I
Introductory Provisions
HIGH TATRAS TOWER s.r.o., business partnership with its registered office at Sobotské námestie 1733/12, 058 01 Poprad – Spišská Sobota, Company ID: 50 706730, registered in the Commercial Register of the Prešov District Court, Section: Sro, Insert No.: 34110/P (hereinafter referred to as ”HIGH TATRAS TOWER” or “the Operator”) as part of its main business activity, it focuses primarily on the operation of cultural, social and entertainment facilities and the organization of sports, cultural and other social events or other business activities related to the operation of the TATRAS TOWER at Štrbské Pleso (hereinafter referred to as the “Observation Tower”) and other HIGH TATRAS TOWER facilities operated in its immediate vicinity or in its direct or indirect connection.
As part of the performance of its business activity in accordance with the relevant applicable legislation, HIGH TATRAS TOWER processes diverse personal data of data subjects for various but precisely defined purposes. As the protection of natural persons with regard to the processing of their personal data is a fundamental right, HIGH TATRAS TOWER aims to protect the personal data of natural persons it processes in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll. on the protection of personal data and amending certain laws.
In order to fulfill its information obligation, as well as to provide data subjects with further facts about the processing of their personal data by HIGH TATRAS TOWER, HIGH TATRAS TOWER issues this document describing the policy of processing and protection of personal data (hereinafter referred to as the “Privacy Policy”). HIGH TATRAS TOWER will transparently publish the Privacy Policy on its website so that data subjects can easily and permanently access it.
For ease of reference in the Privacy Policy, we provide data subjects with the following structured overview of this document:
Introductory Provisions…………………………………………………………………………………………………………………
Basic Terms………………………………………………………………………………………………………………………..
Security of Processing…………………………………………………………………………………………………………….
Processing Principles……………………………………………………………………………………………………………………
Purposes of processing and legal bases of processing…………………………………………………………………………..
Processing of personal data in connection with the performance of the HIGH TATRAS TOWER business activity externally:
Sales of tickets to the Observation Tower…………………………………………………………………..
Identification of persons at the entrance to the Observation Tower……………………………………………………
Monitoring of the premises of the Observation Tower and its immediate surroundings………………….
Photographs and videos of data subjects……………………………………………………………
Marketing…………………………………………………………………………………………………………….
Claims…………………………………………………………………………………………………………..
Consumer competitions…………………………………………………………………………………………..
Infoservice…………………………………………………………………………………………………………….
Handling of data subjects’ requests………………………………………………………………….
Prevention of the spread of dangerous contagious human diseases…………………………..
Processed Personal Data …………………………………………………………………………………………………………
Data Retention Period………………………………………………………………………………………….
Use of Cookies………………………………………………………………………………………………………………..
Rights of Data Subjects…………………………………………………………………………………………………………….
Final Provisions……………………………………………………………………………………………………………..
II
Basic Terms
Terms and abbreviations used in the text of this Privacy Policy have the meanings assigned to them below:
GDPR is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation);
The Act on the protection of personal data is Act No. 18/2018 Coll. on the protection of personal data and amending certain laws;
The Privacy Legislation includes the GDPR and the Privacy Act;
HIGH TATRAS TOWER is a business company HIGH TATRAS TOWER s.r.o. with its registered office at Sobotské námestie 1733/12, 058 01 Poprad – Spišská Sobota, Company ID: 50 706 730, registered in the Commercial Register of the Prešov District Court, Section: Sro, Insert No.: 34110/P;
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “the data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or by reference to one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Sensitive data (also referred to as a specific category of personal data) means data relating to health, genetic data, biometric data for the individual identification of a natural person or data relating to the sexual life or sexual orientation of a natural person, as well as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership;
A controller is a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of processing personal data; where the purposes and means of such processing are laid down in Union or Member State law, the controller or the specific criteria for its designation may be determined in Union or Member State law. For the purposes of this Privacy Policy, HIGH TATRAS TOWER is considered to be the Controller if it processes personal data within the meaning of the preceding sentence;
Processor means a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller;
A recipient is a natural or legal person, public authority, agency or other body to whom personal data are provided, whether or not it is a third party. Public authorities which may receive personal data in a specific enquiry in accordance with Union or Member State law shall not be considered recipients (i.e. public authorities to which personal data are provided in accordance with a legal obligation to perform their official task, such as tax and customs authorities, financial intelligence units, independent administrative authorities or financial market authorities responsible for the regulation and supervision of securities markets, shall not be considered recipients where they receive, in accordance with Union or Member State law, personal data which are necessary for carrying out a particular enquiry in the general interest. This is relevant in relation to providing the Data Subject with proper information about the final list of recipients listed below in the Privacy Policy.);
Processing means an operation or set of operations involving personal data or sets of personal data, such as the acquisition, recording, organization, structuring, storage, processing or alteration, retrieval, consultation, use, transmission, dissemination or otherwise making available, regrouping or combination, restriction, erasure or destruction, whether carried out by automated or non-automated means;
Restriction of processing is the marking of stored personal data in order to limit their processing in the future;
Profiling is any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular the analysis or anticipation of aspects of the natural person concerned relating to performance at work, financial circumstances, health, personal preferences, interests, reliability, behavior, location or movement;
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a particular Data Subject without the use of additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that personal data are not attributed to an identified or identifiable natural person;
An information system means any structured set of personal data accessible according to specified criteria, whether centralized, decentralized or distributed on a functional or geographical basis;
The Data Subject’s consent is any freely given, specific, informed and unambiguous expression of the Data Subject’s will to which he or she consents in the form of a declaration or unambiguous confirmatory action to the processing of personal data relating to him or her;
A personal data breach is a breach of security which results in particular in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data that is transferred, stored or otherwise processed;
A third country is a country which is not a Member State of the European Union or a Contracting Party to the Agreement on the European Economic Area;
The Supervisory Authority is an independent public authority established by a Member State pursuant to Article 51 of the GDPR; in the Slovak Republic, the Office for Personal Data Protection of the Slovak Republic is considered a supervisory authority;
The Labor Code is Act No. 311/2001 Coll. of Labor Code as amended.
III
Security of Processing
In order to protect the rights and freedoms of natural persons with regard to the processing of personal data, HIGH TATRAS TOWER has taken appropriate technical and organizational measures to ensure that the requirements of the Privacy Legislation are met. HIGH TATRAS TOWER considers the security of the processing of personal data to be a priority and makes a permanent effort to prevent security incidents that could lead to a risk to the rights and freedoms of natural persons. The security of the processing is regularly assessed in the light of the latest knowledge and the nature of the processing of personal data.
With reference to the data, we would like to emphasize that all personal data obtained from the Data Subject are processed with a high level of organizational and technological security. HIGH TATRAS TOWER regularly assesses and, where possible, applies adequate safeguards for the security of personal data, which may include encryption or pseudonymisation.
The compliance of the processing of personal data by HIGH TATRAS TOWER with the GDPR as well as other Union legislation, the Privacy Act and THE HIGH TATRAS TOWER rules is constantly monitored by HIGH TATRAS TOWER. The contact details of HIGH TATRAS TOWER are as follows: e-mail: info@tatrastower.sk telephone contact: +421 903 602 006 address for delivering of documents: HIGH TATRAS TOWER s.r.o., Sobotské námestie 1733/12, 058 01 Poprad – Spišská Sobota.
IV
Processing Principles
HIGH TATRAS TOWER strictly respects the principles of processing personal data of data subjects and their privacy, taking into account that personal data must be in particular:
processed lawfully, fairly and transparently;
obtained for specifically identified, explicitly stated and legitimate purposes;
adequate, relevant and limited to the extent necessary to achieve the relevant purpose of the processing;
correctly and, where necessary, updated;
kept in a form which permits the identification of data subjects for as long as necessary for the purposes for which the personal data are processed;
processed in a manner that guarantees the adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.
HIGH TATRAS TOWER receives the processed personal data directly from the given Data Subject. Personal data that HIGH TATRAS TOWER did not obtain from the Data Subject was obtained from a person other than the Data Subject (e.g. a family member) or obtained from publicly accessible sources and information (such as the Commercial Register of the Slovak Republic, etc.).
HIGH TATRAS TOWER cooperates in its business activities with several intermediaries who process personal data on behalf of HIGH TATRAS TOWER in the performance of their activities under the relevant contract. HIGH TATRAS TOWER uses only intermediaries who have declared that they have taken appropriate technical and organizational measures to ensure that the processing meets the requirements of the Privacy Legislation and to ensure the protection of the Data Subject’s rights. Processing by the Processor is governed by a separate contract that binds the Processor to the Controller and contains formalities pursuant to the GDPR Regulation.
In the event of a personal data breach that is likely to lead to a high risk to the rights and freedoms of natural persons, HIGH TATRAS TOWER shall, without undue delay, notify the personal data breach to the Data Subject if any of the conditions for waiving the notification obligation are not met.
V
Purposes of processing personal data in HIGH TATRAS TOWER and legal bases of processing
It is in the interest of HIGH TATRAS TOWER to process personal data of data subjects only for a specific and current purpose. HIGH TATRAS TOWER primarily processes personal data because it is necessary for the fulfillment of its legal obligation as a controller or for the performance of a contract to which the Data Subject is a contracting party. HIGH TATRAS TOWER also processes certain personal data of data subjects, as such processing is necessary for the purposes of legitimate interests it pursues as a controller. The consent of data subjects to the processing of personal data is required by HIGH TATRAS TOWER inappropriate cases, if the nature of the processing so requires. HIGH TATRAS TOWER does not currently carry out automated decision-making, including profiling, unless otherwise expressly stated in the specific case below.
HIGH TATRAS TOWER processes personal data for the purposes described below and on the basis of the following legal bases:
Processing of personal data in connection with the performance of the HIGH TATRAS TOWER business activity externally:
Sales of tickets to the Observation Tower
The purpose of the processing of personal data is the realization of physical and online sales of tickets to the Observation Tower in accordance with the General Terms and Conditions of HIGH TATRAS TOWER, as well as keeping records of the contracting parties and natural persons authorized under the relevant contract.
The legal basis for processing is the performance of a contract (purchase contract) to which the Data Subject is a contracting party. The legal basis is also the legitimate interests of HIGH TATRAS TOWER as an operator, through which it monitors effective communication with the contracting party, the person authorized to act on its behalf, as well as the person authorized by the contract.
Provision of personal data of the Data Subject is a contractual requirement and in the event of failure to provide them to HIGH TATRAS TOWER, it is not possible to sell tickets and therefore there will be no relevant contractual relationship. The Data Subject is obliged to provide his/her personal data processed by HIGH TATRAS TOWER on the basis of his/her legitimate interest, otherwise HIGH TATRAS TOWER cannot perform transparent communication with the Contracting Party.
The personal data of the Data Subject may be provided to the following recipients: persons cooperating with HIGH TATRAS TOWER in the sale of tickets (processors), operator of the observation tower access monitoring system, if necessary lawyers providing legal services to HIGH TATRAS TOWER.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a third country or international organization.
Identification of persons at the entrance to the Observation Tower
The purpose of the processing of personal data is to identify natural persons at the entrance to the Observation Tower.
The legal basis for processing is the legitimate interest of HIGH TATRAS TOWER as an controller, through which it monitors the legitimacy of entry and movement of natural persons in the Observation Tower.
The Data Subject is obliged to provide his/her personal data, otherwise he/she will not be allowed to enter and move through the Observation Tower.
The personal data of the Data Subject may be provided to the following recipients: entities cooperating with HIGH TATRAS TOWER in the identification of natural persons authorized to access the observation tower, or performing checks on tickets and compliance with public order in the observation tower area, if necessary lawyers providing legal services to HIGH TATRAS TOWER, public authorities.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a third country or international organization.
Monitoring of the premises of the Observation Tower and its immediate surroundings
The purpose of the processing of personal data is to image monitor the premises of the Observation Tower and its immediate surroundings in order to ensure the safety and health protection of persons located in the Observation Tower building, protection of the property of HIGH TATRAS TOWER, as well as protection of the property of third parties.
The legal basis for processing is the legitimate interest of HIGH TATRAS TOWER as an controller, through which it monitors in particular the safety and health protection of persons located in the Observation Tower building, as well as the protection of its property and the property of third parties. The Data Subject is obliged to undergo transparent image monitoring, of which he/she is duly informed, and thus provide his/her personal data, otherwise he/she will not be allowed to enter and move through the Observation Tower.
The personal data of the Data Subject may be provided to the following recipients: entities cooperating with HIGH TATRAS TOWER in the identification of natural persons authorized to access the Observation Tower, or performing checks on tickets and compliance with public order in the Observation Tower area, entities providing management and support of information technologies, if necessary lawyers providing legal services to HIGH TATRAS TOWER, courts, law enforcement authorities, other public authorities.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a third country or international organization.
Photographs and video recordings of data subjects
The purpose of processing images of individual data subjects, as a normal category of personal data, in the framework of photos or videos, is transparent promotion of HIGH TATRAS TOWER. Photos and videos recordings may be placed on the premises of HIGH TATRAS TOWER, published in publications, on social networks and on the High TATRAS TOWER website.
The legal basis for the processing of personal data is the Data Subject’s free consent to the processing of personal data, which the Data Subject may revoke at any time. The provision of personal data is voluntary and will not be affected in any way by the HIGH TATRAS TOWER. In the case of taking and publishing photos or videos recordings from public events, or from the operation of the Observation Tower, the legal basis for the processing of personal data is the legitimate interest of HIGH TATRAS TOWER as an controller, through which it monitors the promotion of its business activities, provided that for objective reasons it is not possible to secure the consent of the data subjects, in particular due to a large unlimited number of data subjects, participants in the event, or in the case of a large public event.
HIGH TATRAS TOWER processes personal data for the above purposes so that it does not violate the Data Subject’s right to the protection of his or her personality or the right to the protection of privacy and to respect the dignity of the Data Subject.
Photographs and video recordings of data subjects shall be made available to the public.
In the case of taking and publishing photos and video recordings on social networks, HIGH TATRAS TOWER transfers personal data of data subjects to the USA (e.g. Facebook). In other cases, HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a third country or international organization.
Marketing
The purpose of the processing of personal data is to promote and advertise HIGH TATRAS TOWER and its activities, in particular, but not only:
informing about HIGH TATRAS TOWER activities through advertising, including customer references;
sending newsletters about news, promotions, discounts, advantages, as well as sending invitations and holiday greetings;
marketing and customer satisfaction surveys.
The legal basis for processing is the consent of the Data Subject and the legitimate interests of HIGH TATRAS TOWER as an controller. Where the legal basis for the processing is the Data Subject’s free consent to the processing of personal data, the Data Subject shall be entitled to revoke the consent granted at any time. The provision of personal data is voluntary. The Data Subject is obliged to provide his/her personal data processed by HIGH TATRAS TOWER on the basis of his/her legitimate interest, otherwise HIGH TATRAS TOWER cannot perform transparent marketing activities.
The personal data of the Data Subject may be provided in particular to the following recipients: advertising and marketing agencies, entities providing management and support of information technologies, courier and delivery companies, if necessary lawyers providing legal services to HIGH TATRAS TOWER, auditors, external tax and accounting advisors.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a Third country or international organization.
Claims
The purpose of the processing of personal data is to keep records of existing complaint procedures to the extent necessary to record and handle individual complaint procedures in accordance with the High TATRAS TOWER Complaints Procedure and applicable legislation.
The legal basis for processing is the fulfillment of a legal obligation, in particular within the meaning of Act No. 40/1964 Coll. Civil Code and Act No. 250/2007 Coll. on consumer protection and amending Act of the Slovak National Council No. 372/1990 Coll. on offenses, as amended, Act No. 431/2002 Coll. on accounting, as amended, or other related legislation. Consent to the processing of personal data is not required. Provision of personal data of the Data Subject is a legal requirement and in the event of failure to provide them, HIGH TATRAS TOWER cannot fulfill its legal obligations under the relevant legislation.
The personal data of the Data Subject may be provided in particular to the following recipients: courts, lawyers providing legal services to HIGH TATRAS TOWER, auditors, external tax and accounting advisors.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a Third country or international organization.
Consumer Competitions
The purpose of the processing of personal data is to ensure the participation of data subjects in the relevant consumer competition organized by HIGH TATRAS TOWER and to ensure the proper course of this consumer competition (which consists in particular, but not only, of ensuring the drawing of winners, evaluating the course of the consumer competition, verifying winners, announcing the results of the consumer competition and handing over prizes, all in accordance with the relevant competition conditions and rules that also regulate the scope and manner of disclosure of personal data of data subjects).
The legal basis for the processing is the Data Subject’s free consent to the processing of personal data, which the Data Subject may revoke at any time. The provision of personal data is voluntary and will not be affected in any way by the HIGH TATRAS TOWER, or if the Data Subject does not provide his/her personal data, otherwise the Data Subject may not participate properly in a consumer competition organized by the HIGH TATRAS TOWER.
The personal data of the Data Subject may be provided in particular to the following recipients: contractual partners of HIGH TATRAS TOWER ensuring the implementation of consumer competition, courts, law enforcement authorities, bailiffs, lawyers providing legal services to HIGH TATRAS TOWER.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a Third country or international organization.
Infoservice
The purpose of the processing of personal data is to handle inquiries and questions of data subjects addressed to HIGH TATRAS TOWER.
The legal basis for the processing is the Data Subject’s free consent to the processing of personal data, which the Data Subject may revoke at any time. The provision of personal data is voluntary and will not be affected in any way by the HIGH TATRAS TOWER. If the Data Subject does not give consent to the processing of his/her personal data, his/her request cannot be properly handled.
The personal data of the Data Subject shall not be provided to the recipients.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a Third country or international organization.
Handling of data subjects’ requests
The purpose of the processing of personal data is to handle requests of data subjects addressed to HIGH TATRAS TOWER pursuant to Article 12 et seq. GDPR Regulations.
The legal basis for processing is the fulfillment of a legal obligation within the meaning of Articles 12 to 22 of the GDPR and Articles 33 and 34 of the GDPR.
Provision of personal data of the Data Subject is a legal requirement and in the event of failure to provide them, HIGH TATRAS TOWER cannot fulfill its legal obligations under the GDPR Regulation and handle the Data Subject’s request.
To the extent necessary, the personal data of the Data Subject may be provided in particular to the following recipients: Office for Personal Data Protection of the Slovak Republic, processor, courts and law enforcement authorities, lawyers providing legal services to HIGH TATRAS TOWER.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a third country or international organization.
Prevention of the spread of dangerous contagious human diseases
The purpose of the processing of personal data is to take preventive measures in order to prevent or reduce the risk associated with the emergence or spread of dangerous contagious human diseases that have the scope of an epidemic or pandemic (at the time of introduction of this purpose of processing, this is a COVID-19 disease).
Thelegal basis for the processing of ordinary personal data is (I) fulfillment of the legal obligation of HIGH TATRAS TOWER, in particular pursuant to the Labor Code and Act No. 124/2006 Coll. on health and safety at work and amending certain laws, as amended, or other related legislation (i.e. Art. 6 par. 1 (c) of the GDPR Regulation); or (II) protection of vital interests of the Data Subject or another natural person, under which processing necessary for humanitarian purposes may be included, including the monitoring of epidemics and their spread (i.e. Art. 6 par. 1 (d) of the GDPR Regulation); or (III) fulfillment of a task carried out in the public interest, such as disease control and other health threats (i.e. Art. 6 par. 1 (e) GDPR Regulation).
Sensitive data are processed with the following exceptions: (I) the necessity of their processing due to the fulfillment of obligations and the exercise of special rights of the controller or the Data Subject in the field of labor law and social security and social protection law (i.e. Art. 9 par. 2 (b) of the GDPR Regulation); or (II) the necessity of their processing for reasons of public interest in the field of public health, such as protection against serious cross-border threats to health (i.e. Art. 9 par. 2 (i) of the GDPR Regulation); or (III) the need to protect vital interests of the Data Subject or another natural person (Art. 9 par. 2 (c) GDPR Regulation).
Provision of personal data of the Data Subject is a legal requirement and in the event of failure to provide them, HIGH TATRAS TOWER cannot fulfill its legal obligations under the relevant legislation; cannot fulfill the needs of the public interest; or cannot protect the vital interests of persons. Consent to the processing of personal data is therefore not required.
The personal data of the Data Subject may be provided to the following recipients: Office of Public Health of the Slovak Republic (or regional public health authorities), hospitals, law enforcement authorities or lawyers providing legal services to HIGH TATRAS TOWER.
HIGH TATRAS TOWER does not intend to transfer personal data of data subjects to a Third country or international organization.
VI
Processed Personal Data
HIGH TATRAS TOWER processes only those personal data that it strictly needs in particular for the performance of its business activity, for the fulfillment of its legal and contractual obligations and for the protection of its legitimate interests. HIGH TATRAS TOWER ensures that the Data Subject is only processed to the extent of personal data necessary to fulfill the purpose of the relevant processing. It also applies this principle of minimization of processing in relation to personal data provided to HIGH TATRAS TOWER based on the consent of the Data Subject.
VII
Data Retention Period
HIGH TATRAS TOWER stores personal data of data subjects for different periods of time, depending on the reason and purpose of their processing. In general, HIGH TATRAS TOWER processes personal data:
for the period required by the relevant generally binding legal regulation, if it processes personal data for the purpose of fulfilling its legal obligations;
for the duration of the contractual relationship established by the contract, or the duration of pre-contractual relations, if it processes personal data due to the performance of the contract;
for the duration of the legitimate interest pursued by HIGH TATRAS TOWER, if the processing of personal data is necessary for this purpose;
for the period expressly stated in the consent or until its withdrawal, if it processes personal data on the basis of consent.
In order to ensure that personal data are not retained for longer than necessary, HIGH TATRAS TOWER sets deadlines for the erasure or periodic review of personal data. Personal data may be processed only for as long as the purpose of their processing persists. After this time, the personal data will be destroyed without delay. The Data Subject may address a request to HIGH TATRAS TOWER at any time to indicate for how long his or her personal data will be stored.
After the expiry of the relevant period mentioned above, HIGH TATRAS TOWER is entitled to process personal data of the Data Subject only for compatible purposes or for special purposes such as archiving or statistics.
VII
Use of Cookies
Cookies are small text files that improve the use of a website, e.g. by enabling the recognition of previous visitors when logging into the user environment, remembering the visitor’s choice when opening a new window, measuring website traffic or how it is used for its user improvement. The HIGH TATRAS TOWER website www.tatrastower.sk uses cookies to evaluate its traffic. The Data Subject may prevent these files from being stored on the electronic device of the Data Subject at any time by means of the appropriate web browser settings. Setting up the Data Subject’s browser is in accordance with Section 55 par. 5 of Act No. 351/2011 Coll. on electronic communications, as amended, considered consent of the Data Subject to the use of cookies on the website www.tatrastower.sk.
IX
Rights of Data Subjects
HIGH TATRAS TOWER considers it important that each Data Subject has control over his or her personal data and that personal data are processed lawfully. It is in the interest of HIGH TATRAS TOWER to enable data subjects to exercise their rights in relation to the protection of personal data as easily as possible. In the event that the Data Subject wishes to exercise some of his rights, he may do so electronically to the e-mail address: info@tatrastower.sk, by sending a written request addressed to the following address: HIGH TATRAS TOWER s.r.o., Sobotské námestie 1733/12, Poprad – Spišská Sobota 058, by phone at: + 421 903 602006 or even in person at the registered office of HIGH TATRAS TOWER with a request to meet with the responsible person.
The Data Subject has the right to request access to personal data concerning him or her from HIGH TATRAS TOWER. The Data Subject has the right to rectify, delete or restrict the processing of personal data, as well as the right to object to the processing of personal data and the right to their portability. The Data Subject shall also have the right to revoke the consent to the processing of personal data as well as the right to lodge a complaint with the supervisory authority.
Right of Access
The Data Subject has the right to obtain confirmation from HIGH TATRAS TOWER whether his or her personal data are being processed and, if so, the right to access such personal data. The Data Subject also has the right to obtain a copy of the personal data processed and additional information resulting from Article 15 of the GDPR, such as: purposes of the processing, categories of personal data concerned, retention period of personal data, etc.
Right of Correction
It is in the interest of HIGH TATRAS TOWER to process only current personal data about the Data Subject, and therefore we ask data subjects to actively use their right to complete incomplete personal data and to correct incorrect personal data.
Right of Deletion
The Data Subject has the right to have HIGH TATRAS TOWER delete personal data concerning him or her without undue delay, if any of the reasons for Article 17 of the GDPR are met. The reason for deletion may be, for example, where the data subject withdraws his or her consent to the processing, where the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, or where the data subject objects to the processing and the like.
Right of Restriction of Processing
The Data Subject has the right to have HIGH TATRAS TOWER restrict the processing of personal data if any of the cases listed in Article 18 of the GDPR occur. There will be a restriction, for example, if the Data Subject contests the accuracy of personal data (during a period allowing HIGH TATRAS TOWER to verify the accuracy of personal data) or if the processing is unlawful and the data subject objects to the erasure of personal data and requests a restriction of their use instead.
Right of Data Portability
Where the processing of personal data is carried out by automated means and the legal basis for the processing of personal data is the consent of the data subject or the performance of the contract, the Data Subject has the right to obtain personal data concerning him or her, which he or she has provided to HIGH TATRAS TOWER, in a structured, commonly used and machine-readable format and has the right to transfer these data to another controller. In the interest of the Data Subject and as far as technically possible, HIGH TATRAS TOWER will transfer the relevant personal data directly to another Controller.
Right to Object and Automated Individual Decision-Making
The Data Subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data relating to him or her carried out for the purposes of legitimate interests pursued by the Controller, including objecting to any subsequent profiling. HIGH TATRAS TOWER may not further process personal data unless it proves the necessary legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject or grounds for proving, exercising or defending legal claims.
The Data Subject has the right not to be covered by a decision of HIGH TATRAS TOWER, which is based solely on automated processing, including profiling, and which has legal effects concerning him or her or similarly significantly affect him or her.
Right to Lodge a Complaint
If the Data Subject suspects that HIGH TATRAS TOWER processes personal data unlawfully, he/she is entitled to lodge a complaint with the supervisory authority. For the territory of the Slovak Republic, the Supervisory Authority is the Office for Personal Data Protection of the Slovak Republic, registered office: Hraničná 12, 820 07 Bratislava, Slovak Republic, tel.: +421/2/ 3231 3214, web: www.dataprotection.gov.sk, e-mail: statny.dozor@pdp.gov.sk.
Right of Consent Withdrawal
In the case of the processing of personal data for which the Data Subject’s consent is required under the Privacy Legislation, HIGH TATRAS TOWER requires the Data Subject’s consent to the processing of his or her personal data for the relevant purpose of processing, which is a clear expression of will and is a free, specific, informed and unambiguous expression of consent to the processing of personal data relating to him or her. Where the Data Subject has given his or her consent to the processing of his or her personal data for a specific purpose, he or she shall have the right to withdraw his or her consent at any time, without prejudice to the lawfulness of the processing based on the consent given before its withdrawal.
HIGH TATRAS TOWER shall, without undue delay, provide the data subject with information on the measures taken at the request of the data subject under this Article no later than one month after receipt of the request. That period may be extended, if necessary, by a further two months. HIGH TATRAS TOWER shall inform the Data Subject of any such extension within one month of receipt of the request, together with the reasons for the delay. If the Data Subject has lodged an application by electronic means, the information shall, as far as possible, be provided by electronic means, unless the Data Subject has requested otherwise.
If HIGH TATRAS TOWER fails to take action at the request of the Data Subject, it shall, without delay and at the latest within one month of receipt of the request, inform the Data Subject of the reasons for the failure to act and of the possibility to lodge a complaint with the supervisory authority and to seek judicial redress.
All measures taken pursuant to Articles 15 to 22 and Article 34 of the GDPR shall be provided free of charge.
X
Final Provisions
In the event of any questions related to the protection of personal data, we ask data subjects to contact HIGH TATRAS TOWER in the form that suits the Data Subject best.
HIGH TATRAS TOWER is entitled to change the privacy policy, in particular in order to incorporate legislative changes,update the purposes and means of processing and the like. HIGH TATRAS TOWER will not limit the Data Subject’s rights under the Privacy Legislation by changing this Privacy Policy if necessary. If this Privacy Policy is modified, HIGH TATRAS TOWER will notify Data Subjects of the publication of the new version of this Privacy Policy on its website.
In Poprad, 12/14/2020