reporting Act). As the controller, we have a legal obligation to provide your personal data in the course of an inspection, supervisory activity or at the request of the opthe state authorities or institutions, if this is required by special regulations[3].

We may share your personal data with third parties who act on our behalf, for example with suppliers of certain services - intermediaries ( e.g. accounting service providers, authorised government authorities, etc.). In such cases, these third parties may only use your personal data for the purposes described above and only inin accordance with our instructions, and on the basis of a concluded mediation contract or on the basis of compliance with other legal conditions.

Your personal data will be stored securely, in accordance with the security policy of the controller and the processor and only for as long as necessary to fulfil the purpose of the processing. Access to your personal data will be restricted to persons authorised by the controller to process personal data.personal data, who will process it on the basis of the instructions of the controller, in accordance with the controller's security policy.

Your personal data is backed up in accordance with the controller's retention policy. Your personal data will be completely erased from the backup storage as soon as it is possible in accordance with the backup rules mentioned above. The personal data stored on the backup storage sites is used to prevent security incidents, in particular data availability disruptions due to a security incident. The controller is obliged to ensure that data is backed up in accordance with the security requirements of the Regulation and the Data Protection Act. We only retain your personal data for a limited period of time, with deletion occurring when it is no longer required for the purposes of processing.

When personal data is processed by the controller, you are the data subject, i.e. the person about whom the personal data relating to you is processed.

Personal data is not transferred to third countries.

Purposes of the processing of personal data, retention periods, legal basis

Provision of accommodation

For the purposes of providing accommodation services, we process your personal data on the basis of a contract to which you are one of the contracting partiesn and for the purpose of keeping an accommodation register, the keeping of which is necessary for the fulfilment of the legal obligation of the operator (accommodation provider) to report short stays pursuant to Act No. 404/2011 Coll. on the residence of foreigners and on amendment and supplementation of certain acts and Act No. 253/1998 Coll. on reporting the residence of citizens of the Slovak Republic and the register of residents of the Slovak Republic. Reporting on the residence of foreigners may also be carried out electronically, through the portal of the Ministry of the Interior of the Slovak Republic https://portal.minv.sk/.

Failure to provide your personal data, which are processed on the basis of a contract or for the fulfilment of theThe controller's obligation to provide you with personal data in order to fulfil a contractual obligation could result in the impossibility to conclude a contractual relationship with you and to provide you with accommodation services.

In order to speed up the services we provide and to make guest registration more efficient, we process your personal data for the purpose ofthe legitimate interest of the data controller to the extent necessary for the registration of the client and his/her entry in the accommodation register. If you do not wish us to process your personal data for this purpose, you may object to such processing at any time during your stay with us in person or by telephone or electronically.

Accounting

In order to comply with a legal obligation, we process your personal data for the purpose of keeping accounting records and preparing accountingdocuments; in particular, the administration and invoicing of prices for services and goods provided, the processing of accounting and tax documents and invoices.

The legal basis for processing your personal data for this purpose is in particular Act No. 431/2002 Coll. No. 222/2004 Coll. on Value Added Tax, as amended.

We may also process your personal data for the purposes of providing electronic communication services or payment transactions (based on the speciallaws governing payment transactions); the exchange of data between operators of electronic communication services that provideaccess to telecommunications networks (processing is based on the Telecommunications Act), the operation of information systems and the operation of video surveillance systemssurveillance systems (for the purpose of protecting property, health and life and for the purpose of taking measures for network security, on the basis of the legitimate interest of the operator).

In very specific cases, the company may process your personal data in order to pursue legal claims.

We may also process your personal data by means of CCTV surveillance, monitoring the premises surrounding the facility, internalcommon areas of the facility, or areas of the facility that are not normally accessible to guests and clients.

Your personal data will be processed for the duration of the contractual relationship and for 10 years after its termination, in accordance with the requirements of the specific regulations governing tax obligations. We also process your personal data for the purposes of fulfilling the company's obligations under specific regulations, in particular under Act no. 395/2002 Coll. on archives and registers and on amendment and supplementation of certain acts.

More detailed information on the purposes of processing, legal bases and retention periods can be found in the appendix to this statement.

Your rights under the Regulation and the Data Protection Act

Right of access

You have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written paper form unless you request a different method of disclosure. If you have requested this information by electronic means, it will be provided to you electronically where technically possible.

Right to rectification

We take reasonable steps to ensure that the information we hold about you is accurate, complete and up to date. If you believe that the information we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or complete the information.

Right to erasure

You have the right to ask us to erase your personal data, for example, if the personal datadata we have collected about you is no longer necessary for the fulfilment of the original purpose of the processing. However, your right must be considered in the light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we may not be able to comply with your request.

Right to restriction of processing

In certain circumstances, you are entitled to ask us to stop using your personal data. These include, for example, where you think that the personal data we hold about you may be inaccurate or where you think that we no longer need to use your personal data.

Consent

Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. You can withdraw your consent electronically, by contacting the Responsible Person, in writing, by notice of withdrawal of consent or in person at the office.Withdrawal of consent does not affect the lawfulness of the processing of personal data we have processed about you on the basis of that consent.

Right to data portability

In certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.

Right to object

You have the right to object to processing based on our legitimate interests.If we do not have a compelling legitimate ground for processing and you object, we will no longer process your personal data.

Right to lodge a complaint

If you believe that we are processing your personal data unfairly or unlawfully, you may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.

If you have any questions regarding the processing of your personal data, you can contact us through our reception.